last executing test programs:

39.999860754s ago: executing program 1 (id=928):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040))
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000640ffffff0008000340000000084c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000804000000002040002800c0004400000000000000005140000001000010000000000000000000084000a000000"], 0xe0}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000070000000c00018008000700e533f7", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x880)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r3)

39.772020897s ago: executing program 1 (id=929):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x2c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x2c}}, 0x0)

17.846121583s ago: executing program 1 (id=933):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @broadcast})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @broadcast}) (async)

17.843773968s ago: executing program 1 (id=936):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)

17.841829335s ago: executing program 1 (id=938):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000014000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x3c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @volatile={0x6, 0x0, 0x0, 0x9, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x43}, @func={0xd, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x30]}}, &(0x7f0000000280)=""/12, 0x5b, 0xc, 0x1, 0x8, 0x10000}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x3, <r9=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x2, 0x1, 0x0, r5}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @alu={0x4, 0x0, 0x8, 0x1, 0x3, 0x4, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x7, 0xae, &(0x7f0000000340)=""/174, 0x41000, 0x1, '\x00', r7, @fallback=0x2b, r8, 0x8, &(0x7f0000000600)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r9, r4, 0x9, &(0x7f0000000680)=[r3, r5], &(0x7f00000006c0)=[{0x4, 0x3, 0x6, 0x6}, {0x4, 0x1, 0x2, 0xb}, {0x1, 0x5, 0xc, 0xa}, {0x0, 0x2, 0x6, 0x2}, {0x4, 0x3, 0xb, 0xc}, {0x5, 0x4, 0x9, 0x4}, {0x2, 0x4, 0xc, 0xa}, {0x2, 0x1, 0xc, 0x1}, {0x4, 0x2, 0x0, 0x3}], 0x10, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r5}, 0xc)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="02"], 0x10)
socketpair(0x2, 0x1, 0x100, &(0x7f0000000440))

10.810738999s ago: executing program 1 (id=941):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.132452355s ago: executing program 0 (id=1089):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}, 0x1, 0x0, 0x0, 0xc060}, 0x2800)

4.033311181s ago: executing program 0 (id=1090):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000280)={0x1d, r2}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
close(r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff)
r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/cgroup\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000408001d00", @ANYRES32=r11, @ANYBLOB="080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = getpid()
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r9, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r13}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44040)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000ff7f00001c001a800800038004000500080000003e"], 0x44}}, 0x0)

3.756165569s ago: executing program 0 (id=1093):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd", 0x2a}], 0x1) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x2, 0x0, 0x0, 0x6, 0x4, [{0xd, 0x9}, {}, {0x1, 0x1}, {0xe, 0x6}, {0x7, 0x80000000}, {0x6, 0xe}, {0x2, 0x7}, {0x1, 0xb6c}, {0xf, 0x6}, {0xf, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x30]}}, 0x0, 0x2a}, 0x36) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0xfffff49b, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)

3.627156433s ago: executing program 0 (id=1095):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, 0x8)

3.511952185s ago: executing program 0 (id=1097):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB], 0x68}}, 0x0)
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f832e130ce5086dda5e986f34c10d8c39c", 0x17, 0x80008c0, &(0x7f0000000140)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @remote}, 0x14)

3.395721761s ago: executing program 0 (id=1098):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r1, 0x0, 0x12, 0x0, &(0x7f0000000700))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x3, 0x400}, 0x50)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4) (async)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000080))
connect$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x40)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100abd5f9ba2d4adf00000000000000001c0000007afcff8ed1d83375c000000080"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.167048518s ago: executing program 3 (id=1110):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f00000000c0)="8d034ba11ba70430fa310aa45b1c8d4a8c2ebdf258c6ace19ae5aed9feed36fc618b537f6d2c125d3d976375dba1bb0e4abd7a2647241c11cafc64b593730131e5abeae252cf418318e93b88ecfee209aa5821f40c5a096a1ec2ffa56b55f6740e16639fe141e2da6ac633e98748377e45a38477383dc3caf11132c759f19c48d0069e8c6c3d078f9b0b", &(0x7f0000000180), 0x4}, 0x20)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='nr0\x00', 0x10)
r2 = accept4(r0, 0x0, &(0x7f0000000240), 0x81800)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x8df, @private1, 0xfff}, @in6={0xa, 0x4e23, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}], 0x38)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f00000002c0)="5833044cf63217dbe9aa9cf8c0afc8dafd3928701679e997aae744320a3e80ae340ca5c4b31c416d40393dfb230fabc888f2d675c50d80661b7c899645f9e008d45f471511dbbcc19e1f258f66a42f0517d67785bc72e8338382021677ed939600fad447b478231858869ca3576070cd5fbd2b297d48c8a292ae0636118e7cac0bb36826ce0f7a894349c105452182af127cd03c557540563687d55553df5b0eb9ca54f78061265bc676924f1342af3e057dff0d0106cc398a85413d6f", 0xbd)
sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000fc0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f80)={&(0x7f00000003c0)={0xbb8, 0x1, 0x5, 0x401, 0x0, 0x0, {0x4, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x9}, 0xff, 0x7, 0x51c5, 0x4, 0x13, 'syz0\x00', "b891dffbf4380206008b2f01812f1b7bf62800fb30bde4fc8125dc66bf945edc", "eca54037b03221da3dc295e690d67ca90765c5e8422306c8c502ca0f57664ac4", [{0x2, 0x4, {0x1, 0x9af4}}, {0xfffb, 0x7717, {0x7, 0x6}}, {0x5, 0xc, {0x3, 0x1000}}, {0x0, 0x10, {0x1, 0x7}}, {0xc12e, 0x510, {0x0, 0x9}}, {0x4, 0x7, {0x3, 0x7}}, {0x0, 0x8000, {0x3, 0x6a}}, {0xff, 0x6, {0x2, 0x4}}, {0x7, 0x6, {0x3, 0x40}}, {0x0, 0xffff, {0x2, 0x2}}, {0x8000, 0x101, {0x0, 0xf}}, {0x9, 0xfff, {0x3, 0x7}}, {0xa3e, 0x34a, {0x2, 0xfffffff7}}, {0x4, 0x0, {0x0, 0x6}}, {0x4686, 0x4359, {0x2, 0x4}}, {0x7, 0x1, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x4}}, {0x5, 0x2, {0x0, 0x7}}, {0x200, 0x1, {0x3, 0x10}}, {0xbd2e, 0x7, {0x0, 0xdde}}, {0x913, 0x9, {0x1, 0xb}}, {0x0, 0x7, {0x2, 0x4}}, {0x3, 0x6, {0x3, 0x3}}, {0x0, 0x2, {0x0, 0x1}}, {0x9, 0x5, {0x0, 0xfff}}, {0x3, 0x64, {0x2, 0xfffffff9}}, {0x7, 0x5, {0x2, 0xffff}}, {0x3, 0x2, {0x1, 0x40f}}, {0x7fff, 0x7, {0x1, 0x10001}}, {0x4, 0x9, {0x0, 0x8}}, {0x9, 0x2, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x2ef5}}, {0x7b5b, 0x9, {0x3, 0x496}}, {0x5, 0x5, {0x3, 0x6}}, {0x10, 0x3, {0x0, 0x8000}}, {0x5, 0xff, {0x0, 0x10000}}, {0x80, 0x3, {0x0, 0xfffffffc}}, {0xf, 0x9}, {0x5, 0x1, {0x2, 0xffff}}, {0x76d5, 0x1, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0xc, 0xd, 0x8, 0x2, 0x5, 'syz0\x00', "c9802e4eb024c17e4d217c755be77ccc4ca1b5bb038d94b6adc28cf542609221", "02ec55f671b661a7a9eaa2ae916acf66ac6663b41481ea30180ad9506279004c", [{0x13, 0x1c0, {0x2, 0x7}}, {0xf20c, 0x9, {0x0, 0x101}}, {0x6, 0xff80, {0x2, 0x9}}, {0xf784, 0x5, {0x2, 0x9}}, {0xfffd, 0x87c, {0x0, 0xafd}}, {0x1, 0x6ad0, {0x2, 0x8}}, {0xe, 0x6, {0x1, 0x6}}, {0x0, 0x6, {0x0, 0x3}}, {0xf1, 0xda6, {0x2, 0xc000}}, {0x0, 0x7, {0x0, 0x10}}, {0x3, 0x8000, {0x0, 0xcb3c}}, {0xccd4, 0x6, {0x3, 0xa}}, {0x5, 0x7, {0x0, 0x7}}, {0x2, 0x6, {0x3, 0x1ff}}, {0x3, 0x9, {0x2, 0x4}}, {0x8, 0x7, {0x1}}, {0x3, 0x6, {0x1, 0x6}}, {0x4, 0x7, {0x1, 0xcd63}}, {0xe, 0x7, {0x2}}, {0x400, 0x2, {0x2, 0x5}}, {0xc, 0x5, {0x1, 0xc}}, {0x10, 0xfff}, {0x0, 0x0, {0x1, 0x1000}}, {0x4, 0xc0bc, {0x3, 0xd}}, {0x401, 0x0, {0x3, 0xb911}}, {0x40, 0x9b, {0x0, 0xfffffff9}}, {0x6680, 0xce57, {0x1, 0x9}}, {0x6, 0x6, {0x0, 0xd}}, {0x0, 0x7f, {0x3, 0x5f}}, {0x6, 0x6, {0x0, 0x6}}, {0x58d, 0x6, {0x0, 0x9}}, {0x7c56, 0x3, {0x3, 0x9}}, {0x9, 0x5, {0x1, 0x800}}, {0x4, 0x7, {0x1, 0xd57}}, {0x100, 0xd, {0x1, 0x5}}, {0x7, 0x6, {0x1, 0xd4}}, {0x5, 0x6, {0x1, 0x5}}, {0x8c7, 0x55a, {0x3, 0x2}}, {0x55, 0x4, {0x2, 0x1}}, {0x800, 0x4, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x7, 0xd, 0x100, 0x365, 0x16, 'syz1\x00', "6b737a46e8825c22a8b5524ccb51adcc13e63889f5146109251f726360573908", "6a186e25dc67a0326452fb678ac5716985f5a01c060d05b7fe7350c58565521c", [{0x3ff, 0x4, {0x0, 0x7a}}, {0x452f, 0x0, {0x0, 0xb}}, {0x2, 0x7, {0x0, 0x186}}, {0x6d1, 0x9b8d, {0x1, 0x9}}, {0x4, 0x4, {0x1, 0xf}}, {0x1, 0x9, {0x2, 0x7}}, {0x4, 0xef, {0x0, 0x6}}, {0xfe00, 0x3, {0x0, 0x8}}, {0x2, 0x6, {0x0, 0x25ff8000}}, {0x257, 0xab, {0x1, 0x6}}, {0x8, 0xc774, {0x1, 0x3}}, {0x2, 0x5, {0x2, 0x1}}, {0x1, 0x6, {0x2, 0x9}}, {0x1, 0x2, {0x0, 0x6}}, {0x2, 0x100, {0x0, 0x1ff}}, {0x8, 0xd1b2, {0x3, 0x3}}, {0x400, 0x9, {0x0, 0xe5a5}}, {0x2, 0x8, {0x3, 0x1}}, {0xfffa, 0xc8, {0x0, 0xb}}, {0x0, 0x1, {0x1, 0xffffffff}}, {0xffff, 0x5, {0x0, 0x3}}, {0x5, 0x6, {0x1, 0x7}}, {0xff, 0x7, {0x3, 0x7}}, {0x86, 0xdbd, {0x3, 0x3f9}}, {0x0, 0x18, {0x1, 0x6}}, {0x9, 0x480, {0x3}}, {0xdf2, 0x3, {0x2, 0x9}}, {0x3ff, 0x9, {0x15ada7ef0be325ff, 0x1ff}}, {0x3a6, 0xe0f, {0x2}}, {0x936, 0x7fff, {0x3, 0x3}}, {0x9, 0x5, {0x3}}, {0x4268, 0x3, {0x0, 0x1}}, {0xc83e, 0x8001, {0x2, 0xa}}, {0x1ff, 0x9, {0x0, 0x5}}, {0x3ff, 0xfec, {0x3}}, {0xe, 0x81, {0x2, 0x9}}, {0x6, 0x8000, {0x1, 0xd4b}}, {0x101, 0x3}, {0x0, 0x8, {0x3, 0xfffffffa}}, {0x2, 0x3, {0x3, 0xf}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x4, 0x80, 0x3, 0x8, 0x1e, 'syz0\x00', "ee7d933a6587f643f03afb0b9cc06c6abaf15bf2e1c3ba3ebbe1ba526af29e60", "26bc23bffff78c6d843b96ad43f8364ef2232d5111d2c231ec1857c1c47f4465", [{0x3, 0x6, {0x0, 0x5}}, {0x59ff, 0x6b3, {0x1, 0x9}}, {0x800, 0x6, {0x3, 0x1}}, {0x8, 0x7fff, {0x1, 0x1}}, {0x3, 0xfffd, {0xf84cedeafe48cc00, 0xffff}}, {0x1, 0x7, {0x0, 0x9}}, {0xfdf0, 0x1, {0x1, 0x1}}, {0x3, 0x4, {0x2, 0x1}}, {0x9, 0x1, {0x2, 0x2}}, {0xff, 0xfbff, {0x3, 0x6}}, {0xf, 0xfff9, {0x0, 0x4}}, {0x3, 0x5, {0x2, 0x4}}, {0x2, 0x6, {0x1, 0x2}}, {0x3, 0x0, {0x1, 0xf227}}, {0x40, 0x771, {0x2, 0x3}}, {0xd, 0x5, {0x3, 0xffffffb3}}, {0x7, 0x4, {0x2, 0x80000001}}, {0x9, 0xa, {0x3, 0xfff}}, {0x9, 0x8001, {0x1, 0x1}}, {0x3, 0x2, {0x1, 0x8}}, {0xfff9, 0x9, {0x3, 0xfffffffb}}, {0x8, 0x3, {0x2, 0x80}}, {0xe3, 0xeae, {0x3, 0x1}}, {0x582f, 0x0, {0x2, 0x3}}, {0x0, 0x1, {0x1, 0x6a}}, {0x0, 0x401, {0x3, 0x80000000}}, {0xd5, 0x81, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x8}}, {0x8000, 0x7, {0x0, 0x4}}, {0x6, 0xfff, {0x2, 0x4}}, {0x7f, 0x200, {0x0, 0x767}}, {0x6, 0x4, {0x2, 0x9a5}}, {0x8, 0x2, {0x2, 0x80000000}}, {0x7, 0xfff, {0x1, 0x14}}, {0x3, 0x9, {0x1, 0x7}}, {0x8001, 0xe, {0x2, 0x1}}, {0x9, 0x3, {0x1, 0x7}}, {0x8001, 0x4, {0x1, 0x80}}, {0x7, 0x8001}, {0x4, 0x0, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x10, 0x0, 0x200, 0x3, 0x1, 'syz1\x00', "9f008a54e248931eea9cb22fd9b7b174cf4df2d6fb87975275bbf2c8346b1ba9", "ade32c2118a9b4638d7e7aefea6273b479a7128ce10ea2762a7587fe03a9156e", [{0x3, 0x2, {0x0, 0x7f}}, {0x0, 0x1f1, {0x1, 0x800}}, {0x9, 0x3, {0x3, 0x9}}, {0x8001, 0x10, {0x2, 0xf}}, {0xa, 0x6, {0x3}}, {0xfffc, 0x0, {0x2, 0x3}}, {0x1, 0x6, {0x1, 0x2}}, {0x4, 0xff, {0x1, 0x1}}, {0x0, 0x9, {0x1, 0x3}}, {0x8, 0x0, {0x1, 0x6}}, {0x7c67, 0xff7f, {0x0, 0x19c6}}, {0x140, 0x0, {0x1}}, {0xfe01, 0xe0, {0x1, 0x4}}, {0x2b8f, 0x2, {0x0, 0x3}}, {0x6000, 0x1, {0x2, 0x10000}}, {0x9f4, 0x8, {0x2, 0xa}}, {0x245f, 0x1000, {0x0, 0xb2ad}}, {0xf536, 0x1000, {0x1, 0x3}}, {0x1, 0x42, {0x1, 0x4}}, {0x401, 0x8, {0x2, 0x1}}, {0x8, 0x3}, {0x9, 0x1289, {0x2, 0x2}}, {0x5, 0x3, {0x0, 0x1}}, {0x7, 0x7ff, {0x0, 0x3}}, {0x9, 0x8000, {0x3, 0x400}}, {0xc, 0x6, {0x1, 0x8}}, {0x5a1, 0x3, {0x3}}, {0x3, 0x3ff, {0x3, 0x6}}, {0x6, 0x9, {0x3, 0x7f}}, {0x81, 0x5, {0x3, 0x101}}, {0x0, 0xbc9, {0x0, 0xfff}}, {0xf9a2, 0x1, {0x0, 0x4}}, {0x8001, 0x7, {0x1, 0x3}}, {0x1ff, 0x5, {0x3, 0x9}}, {0xfc, 0xc0, {0x2, 0xa12}}, {0x1, 0x0, {0x2, 0x10001}}, {0x7b, 0xd, {0x1, 0x4}}, {0x5a5, 0x1}, {0x52, 0x7, {0x2, 0xc28}}, {0x100, 0xffff, {0x0, 0xf8}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40004}, 0x800)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0x4)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2010)
socket$netlink(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001180)="2396af2e02048ae09d8fac6ae8302446", 0x10)
socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x8080)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x34, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '+\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xdd42114538967b15}, 0x4000001)
sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x18c0}, 0x4010)
sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x14, r8, 0x300, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x58cf92960c20b57}, 0x4000041)
openat$cgroup_int(r6, &(0x7f0000001640)='memory.swap.max\x00', 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r7)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001700)={'wpan0\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001740)={'wpan3\x00', <r12=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r9, &(0x7f0000001880)={&(0x7f0000001680), 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, r10, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4c080)

1.943921169s ago: executing program 3 (id=1112):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28)
sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="bf", 0x1}], 0x1}, 0x20000000)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0xc000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) (async)
sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="bf", 0x1}], 0x1}, 0x20000000) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0xc000) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) (async)

1.863530142s ago: executing program 4 (id=1114):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {0x0, 0xfffffffc}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002000000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90)

1.643783073s ago: executing program 3 (id=1116):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r0, 0xc)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="01012232b87cfddbdf25230000000a0001007770616e30"], 0x20}, 0x1, 0x0, 0x0, 0x4040881}, 0x44)
accept(r0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
listen(r0, 0xc) (async)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async)
sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="01012232b87cfddbdf25230000000a0001007770616e30"], 0x20}, 0x1, 0x0, 0x0, 0x4040881}, 0x44) (async)
accept(r0, 0x0, 0x0) (async)

1.492908193s ago: executing program 3 (id=1117):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))

1.403916862s ago: executing program 2 (id=1118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r1, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x10040847}, 0x240008c4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00068018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r8, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r9, 0x107, 0xb, 0x0, &(0x7f0000000040))
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000880)=ANY=[@ANYRES64], 0x38}}, 0x90)
sendmsg$NL80211_CMD_ABORT_SCAN(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4240000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8c6}, 0x4000849)

1.175895094s ago: executing program 3 (id=1119):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="8000b2000a000200"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async)
bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
r3 = socket(0x2, 0x80805, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={r6, 0x101}, &(0x7f0000000200)=0x8) (async)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={<r7=>r6, 0x101}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe, 0x4191}, &(0x7f00000004c0)=0x90) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r7, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe, 0x4191}, &(0x7f00000004c0)=0x90)
socket$alg(0x26, 0x5, 0x0) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="f78d9ca38fff4811bf5216c36ee9466aa5bb3448412ba8", 0x10}], 0x0, &(0x7f00000001c0)=[@assoc={0x0, 0x117, 0x4, 0x1001}], 0x20}], 0x1, 0x41)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
recvmsg$qrtr(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)

1.131090406s ago: executing program 2 (id=1120):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="06000000000000001c0012800b00010067656e65766500000000008008000200ac1414bc08000400fdffffff0800040009000000080001"], 0x5c}, 0x1, 0x2}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000400))
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @local}]}}]}, 0x40}}, 0x20004084)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'gretap0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc3225cc3d71ba979}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf250b0000004400018008000100", @ANYRES32=r1, @ANYBLOB="1400020076657468315f746f5f6261746164760008000100", @ANYRES32=r2, @ANYBLOB="0800030003000000140002007663616e300000000400050000000000500001800800030000000000140002007465616d5f736c6176655f300000000014000200626d6e645f736c6176655f300000000014000200726f736530000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x51}, 0x81)

931.89363ms ago: executing program 4 (id=1121):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe80000000000000"], 0x68}}, 0x0)
sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f832e130ce5086dda5e986f34c10d8c39c", 0x17, 0x80008c0, &(0x7f0000000140)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @remote}, 0x14)

869.504767ms ago: executing program 3 (id=1122):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000700)=@sack_info={0x0, 0xff, 0x95}, 0xc)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x576, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="60eef1465dbea24ace0f14ce6b49e9ca2bebefdffb72ea2fca64935f5d25af72fc56f5cb1c37a98e96a3dd2ead171002b1c1f0fc821938ce4d992b904c1315a32903e18ec136b2c8558e724a6218b46546e07951bb911df386d4725a8374", 0x5e}, {&(0x7f0000000080)="198d0be463ee30639eb4710a549dc4dce668948289c1ff893635c8d298ff3d332b8db051858d45c5ed1971cc0d7d6247563eb42a3ece2b6002a06dc7588eeea599d6f08c63639fe2894de0fc0a381e45c19689c02650060d0687012447b4a5714305281fda14c5bd7177645329b97cae34fdf5e82786f53171076044a5f8d8bb40d0eee3e81a595d9fc9604a60253f0791758386c8066ce2", 0x98}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000200)="129071330561c41209ec39d81a895e16b7b404d8dae26f2e461c6285abd78cb273e58867c0cf5074e44dc989442db386cb245e9bd0b021ae1c17e1978a07914daeb5891c760a0c510caf3aab3d8733eadb0d2cd28c233ae9fd7d6f3e8f5b626820a3548f4eeb2605816c41070b97c4e43f5bf3d17b83009908cc6c9aada80de761d11564c7007b82150138a3f1edaf73b67670afa8b5312a9b6a88264a", 0x9d}, {&(0x7f0000000400)="b6877e5d74654c57d9240c373825961dc6573d1b3a5a6b13a41569c5dffdef52419a9639371f8e5df7b58114c64a192e246830de52792d49ef8e1cd8323cc33b78cb03a2a770471fbad86a3ef187c7f888f40ba0207a82eaad6e6b16040efaee1ab7af76ac6d4e322b26a3787808e244c8b94dce12b96bb13f9b0c9faae1571a4cebe8cb27338ab3afb361cd1c2ef2d118ba0ff212f05ee7d5efe0b57116442dd8cb63925f9cd28b7fea3b68892ac585c368e9071da4fed6f76f2c3635d4fd77e9e287f0316d13e5cccbdc53", 0xcc}], 0x5)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r2)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r4, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851)
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x800)
writev(r1, &(0x7f00000005c0), 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}]}]}, 0x38}}, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x4c, 0x0, &(0x7f0000001000))
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000500)={<r10=>r9, 0x7}, &(0x7f0000000640)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000600)={r10, 0x9}, &(0x7f0000000540)=0x8)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000001400000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280050004000d00000004000600"], 0x40}}, 0x0)
r12 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', <r13=>0x0})
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0xfffffffffffffdc7}}, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

756.073491ms ago: executing program 2 (id=1123):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x15, 0x0, 0x0, @multicast1}}}}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x16, 0x0, &(0x7f0000000240))
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

667.001295ms ago: executing program 2 (id=1124):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, 'wpan0\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000801)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)='NLBL_MGMT\x00', <r3=>0x0}, 0x30)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f0000000800)=""/257, 0x101}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000a40)=""/231, 0xe7}], 0x4}, 0x4}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/118, 0x76}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000005080)=""/4093, 0xffd}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x22, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x4018, r0}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, 0xffffffffffffffff, 0x21, 0x20, 0x0, @void, @void, @void, @value=r3}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, r2, 0x60b, 0x70bd25, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x8040)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c000280080002400000000c080003400000000108000140"], 0xdc}}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1)

657.300139ms ago: executing program 4 (id=1125):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x1006}})

435.833697ms ago: executing program 2 (id=1126):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00034001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020002907800b7"], 0x0)

410.411052ms ago: executing program 4 (id=1127):
r0 = socket(0x10, 0x80002, 0x0)
pipe(&(0x7f00000007c0)={<r1=>0xffffffffffffffff})
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000a80)={{r1}, 0x1, 0x1, 0x9})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x4}, @TCA_SAMPLE_RATE, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0x6, 0x4}}}]}]}, 0x60}}, 0x0)

177.435831ms ago: executing program 4 (id=1128):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
close(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

127.776214ms ago: executing program 2 (id=1129):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5})
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x80}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40)

0s ago: executing program 4 (id=1130):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc)
r2 = accept(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x80)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48)
r5 = socket$netlink(0x10, 0x3, 0x13)
r6 = gettid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001740)={0x0, <r7=>0x0}, &(0x7f0000001780)=0xc)
r8 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r8, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r10 = getuid()
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r11 = getgid()
r12 = getpid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001840)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@local}, 0x0, @in6=@local}}, 0x0)
r14 = getgid()
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000034c0)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f00000010c0)="85fb28284d31242b02ff2bda44e0e6e2e389bec7c4d737c5b0eda6813057b0b7d1fe69dab57d893b1e7ce02b0479920ae442d20a47a14cb4feab69416c06162698921116a181239270bdd172346d4069a05a92ef", 0x54}], 0x1, &(0x7f0000001180)=[@rights={{0x24, 0x1, 0x1, [r4, r4, r4, r4, r5]}}], 0x28, 0x10}}, {{0x0, 0x0, &(0x7f0000001580)=[{0x0}, {&(0x7f0000001380)="1623166a613075b85a4a47e002cf83f8eb41bbc256e09954adac6e11b71f1d6642d364e5a309d5cec79867fe4af5bc5b3cf0b7b4db4c712a03d48b534f1400865b7d648d7dc82fdf72122aadbbbcdf5391ef6a7fea2c3f5e631df4a582adea1882517ab86eee25", 0x67}, {&(0x7f0000001400)="d6e303062bde0acc109bda65692b04fab4be8a789573e120f1c5eccecaac2f23beb67c3d80960775da65a4fd63a6be9779db02fa137ef4f9916c7f231ee08999767f76facc6b125c137875f9e3fdf25cecfc45dd5e045c95cf6470e0fdf102f8179b49691db732741f4531046a002db5b1cd822417781924105812788a17c0c29d47a494b3d07504f8746af33ab9992c508ffa712f2772b3be7dd0565af45049d80e5dff36d1f0d893f39c4ff298854e", 0xb0}, {&(0x7f00000014c0)="ee187428deb8af785974e608357a92a03acdd53fb49517ed2b2ca6b7f167a563fdf80fcdff68cdec499a90bada4b49d11f9b99c9a8877b7eba78d6a0e7f47a4500d6256244dd719303a0d6dbad6c0c089d5c7da8119f91984ac7081940a81623ccb6175130e191a2309965dd2a1505329b8151ef6eed92962e47877eb2aa47a1f081d4110f23f582d52581270e0a8bb3407d081565242de31b768266d1bfc97e8777e282ba4257a07ce867f68717e5e0297226", 0xb3}], 0x4, 0x0, 0x0, 0x24000094}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001600)="814c784f14a012c8cd083418e6e14bf5aa4ea47900c7bdeefe684fb440e78d739bf73a79a207bf6f4a4c76f52cb9fe1a5f37b5b7527771e4c45fdaafb700242dbb37bec66883e08605663fa9b3d743c4387a10e2e562e51d4006d471374c233f35bde45b9d3d06677ef002b3fcc13092a59318ff9d694da172bc3a7cceb6393ca127b3118e457fab1f44f7e843e0b17c34a4709ca673646ddb814ffea3558a6aaceaaf1f062b51b6", 0xa8}], 0x1, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x78, 0x40}}, {{&(0x7f0000001a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000000280)="0683ac8ca330b3b090c54089", 0xc}, {&(0x7f0000001ac0)="0087108d8142c1bfe9afe53b56a3f9cbf88ae4591d33ddbfba436d0e2491bb34ec98aac1bcc4b8e8b19f1f83051a4ca552e97e6f614e9d9f7eab77a59fcefe8fd365a959c21ecfedb9a93dd534d2aa3a3357245e6bd51777abc3706a51b0fb61417b7a67ec780ce1980c6a33345d179b51f73d744d358ba3d20b988b8e56bae1df89dd3c0a86dfc3b87379fb7d204b934f02ae952d91d1075043d836d4b8bf87dae487f3b0b5c4961642c3e313f6d17437ce88b56ec0e49579ee876ceed1cf0f3fca3dfcd3487ea119c5caa9f2d8ce82381c98a548a14106ca2bdf66045fa38c50e67e76706c68ca53911bbef680217d8eed46ce24", 0xf5}, {&(0x7f0000001bc0)="c480621cc12a75051423a2445b86dffe58707f9e55ef0ed61b3b47749ce4efbdfb5d1ebc182cd1517046b330b78c3b05b840fcacb3108dbd005b69", 0x3b}, {&(0x7f0000001c00)="47c8620ce64c39846120b731", 0xc}, {&(0x7f0000001c40)="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", 0xe00}, {0x0}, {&(0x7f0000002cc0)="693c1f8d35fbe6d6e89751a3c076dff7e060074598fba1b85fda89c161607921532317597ce4d8222cb4002081dca46cf2b5146959e4141d60cba2db4925de66c033a98dbeb054706a652ee674e3491c28a0003d45bbef4a4e924bcc4c689960cf51ce41beff5774b25bc6883be330534ef09f4b9637db19a2134f4877350bdb490fa13fe7c13186e13319fb939453a733737f6f0b146cbbb913681e8291ba227e34e6358b4530f847755b6b24862d383fc0ddf98bc5019b77eac66a4e1e3b50cc5c6b30318a4bdc42757fa70c120756b1a3b999dd04d33dec", 0xd9}], 0x7, &(0x7f0000000580)=[@rights={{0x20, 0x1, 0x1, [r4, r4, r4, r4]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x50, 0x850}}, {{&(0x7f0000003180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003440), 0x0, &(0x7f0000003480), 0x0, 0x10}}], 0x5, 0x801)
ioctl$TUNSETGROUP(r3, 0x400454ce, r11)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getspdinfo={0x14, 0x25, 0x300, 0x70bd27, 0x25dfdbfb, 0x0, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x8884)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40800000000000073114000000000008510000002000000b7000000000000009500c200000000009500001200000000f593d26bc6fa2d343eac9290dcd80ae286e2d02b53c0a1a0284786a4715338416e7ab1f3a8b3163df0353c209c42e1e46c9b6f9acfb9db20783be91d051bbfa1512dc8a244e4d473dc55ad"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts.
[   87.547255][ T5834] cgroup: Unknown subsys name 'net'
[   87.676170][ T5834] cgroup: Unknown subsys name 'cpuset'
[   87.685754][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   89.405047][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   91.954754][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   91.972146][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   91.981196][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   91.989042][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   91.997824][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.005753][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.061791][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.071647][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.082109][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.091719][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.186714][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.195127][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.203071][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.210604][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.226318][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.232602][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.234912][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.243688][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.248800][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.255814][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.270113][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.280825][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.288805][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.296743][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.303924][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.950157][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   92.970500][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   93.235892][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   93.309885][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.319536][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.329630][ T5848] bridge_slave_0: entered allmulticast mode
[   93.338559][ T5848] bridge_slave_0: entered promiscuous mode
[   93.365236][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   93.384364][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.391822][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.399016][ T5848] bridge_slave_1: entered allmulticast mode
[   93.406575][ T5848] bridge_slave_1: entered promiscuous mode
[   93.436066][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.443474][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.450686][ T5844] bridge_slave_0: entered allmulticast mode
[   93.458210][ T5844] bridge_slave_0: entered promiscuous mode
[   93.470391][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.478243][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.485844][ T5844] bridge_slave_1: entered allmulticast mode
[   93.493654][ T5844] bridge_slave_1: entered promiscuous mode
[   93.539332][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   93.613833][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.626621][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.646379][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.709346][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.793065][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.800318][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.808051][ T5855] bridge_slave_0: entered allmulticast mode
[   93.816163][ T5855] bridge_slave_0: entered promiscuous mode
[   93.862970][ T5844] team0: Port device team_slave_0 added
[   93.873869][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.881063][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.889473][ T5855] bridge_slave_1: entered allmulticast mode
[   93.897785][ T5855] bridge_slave_1: entered promiscuous mode
[   93.908116][ T5848] team0: Port device team_slave_0 added
[   93.930717][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.938087][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.945458][ T5857] bridge_slave_0: entered allmulticast mode
[   93.953436][ T5857] bridge_slave_0: entered promiscuous mode
[   93.963378][ T5844] team0: Port device team_slave_1 added
[   93.997142][ T5848] team0: Port device team_slave_1 added
[   94.016945][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.026499][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.034414][ T5857] bridge_slave_1: entered allmulticast mode
[   94.042177][ T5857] bridge_slave_1: entered promiscuous mode
[   94.052269][ T5851] Bluetooth: hci0: command tx timeout
[   94.093942][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.100964][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.127754][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.139086][ T5851] Bluetooth: hci1: command tx timeout
[   94.193129][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.203121][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.210109][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.236730][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.250356][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.263792][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.286548][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.293935][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.301176][ T5854] bridge_slave_0: entered allmulticast mode
[   94.307531][ T5851] Bluetooth: hci2: command tx timeout
[   94.312986][ T5854] bridge_slave_0: entered promiscuous mode
[   94.323134][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.353697][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.360699][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.387761][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.398365][ T5167] Bluetooth: hci3: command tx timeout
[   94.404435][ T5851] Bluetooth: hci4: command tx timeout
[   94.405168][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.417698][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.425068][ T5854] bridge_slave_1: entered allmulticast mode
[   94.433604][ T5854] bridge_slave_1: entered promiscuous mode
[   94.469983][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.477406][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.503614][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.563781][ T5855] team0: Port device team_slave_0 added
[   94.592630][ T5844] hsr_slave_0: entered promiscuous mode
[   94.599491][ T5844] hsr_slave_1: entered promiscuous mode
[   94.625944][ T5857] team0: Port device team_slave_0 added
[   94.636642][ T5857] team0: Port device team_slave_1 added
[   94.644994][ T5855] team0: Port device team_slave_1 added
[   94.670004][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.683898][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.787379][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.794540][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.820960][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.839087][ T5848] hsr_slave_0: entered promiscuous mode
[   94.846151][ T5848] hsr_slave_1: entered promiscuous mode
[   94.854192][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.862076][ T5848] Cannot create hsr debugfs directory
[   94.888050][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.895191][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.921269][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.942397][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.949417][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.976736][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.010959][ T5854] team0: Port device team_slave_0 added
[   95.020307][ T5854] team0: Port device team_slave_1 added
[   95.027394][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.034484][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.061591][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.159496][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.167883][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.197404][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.212656][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.219663][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.245896][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.336349][ T5855] hsr_slave_0: entered promiscuous mode
[   95.344118][ T5855] hsr_slave_1: entered promiscuous mode
[   95.350259][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.358211][ T5855] Cannot create hsr debugfs directory
[   95.393523][ T5857] hsr_slave_0: entered promiscuous mode
[   95.400016][ T5857] hsr_slave_1: entered promiscuous mode
[   95.406551][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.414498][ T5857] Cannot create hsr debugfs directory
[   95.555843][ T5854] hsr_slave_0: entered promiscuous mode
[   95.562389][ T5854] hsr_slave_1: entered promiscuous mode
[   95.568484][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.577462][ T5854] Cannot create hsr debugfs directory
[   95.939637][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.980130][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.998083][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.033741][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.132734][ T5851] Bluetooth: hci0: command tx timeout
[   96.135349][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.159395][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.171807][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.187938][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.214482][ T5851] Bluetooth: hci1: command tx timeout
[   96.273103][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.295839][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.329559][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.340952][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.372354][ T5851] Bluetooth: hci2: command tx timeout
[   96.430822][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.452549][ T5851] Bluetooth: hci4: command tx timeout
[   96.452612][ T5167] Bluetooth: hci3: command tx timeout
[   96.478588][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.493707][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.509229][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.630634][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.659879][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.670644][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.684804][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.706495][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.755727][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   96.799256][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.806612][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.835699][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.842882][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.896874][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.945275][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   97.007231][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.014575][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.034436][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.066682][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.073915][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.117187][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.145632][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   97.191017][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.198279][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.237378][  T150] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.244586][  T150] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.269500][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   97.290057][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.343435][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   97.356850][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.364111][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.397279][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.404494][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.444896][  T150] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.452126][  T150] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.509110][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.516385][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.527929][   T24] cfg80211: failed to load regulatory.db
[   97.898246][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.958779][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.127123][ T5848] veth0_vlan: entered promiscuous mode
[   98.145927][ T5844] veth0_vlan: entered promiscuous mode
[   98.178210][ T5848] veth1_vlan: entered promiscuous mode
[   98.209486][ T5844] veth1_vlan: entered promiscuous mode
[   98.216814][ T5167] Bluetooth: hci0: command tx timeout
[   98.296186][ T5167] Bluetooth: hci1: command tx timeout
[   98.346482][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.394476][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.409333][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.423458][ T5844] veth0_macvtap: entered promiscuous mode
[   98.453501][ T5167] Bluetooth: hci2: command tx timeout
[   98.462813][ T5848] veth0_macvtap: entered promiscuous mode
[   98.477443][ T5848] veth1_macvtap: entered promiscuous mode
[   98.519178][ T5844] veth1_macvtap: entered promiscuous mode
[   98.531599][ T5167] Bluetooth: hci4: command tx timeout
[   98.535637][ T5851] Bluetooth: hci3: command tx timeout
[   98.549853][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.573103][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.590123][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.629966][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.657416][ T5855] veth0_vlan: entered promiscuous mode
[   98.666314][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.678674][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.689445][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.700678][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.730767][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.740190][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.749215][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.758624][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.794546][ T5855] veth1_vlan: entered promiscuous mode
[   98.827745][ T5854] veth0_vlan: entered promiscuous mode
[   98.935963][ T5854] veth1_vlan: entered promiscuous mode
[   99.026468][ T5855] veth0_macvtap: entered promiscuous mode
[   99.080698][ T5855] veth1_macvtap: entered promiscuous mode
[   99.081064][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.097402][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.106684][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.117173][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.148471][ T5854] veth0_macvtap: entered promiscuous mode
[   99.184605][ T5857] veth0_vlan: entered promiscuous mode
[   99.196584][ T5854] veth1_macvtap: entered promiscuous mode
[   99.231089][ T5857] veth1_vlan: entered promiscuous mode
[   99.239949][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.249472][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.277294][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.296607][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.304634][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.312650][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.374233][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.387869][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.396013][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   99.397013][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.421009][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.447627][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.483293][ T5857] veth0_macvtap: entered promiscuous mode
[   99.518243][ T5857] veth1_macvtap: entered promiscuous mode
[   99.549276][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.616557][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.650276][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.668777][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.692223][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.729823][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.812473][ T5972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6'.
[   99.836415][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.860831][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.893662][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.916549][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.928508][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.944785][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.953996][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.292860][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.300761][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.308651][ T5851] Bluetooth: hci0: command tx timeout
[  100.339499][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'.
[  100.371752][ T5851] Bluetooth: hci1: command tx timeout
[  100.501586][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.522866][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.533586][ T5851] Bluetooth: hci2: command tx timeout
[  100.614269][ T5851] Bluetooth: hci4: command tx timeout
[  100.614284][ T5167] Bluetooth: hci3: command tx timeout
[  100.665674][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.700319][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.817015][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.860604][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.899849][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.939147][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.399562][ T6004] netlink: 'syz.2.12': attribute type 49 has an invalid length.
[  101.415658][ T6005] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET)
[  101.601576][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'.
[  101.878001][ T6019] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15'.
[  101.945412][ T6017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15'.
[  101.950106][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15'.
[  102.048651][ T6028] netlink: 9 bytes leftover after parsing attributes in process `syz.3.17'.
[  102.102534][ T6030] netlink: 5 bytes leftover after parsing attributes in process `syz.3.17'.
[  102.155876][ T6028] gretap0: entered promiscuous mode
[  102.182967][ T6029] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18'.
[  102.210668][ T6030] 0�X��D: renamed from gretap0
[  102.321052][ T6030] 0�X��D: left promiscuous mode
[  102.326458][ T6030] 0�X��D: entered allmulticast mode
[  102.343222][ T6030] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  102.498842][ T6042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  102.533440][ T6040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23'.
[  102.662863][ T6049] netlink: 'syz.1.26': attribute type 1 has an invalid length.
[  102.745887][ T6058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.759540][ T6057] netlink: 'syz.3.27': attribute type 2 has an invalid length.
[  103.040503][   T30] audit: type=1107 audit(1751945697.481:2): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�$�.�~���`��V��"v}BW��;�_�k��yJx�"�B�U��n�����V9,d�7�g@!�5bh�v�=�Y�}1y���6�H�7yƄ�i�,�:�ҧ2�l����2��Clv%�.S�+�N�T0�\�����$��^+F��wE��qā��6zP�q���ZX�	�3\�LSx�9.�":���ؠ���U�Y5���JHx�@2Bs�(��o'
[  103.432912][ T6079] macvtap1: entered promiscuous mode
[  103.469306][ T6079] vlan0: entered promiscuous mode
[  103.487462][ T6079] macvtap1: entered allmulticast mode
[  103.509864][ T6079] vlan0: entered allmulticast mode
[  103.521118][ T6079] veth0_vlan: entered allmulticast mode
[  103.532806][ T6087] sctp: [Deprecated]: syz.4.36 (pid 6087) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.532806][ T6087] Use struct sctp_sack_info instead
[  103.777497][ T6083] veth0: entered promiscuous mode
[  103.787813][ T6082] veth0: left promiscuous mode
[  103.930793][ T6098] netlink: 'syz.4.40': attribute type 1 has an invalid length.
[  104.264764][ T6114] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.326798][ T6115] tipc: Started in network mode
[  104.348272][ T6115] tipc: Node identity 0900000000000000144f, cluster identity 11
[  104.665286][ T6126] bridge1: entered promiscuous mode
[  104.670721][ T6126] bridge1: entered allmulticast mode
[  104.879873][ T6134] xt_ecn: cannot match TCP bits for non-tcp packets
[  104.912270][ T6134] Bluetooth: MGMT ver 1.23
[  105.242686][ T6152] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  105.478683][ T6163] __nla_validate_parse: 13 callbacks suppressed
[  105.478703][ T6163] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.65'.
[  105.580574][ T6167] netlink: 'syz.2.66': attribute type 4 has an invalid length.
[  105.688382][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'.
[  105.894272][ T6179] Zero length message leads to an empty skb
[  105.932476][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.70'.
[  106.274628][ T6190] netlink: 32 bytes leftover after parsing attributes in process `syz.1.74'.
[  106.400506][ T6197] Bluetooth: MGMT ver 1.23
[  106.854726][ T6214] netlink: 'syz.1.82': attribute type 1 has an invalid length.
[  106.914654][ T6219] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  107.366071][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'.
[  107.464485][ T6228] raw_sendmsg: syz.4.87 forgot to set AF_INET. Fix it!
[  107.536740][   T30] audit: type=1107 audit(1751945701.981:3): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�$�.�~���`��V��"v}BW��;�_�k��yJx�"�B�U��n�����V9,d�7�g@!�5bh�v�=�Y�}1y���6�H�7yƄ�i�,�:�ҧ2�l����2��Clv%�.S�+�N�T0�\�����$��^+F��wE��qā��6zP�q���ZX�	�3\�LSx�9.�":���ؠ���U�Y5���JHx�@2Bs�(��o'
[  107.985442][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.97'.
[  108.000739][ T6259] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20000
[  108.028352][    T9] IPVS: starting estimator thread 0...
[  108.070095][ T6264] netlink: 36 bytes leftover after parsing attributes in process `syz.4.100'.
[  108.105552][ T6260] netlink: 'syz.0.97': attribute type 2 has an invalid length.
[  108.123999][ T6260] netlink: 'syz.0.97': attribute type 1 has an invalid length.
[  108.133160][ T6261] IPVS: using max 29 ests per chain, 69600 per kthread
[  108.663040][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.106'.
[  108.977413][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.111'.
[  109.075714][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'.
[  109.179108][ T6304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.711534][ T6329] netlink: 'syz.3.121': attribute type 1 has an invalid length.
[  109.720685][ T6329] netlink: 'syz.3.121': attribute type 2 has an invalid length.
[  109.751762][ T6329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.589200][ T6363] xt_CT: No such helper "netbios-ns"
[  110.756772][ T6373] __nla_validate_parse: 3 callbacks suppressed
[  110.756791][ T6373] netlink: 22 bytes leftover after parsing attributes in process `syz.3.134'.
[  110.784224][ T6372] tipc: Enabling <eth:lo> not permitted
[  110.790076][ T6372] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  110.819267][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[  111.307203][ T6392] openvswitch: netlink: IP tunnel dst address not specified
[  111.442758][ T6396] veth1_macvtap: left promiscuous mode
[  111.612921][ T6407] netlink: 72 bytes leftover after parsing attributes in process `syz.1.148'.
[  111.766493][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'.
[  111.792100][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'.
[  111.829079][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[  111.858905][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[  112.099227][ T6433] warning: `syz.2.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  112.334885][ T6447] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  112.718513][ T6459] Cannot find add_set index 0 as target
[  112.911667][   T30] audit: type=1107 audit(1751945707.351:4): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�$�.�~���`��V��"v}BW��;�_�k��yJx�"�B�U��n�����V9,d�7�g@!�5bh�v�=�Y�}1y���6�H�7yƄ�i�,�:�ҧ2�l����2��Clv%�.S�+�N�T0�\�����$��^+F��wE��qā��6zP�q���ZX�	�3\�LSx�9.�":���ؠ���U�Y5���JHx�@2Bs�(��o'
[  113.568475][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'.
[  113.616943][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'.
[  113.691673][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'.
[  113.765768][ T6496] netlink: 'syz.1.175': attribute type 1 has an invalid length.
[  113.839538][ T6496] ip6gretap1: entered allmulticast mode
[  114.017605][   T30] audit: type=1800 audit(1751945708.461:5): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.177" name="bpf-map" dev="anon_inodefs" ino=37 res=0 errno=0
[  114.726655][ T6543] geneve2: entered promiscuous mode
[  114.743753][ T6543] geneve2: entered allmulticast mode
[  114.888423][ T6551] macvtap1: entered promiscuous mode
[  114.906450][ T6551] vlan0: entered promiscuous mode
[  114.940040][ T6551] macvtap1: entered allmulticast mode
[  114.981456][ T6551] vlan0: entered allmulticast mode
[  115.039154][ T6551] veth0_vlan: entered allmulticast mode
[  115.495441][ T6573] ip6t_srh: unknown srh match flags  536B
[  115.550917][ T6576] netlink: 'syz.1.203': attribute type 33 has an invalid length.
[  115.768160][ T6582] __nla_validate_parse: 4 callbacks suppressed
[  115.768182][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'.
[  115.801596][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'.
[  115.876560][ T6582] geneve2: entered promiscuous mode
[  115.882079][ T6582] geneve2: entered allmulticast mode
[  116.088185][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.210'.
[  116.104169][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'.
[  116.143171][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'.
[  116.593764][ T6618] netlink: 277 bytes leftover after parsing attributes in process `syz.1.217'.
[  116.909747][ T6623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.353687][ T6644] sctp: [Deprecated]: syz.3.222 (pid 6644) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.353687][ T6644] Use struct sctp_sack_info instead
[  117.405114][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[  117.596444][ T6656] ieee802154 phy0 wpan0: encryption failed: -22
[  117.614243][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'.
[  117.992624][   T36] syzkaller0: tun_net_xmit 76
[  118.000893][   T36] syzkaller0: tun_net_xmit 48
[  118.036856][ T5883] syzkaller0: tun_net_xmit 76
[  119.330579][ T6668] netlink: 'syz.3.230': attribute type 1 has an invalid length.
[  119.520258][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'.
[  119.552682][ T6670] bond1: (slave bridge1): making interface the new active one
[  119.563758][ T6670] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  119.626341][ T6671] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  119.640917][ T6677] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[  119.924950][ T6696] netlink: 'syz.0.238': attribute type 10 has an invalid length.
[  119.958451][ T6696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.238'.
[  120.020044][ T6696] team0: Port device geneve0 added
[  120.260865][ T6709] netlink: 'syz.2.242': attribute type 21 has an invalid length.
[  120.562810][ T6723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.042867][ T6743] x_tables: duplicate underflow at hook 1
[  121.076837][ T6745] netlink: 'syz.0.254': attribute type 1 has an invalid length.
[  121.146023][ T6745] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  121.164134][ T6754] __nla_validate_parse: 3 callbacks suppressed
[  121.164154][ T6754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.256'.
[  121.269613][ T6754] netlink: 272 bytes leftover after parsing attributes in process `syz.1.256'.
[  121.306091][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'.
[  121.373935][ T6771] netlink: 56 bytes leftover after parsing attributes in process `syz.4.260'.
[  121.389226][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'.
[  121.401980][ T6771] netlink: 31 bytes leftover after parsing attributes in process `syz.4.260'.
[  121.414812][ T6771] netlink: 'syz.4.260': attribute type 3 has an invalid length.
[  121.450250][ T6771] netlink: 'syz.4.260': attribute type 2 has an invalid length.
[  121.475832][ T6771] netlink: 31 bytes leftover after parsing attributes in process `syz.4.260'.
[  121.861140][ T6789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.267'.
[  121.871861][ T6792] lo: entered promiscuous mode
[  122.036100][ T6792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.330530][ T6805] netlink: 'syz.3.270': attribute type 11 has an invalid length.
[  122.338810][ T6804] Cannot find add_set index 0 as target
[  122.352491][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'.
[  122.637400][ T6804] team0 (unregistering): Port device team_slave_0 removed
[  122.656322][ T6804] team0 (unregistering): Port device team_slave_1 removed
[  122.825790][ T6827] netlink: 'syz.3.272': attribute type 1 has an invalid length.
[  123.021546][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'.
[  123.233135][ T6827] 8021q: adding VLAN 0 to HW filter on device bond2
[  123.837942][ T6887] FAULT_INJECTION: forcing a failure.
[  123.837942][ T6887] name failslab, interval 1, probability 0, space 0, times 1
[  123.851111][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.4.279 Not tainted 6.16.0-rc4-syzkaller-00114-g1e3b66e32601 #0 PREEMPT(full) 
[  123.851140][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  123.851160][ T6887] Call Trace:
[  123.851169][ T6887]  <TASK>
[  123.851178][ T6887]  dump_stack_lvl+0x189/0x250
[  123.851221][ T6887]  ? __pfx____ratelimit+0x10/0x10
[  123.851253][ T6887]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.851282][ T6887]  ? __pfx__printk+0x10/0x10
[  123.851316][ T6887]  ? __pfx___might_resched+0x10/0x10
[  123.851338][ T6887]  ? fs_reclaim_acquire+0x7d/0x100
[  123.851372][ T6887]  should_fail_ex+0x414/0x560
[  123.851408][ T6887]  should_failslab+0xa8/0x100
[  123.851436][ T6887]  __kmalloc_cache_noprof+0x70/0x3d0
[  123.851461][ T6887]  ? genl_start+0x1c9/0x6c0
[  123.851498][ T6887]  genl_start+0x1c9/0x6c0
[  123.851526][ T6887]  ? netlink_lookup+0x30/0x200
[  123.851557][ T6887]  __netlink_dump_start+0x469/0x7e0
[  123.851591][ T6887]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  123.851627][ T6887]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  123.851665][ T6887]  ? rcu_is_watching+0x15/0xb0
[  123.851688][ T6887]  ? __pfx_genl_start+0x10/0x10
[  123.851715][ T6887]  ? __pfx_genl_dumpit+0x10/0x10
[  123.851742][ T6887]  ? __pfx_genl_done+0x10/0x10
[  123.851870][ T6887]  ? bpf_lsm_capable+0x9/0x20
[  123.851908][ T6887]  ? security_capable+0x7e/0x2e0
[  123.851950][ T6887]  genl_rcv_msg+0x5da/0x790
[  123.851994][ T6887]  ? __pfx_genl_rcv_msg+0x10/0x10
[  123.852025][ T6887]  ? ref_tracker_free+0x63a/0x7d0
[  123.852046][ T6887]  ? __pfx_batadv_bla_claim_dump+0x10/0x10
[  123.852077][ T6887]  ? __pfx_ref_tracker_free+0x10/0x10
[  123.852113][ T6887]  netlink_rcv_skb+0x205/0x470
[  123.852143][ T6887]  ? __pfx_genl_rcv_msg+0x10/0x10
[  123.852180][ T6887]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  123.852229][ T6887]  ? down_read+0x1ad/0x2e0
[  123.852257][ T6887]  genl_rcv+0x28/0x40
[  123.852288][ T6887]  netlink_unicast+0x759/0x8e0
[  123.852328][ T6887]  netlink_sendmsg+0x805/0xb30
[  123.852369][ T6887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  123.852402][ T6887]  ? aa_sock_msg_perm+0x94/0x160
[  123.852438][ T6887]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  123.852458][ T6887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  123.852495][ T6887]  __sock_sendmsg+0x219/0x270
[  123.852520][ T6887]  ____sys_sendmsg+0x505/0x830
[  123.852555][ T6887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  123.852593][ T6887]  ? import_iovec+0x74/0xa0
[  123.852623][ T6887]  ___sys_sendmsg+0x21f/0x2a0
[  123.852654][ T6887]  ? __pfx____sys_sendmsg+0x10/0x10
[  123.852723][ T6887]  ? __fget_files+0x2a/0x420
[  123.852766][ T6887]  ? __fget_files+0x3a0/0x420
[  123.852818][ T6887]  __x64_sys_sendmsg+0x19b/0x260
[  123.852851][ T6887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  123.852892][ T6887]  ? __pfx_ksys_write+0x10/0x10
[  123.852916][ T6887]  ? rcu_is_watching+0x15/0xb0
[  123.852950][ T6887]  ? do_syscall_64+0xbe/0x3b0
[  123.852978][ T6887]  do_syscall_64+0xfa/0x3b0
[  123.852998][ T6887]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.853031][ T6887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.853053][ T6887]  ? clear_bhb_loop+0x60/0xb0
[  123.853076][ T6887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.853096][ T6887] RIP: 0033:0x7fca3ef8e929
[  123.853127][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.853144][ T6887] RSP: 002b:00007fca3fd17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  123.853172][ T6887] RAX: ffffffffffffffda RBX: 00007fca3f1b5fa0 RCX: 00007fca3ef8e929
[  123.853187][ T6887] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000003
[  123.853201][ T6887] RBP: 00007fca3fd17090 R08: 0000000000000000 R09: 0000000000000000
[  123.853213][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.853224][ T6887] R13: 0000000000000000 R14: 00007fca3f1b5fa0 R15: 00007ffcaade7eb8
[  123.853257][ T6887]  </TASK>
[  124.734461][ T6906] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  124.825407][ T6919] netlink: 'syz.4.288': attribute type 4 has an invalid length.
[  125.330681][ T6943] openvswitch: netlink: IPv6 tunnel dst address is zero
[  125.420052][ T6939] unknown channel width for channel at 909000KHz?
[  125.475455][ T6939] unknown channel width for channel at 909000KHz?
[  125.483662][ T6939] unknown channel width for channel at 909000KHz?
[  125.696900][ T6954] FAULT_INJECTION: forcing a failure.
[  125.696900][ T6954] name failslab, interval 1, probability 0, space 0, times 0
[  125.770296][ T6954] CPU: 0 UID: 0 PID: 6954 Comm: syz.0.293 Not tainted 6.16.0-rc4-syzkaller-00114-g1e3b66e32601 #0 PREEMPT(full) 
[  125.770326][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  125.770338][ T6954] Call Trace:
[  125.770346][ T6954]  <TASK>
[  125.770355][ T6954]  dump_stack_lvl+0x189/0x250
[  125.770386][ T6954]  ? __pfx____ratelimit+0x10/0x10
[  125.770418][ T6954]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.770443][ T6954]  ? __pfx__printk+0x10/0x10
[  125.770477][ T6954]  ? __pfx___might_resched+0x10/0x10
[  125.770506][ T6954]  should_fail_ex+0x414/0x560
[  125.770542][ T6954]  should_failslab+0xa8/0x100
[  125.770572][ T6954]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  125.770599][ T6954]  ? __alloc_skb+0x112/0x2d0
[  125.770628][ T6954]  __alloc_skb+0x112/0x2d0
[  125.770657][ T6954]  netlink_dump+0x1ab/0xe90
[  125.770696][ T6954]  ? __pfx_netlink_dump+0x10/0x10
[  125.770734][ T6954]  ? genl_start+0x499/0x6c0
[  125.770772][ T6954]  __netlink_dump_start+0x5cb/0x7e0
[  125.770805][ T6954]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  125.770840][ T6954]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  125.770888][ T6954]  ? rcu_is_watching+0x15/0xb0
[  125.770912][ T6954]  ? __pfx_genl_start+0x10/0x10
[  125.770939][ T6954]  ? __pfx_genl_dumpit+0x10/0x10
[  125.770966][ T6954]  ? __pfx_genl_done+0x10/0x10
[  125.771000][ T6954]  ? bpf_lsm_capable+0x9/0x20
[  125.771024][ T6954]  ? security_capable+0x7e/0x2e0
[  125.771061][ T6954]  genl_rcv_msg+0x5da/0x790
[  125.771100][ T6954]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.771127][ T6954]  ? ref_tracker_free+0x63a/0x7d0
[  125.771144][ T6954]  ? __pfx_batadv_bla_claim_dump+0x10/0x10
[  125.771172][ T6954]  ? __pfx_ref_tracker_free+0x10/0x10
[  125.771203][ T6954]  netlink_rcv_skb+0x205/0x470
[  125.771229][ T6954]  ? __pfx_genl_rcv_msg+0x10/0x10
[  125.771260][ T6954]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.771308][ T6954]  ? down_read+0x1ad/0x2e0
[  125.771333][ T6954]  genl_rcv+0x28/0x40
[  125.771362][ T6954]  netlink_unicast+0x759/0x8e0
[  125.771397][ T6954]  netlink_sendmsg+0x805/0xb30
[  125.771433][ T6954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.771461][ T6954]  ? aa_sock_msg_perm+0x94/0x160
[  125.771494][ T6954]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.771511][ T6954]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.771538][ T6954]  __sock_sendmsg+0x219/0x270
[  125.771560][ T6954]  ____sys_sendmsg+0x505/0x830
[  125.771594][ T6954]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.771631][ T6954]  ? import_iovec+0x74/0xa0
[  125.771660][ T6954]  ___sys_sendmsg+0x21f/0x2a0
[  125.771690][ T6954]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.771760][ T6954]  ? __fget_files+0x2a/0x420
[  125.771786][ T6954]  ? __fget_files+0x3a0/0x420
[  125.771825][ T6954]  __x64_sys_sendmsg+0x19b/0x260
[  125.771855][ T6954]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.771903][ T6954]  ? __pfx_ksys_write+0x10/0x10
[  125.771925][ T6954]  ? rcu_is_watching+0x15/0xb0
[  125.771956][ T6954]  ? do_syscall_64+0xbe/0x3b0
[  125.771981][ T6954]  do_syscall_64+0xfa/0x3b0
[  125.772000][ T6954]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.772031][ T6954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.772051][ T6954]  ? clear_bhb_loop+0x60/0xb0
[  125.772077][ T6954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.772096][ T6954] RIP: 0033:0x7f3ef678e929
[  125.772115][ T6954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.772131][ T6954] RSP: 002b:00007f3ef754b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.772152][ T6954] RAX: ffffffffffffffda RBX: 00007f3ef69b5fa0 RCX: 00007f3ef678e929
[  125.772167][ T6954] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000003
[  125.772180][ T6954] RBP: 00007f3ef754b090 R08: 0000000000000000 R09: 0000000000000000
[  125.772192][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.772203][ T6954] R13: 0000000000000000 R14: 00007f3ef69b5fa0 R15: 00007ffc626b1478
[  125.772237][ T6954]  </TASK>
[  126.350222][ T6968] veth0: entered promiscuous mode
[  126.358786][ T6966] __nla_validate_parse: 7 callbacks suppressed
[  126.358807][ T6966] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.300'.
[  126.358813][ T6968] veth0: left promiscuous mode
[  126.669583][ T6978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.805090][ T6988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.306'.
[  126.835472][ T6988] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.306'.
[  126.916726][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'.
[  126.929146][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'.
[  127.111002][ T7001] netem: change failed
[  127.587642][ T5945] IPVS: starting estimator thread 0...
[  127.732925][ T7028] IPVS: using max 24 ests per chain, 57600 per kthread
[  127.829558][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'.
[  127.859423][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'.
[  127.868845][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.320'.
[  127.916960][ T7042] netlink: 'syz.4.323': attribute type 2 has an invalid length.
[  127.936517][ T7040] xt_hashlimit: overflow, rate too high: 0
[  127.993692][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'.
[  128.105774][ T7040] gretap0: entered promiscuous mode
[  128.134768][ T7040] gretap0: left promiscuous mode
[  128.246682][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'.
[  128.282975][ T7059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.853681][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.969650][ T7067] bridge0: port 3(batadv1) entered blocking state
[  128.978691][ T7067] bridge0: port 3(batadv1) entered disabled state
[  129.021579][ T7067] batadv1: entered allmulticast mode
[  129.070973][ T7067] batadv1: entered promiscuous mode
[  129.433928][ T7083] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.485472][  T150] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  129.497851][  T150] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  129.536441][ T7089] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  129.611637][ T7093] x_tables: duplicate underflow at hook 2
[  129.674902][ T7097] netlink: 'syz.4.335': attribute type 1 has an invalid length.
[  129.859361][ T7097] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.883309][ T7103] macvtap1: entered promiscuous mode
[  129.890101][ T7103] bond1: entered promiscuous mode
[  129.899181][ T7103] macvtap1: entered allmulticast mode
[  129.904842][ T7103] bond1: entered allmulticast mode
[  129.911235][ T7103] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  130.010042][ T7107] bond1: (slave gretap1): making interface the new active one
[  130.027873][ T7107] gretap1: entered promiscuous mode
[  130.051669][ T7107] gretap1: entered allmulticast mode
[  130.075422][ T7107] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  130.150648][ T7107] syz.4.335 (7107) used greatest stack depth: 19176 bytes left
[  131.323803][ T7168] netlink: 'syz.3.351': attribute type 6 has an invalid length.
[  131.960475][ T7201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.093383][ T7208] __nla_validate_parse: 11 callbacks suppressed
[  132.093404][ T7208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.360'.
[  132.653172][ T7230] netlink: 48 bytes leftover after parsing attributes in process `syz.2.366'.
[  132.833605][ T7233] netlink: 'syz.3.368': attribute type 10 has an invalid length.
[  132.911109][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.938109][ T7233] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  133.262013][ T7252] veth0_macvtap: left promiscuous mode
[  133.295188][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.374'.
[  133.428508][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'.
[  133.835252][ T7278] netlink: 32 bytes leftover after parsing attributes in process `syz.1.382'.
[  134.319516][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'.
[  134.837186][ T7308] bridge1: entered promiscuous mode
[  134.865485][ T7308] bridge1: entered allmulticast mode
[  134.877881][ T7319] netlink: 68 bytes leftover after parsing attributes in process `syz.1.396'.
[  135.094857][ T7325] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.760856][ T7353] netlink: 36 bytes leftover after parsing attributes in process `syz.4.406'.
[  135.781807][ T7356] x_tables: duplicate underflow at hook 2
[  135.797004][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'.
[  135.840379][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.406'.
[  136.107083][ T7371] netlink: 'syz.2.411': attribute type 10 has an invalid length.
[  136.149095][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.179789][ T7371] bridge_slave_1: left allmulticast mode
[  136.200985][ T7371] bridge_slave_1: left promiscuous mode
[  136.218689][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.278668][ T7371] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  136.359613][ T7385] netlink: 'syz.1.415': attribute type 21 has an invalid length.
[  136.602945][ T7397] netlink: 'syz.2.419': attribute type 9 has an invalid length.
[  137.836059][ T7455] __nla_validate_parse: 6 callbacks suppressed
[  137.836081][ T7455] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.431'.
[  137.856186][ T7455] syz_tun: entered promiscuous mode
[  137.864925][ T7455] syz_tun: entered allmulticast mode
[  138.118236][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'.
[  138.127398][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'.
[  138.167607][ T7462] netlink: 'syz.3.434': attribute type 20 has an invalid length.
[  138.460125][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  138.469677][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  138.552800][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[  138.585388][ T7485] netlink: 60 bytes leftover after parsing attributes in process `syz.0.440'.
[  138.783472][ T7494] netlink: 196 bytes leftover after parsing attributes in process `syz.2.443'.
[  138.821780][ T7494] netlink: 196 bytes leftover after parsing attributes in process `syz.2.443'.
[  138.855398][ T7494] netlink: 19 bytes leftover after parsing attributes in process `syz.2.443'.
[  138.866606][ T7503] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.446'.
[  139.208705][ T7517] openvswitch: netlink: Flow actions attr not present in new flow.
[  139.400507][ T7524] netlink: 104 bytes leftover after parsing attributes in process `syz.4.452'.
[  139.496574][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.533449][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.917340][ T7540] netlink: 'syz.0.457': attribute type 5 has an invalid length.
[  140.065336][ T7548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.657270][ T7575] sock: sock_set_timeout: `syz.1.470' (pid 7575) tries to set negative timeout
[  140.688707][ T7571] macvlan2: entered promiscuous mode
[  140.694539][ T7571] macvlan2: entered allmulticast mode
[  140.700936][ T7571] batadv0: entered promiscuous mode
[  140.730305][ T7571] batadv0: entered allmulticast mode
[  140.742392][ T7571] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  140.765398][ T7571] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  140.837852][ T7583] netlink: 'syz.4.472': attribute type 1 has an invalid length.
[  140.857299][ T7575] xt_CT: No such helper "snmp"
[  141.143866][ T5914] IPVS: starting estimator thread 0...
[  141.251722][ T7596] IPVS: using max 27 ests per chain, 64800 per kthread
[  141.297012][ T7595] xt_CT: No such helper "snmp"
[  141.469087][ T7610] sctp: [Deprecated]: syz.0.479 (pid 7610) Use of int in max_burst socket option deprecated.
[  141.469087][ T7610] Use struct sctp_assoc_value instead
[  141.499910][ T7610] netlink: 'syz.0.479': attribute type 30 has an invalid length.
[  141.870258][ T7604] team0 (unregistering): Port device team_slave_0 removed
[  141.916873][ T7604] team0 (unregistering): Port device team_slave_1 removed
[  141.970989][ T7634] Driver unsupported XDP return value 0 on prog  (id 102) dev N/A, expect packet loss!
[  142.158332][ T7638] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  142.487067][ T7654] ieee802154 phy0 wpan0: encryption failed: -22
[  142.851889][ T7672] __nla_validate_parse: 17 callbacks suppressed
[  142.851889][ T7671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'.
[  142.851908][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.499'.
[  143.351203][ T7693] bridge0: entered promiscuous mode
[  143.357402][ T7693] bridge0: entered allmulticast mode
[  144.352825][ T7717] trusted_key: syz.2.509 sent an empty control message without MSG_MORE.
[  144.572049][ T7723] x_tables: duplicate underflow at hook 2
[  144.746740][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[  144.849733][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'.
[  144.860229][ T5851] Bluetooth: hci2: command tx timeout
[  144.875118][ T7734] tc_dump_action: action bad kind
[  144.984447][ T7739] netlink: 256 bytes leftover after parsing attributes in process `syz.4.518'.
[  145.010412][ T7739] nbd: must specify at least one socket
[  145.188805][ T7747] netlink: 'syz.1.520': attribute type 10 has an invalid length.
[  145.232981][ T7747] netlink: 40 bytes leftover after parsing attributes in process `syz.1.520'.
[  145.249978][ T7749] x_tables: ip_tables: osf match: only valid for protocol 6
[  145.274824][ T7747] batadv0: entered promiscuous mode
[  145.293859][ T7747] batadv0: entered allmulticast mode
[  145.303053][ T7747] bridge0: port 3(batadv0) entered blocking state
[  145.310412][ T7747] bridge0: port 3(batadv0) entered disabled state
[  145.324553][ T7747] bridge0: port 3(batadv0) entered blocking state
[  145.332950][ T7747] bridge0: port 3(batadv0) entered forwarding state
[  145.504460][  T150] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  145.514077][  T150] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  145.729404][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.4.527'.
[  145.754147][ T7772] vlan2: entered allmulticast mode
[  145.759456][ T7772] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  145.769002][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'.
[  146.089797][ T7789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  146.148940][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'.
[  147.090247][ T7831] netem: incorrect ge model size
[  147.095786][ T7831] netem: change failed
[  147.675273][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'.
[  148.106109][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.556'.
[  148.125403][ T7871] netlink: 'syz.1.555': attribute type 1 has an invalid length.
[  148.156302][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'.
[  148.401147][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'.
[  148.560796][ T7887] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20003
[  148.603650][ T7888] netlink: 104 bytes leftover after parsing attributes in process `syz.0.561'.
[  148.863658][ T7897] netlink: 'syz.3.566': attribute type 3 has an invalid length.
[  148.874856][ T7897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.910854][ T7898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.566'.
[  148.957643][ T7898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.566'.
[  148.997082][ T7898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.566'.
[  149.012785][ T7885] team0 (unregistering): Port device team_slave_0 removed
[  149.025546][ T7898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.566'.
[  149.046941][ T7902] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING
[  149.066246][ T7898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.566'.
[  149.079735][ T7898] netlink: 80 bytes leftover after parsing attributes in process `syz.3.566'.
[  149.101555][ T7885] team0 (unregistering): Port device team_slave_1 removed
[  149.138020][ T7885] team0 (unregistering): Port device geneve0 removed
[  149.190380][ T7887] bridge_slave_0: mtu less than device minimum
[  149.815182][ T7922] unsupported nlmsg_type 40
[  149.853650][ T7925] bond0: (slave ip6tnl0): Error: Device can not be enslaved while up
[  150.054403][ T7928] veth3: entered promiscuous mode
[  150.136421][ T5851] Bluetooth: hci4: command 0x0405 tx timeout
[  150.247200][ T7939] openvswitch: netlink: IPv4 tun info is not correct
[  150.480633][ T7948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  150.549455][ T7952] macvtap2: entered promiscuous mode
[  150.565923][ T7952] macvtap2: entered allmulticast mode
[  150.673810][ T7958] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  150.715048][ T7958] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  150.725622][ T7958] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  151.207251][ T7972] x_tables: duplicate underflow at hook 3
[  151.257941][ T7978] syzkaller1: entered promiscuous mode
[  151.266226][ T7978] syzkaller1: entered allmulticast mode
[  151.277874][ T7978] IPv6: NLM_F_REPLACE set, but no existing node found!
[  151.508979][ T7986] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ
�D��UD����z
[  151.650196][ T7997] x_tables: duplicate underflow at hook 1
[  152.668532][ T8045] netlink: 'syz.2.611': attribute type 12 has an invalid length.
[  152.676642][ T8045] netlink: 'syz.2.611': attribute type 29 has an invalid length.
[  153.026455][ T8057] netlink: 'syz.2.617': attribute type 13 has an invalid length.
[  153.045587][ T8057] veth0_macvtap: left promiscuous mode
[  153.065451][ T8057] macvtap0: entered allmulticast mode
[  153.092869][ T8057] macvtap0: refused to change device tx_queue_len
[  153.468394][ T8073] __nla_validate_parse: 83 callbacks suppressed
[  153.468415][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'.
[  153.498490][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'.
[  153.614241][ T8083] IPVS: set_ctl: invalid protocol: 60 100.1.1.2:20001
[  153.697768][ T8087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.626'.
[  153.702687][ T8088] netlink: 32 bytes leftover after parsing attributes in process `syz.0.626'.
[  153.766692][ T8090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.452401][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.661229][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'.
[  154.725932][ T8124] netlink: 'syz.2.637': attribute type 12 has an invalid length.
[  154.739467][ T8124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.637'.
[  154.866642][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.640'.
[  155.034095][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'.
[  155.090109][ T8144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'.
[  155.332847][ T8150] netlink: 252 bytes leftover after parsing attributes in process `syz.4.646'.
[  155.833079][ T8170] vlan2: entered promiscuous mode
[  155.838202][ T8170] bridge0: entered promiscuous mode
[  155.853614][ T8170] vlan2: entered allmulticast mode
[  155.859040][ T8170] bridge0: entered allmulticast mode
[  156.650337][ T8210] x_tables: duplicate underflow at hook 3
[  156.676942][ T8211] netlink: 'syz.4.662': attribute type 1 has an invalid length.
[  156.879050][ T8197] vlan0 (unregistering): left allmulticast mode
[  156.890151][ T8197] veth0_vlan (unregistering): left allmulticast mode
[  156.899252][ T8197] vlan0 (unregistering): left promiscuous mode
[  157.031662][ T8211] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  157.256944][ T8228] netlink: 'syz.4.669': attribute type 1 has an invalid length.
[  157.297700][ T8228] 8021q: adding VLAN 0 to HW filter on device bond2
[  157.318441][ T8228] gretap2: entered promiscuous mode
[  157.329670][ T8228] bond2: (slave gretap2): making interface the new active one
[  157.339219][ T8030] wlan1: Trigger new scan to find an IBSS to join
[  157.348135][ T8228] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  157.467276][ T8231] netlink: 'syz.0.668': attribute type 12 has an invalid length.
[  157.741987][ T8242] netlink: 'syz.1.673': attribute type 10 has an invalid length.
[  157.799088][ T8242] team0: Port device geneve0 added
[  157.845807][ T8244] !
: renamed from dummy0 (while UP)
[  157.926218][ T8251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.095404][ T8258] netlink: 'syz.1.678': attribute type 1 has an invalid length.
[  158.659067][ T8287] __nla_validate_parse: 10 callbacks suppressed
[  158.659087][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'.
[  158.753194][ T8294] netlink: 'syz.2.690': attribute type 2 has an invalid length.
[  158.761016][ T8294] netlink: 88 bytes leftover after parsing attributes in process `syz.2.690'.
[  158.953310][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'.
[  159.168953][ T8302] netlink: 88 bytes leftover after parsing attributes in process `syz.1.692'.
[  159.726617][ T8286] syzkaller1: entered promiscuous mode
[  159.733081][ T8286] syzkaller1: entered allmulticast mode
[  159.905966][ T8319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.925126][ T8319] netlink: 17 bytes leftover after parsing attributes in process `syz.1.696'.
[  160.090079][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'.
[  160.175811][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.3.700'.
[  160.329463][ T8332] syz.3.700 (8332) used greatest stack depth: 17992 bytes left
[  160.367902][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880546c8000: rx timeout, send abort
[  160.378740][ T2953] wlan1: Creating new IBSS network, BSSID 1e:64:b4:a9:2a:dd
[  160.378793][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880546c8000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  160.405277][ T8341] netlink: 596 bytes leftover after parsing attributes in process `syz.3.703'.
[  160.789217][ T8354] veth7: entered promiscuous mode
[  160.809190][ T8354] veth7: entered allmulticast mode
[  161.017857][ T8358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.708'.
[  161.298051][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'.
[  161.333914][ T8363] nbd: must specify a size in bytes for the device
[  161.492891][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  161.737513][ T8390] lo: entered promiscuous mode
[  161.759396][ T8390] tunl0: entered promiscuous mode
[  161.770798][ T8390] gre0: entered promiscuous mode
[  161.885266][ T8390] gretap0: entered promiscuous mode
[  161.950822][ T8390] erspan0: entered promiscuous mode
[  161.982392][ T8390] ip_vti0: entered promiscuous mode
[  162.713371][ T8427] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  162.729777][ T8427] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  162.751732][ T8427] gretap1: entered promiscuous mode
[  162.757332][ T8427] gretap1: entered allmulticast mode
[  163.369358][ T8461] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  163.458047][ T8461] input: failed to attach handler evdev to device input5, error: -4
[  163.566896][ T8460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  163.681046][ T8477] netlink: 'syz.2.734': attribute type 33 has an invalid length.
[  163.699379][ T8477] __nla_validate_parse: 6 callbacks suppressed
[  163.699398][ T8477] netlink: 152 bytes leftover after parsing attributes in process `syz.2.734'.
[  163.903000][ T8482] netlink: 'syz.3.739': attribute type 1 has an invalid length.
[  163.930492][ T8485] unsupported nla_type 52263
[  163.993148][ T8485] sock: sock_set_timeout: `syz.0.738' (pid 8485) tries to set negative timeout
[  164.046632][ T8485] sock: sock_set_timeout: `syz.0.738' (pid 8485) tries to set negative timeout
[  164.769753][ T8512] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  164.888038][ T8522] gtp1: entered promiscuous mode
[  164.931881][ T8522] gtp1: entered allmulticast mode
[  165.496168][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.421881][ T8584] netlink: 'syz.0.772': attribute type 21 has an invalid length.
[  166.445369][ T8584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.772'.
[  166.853226][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'.
[  166.874473][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'.
[  166.885482][ T8604] netlink: 'syz.1.778': attribute type 3 has an invalid length.
[  166.945780][ T8608] bridge_slave_0: left allmulticast mode
[  166.963768][ T8608] bridge_slave_0: left promiscuous mode
[  166.971225][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.993184][ T8608] bridge_slave_1: left allmulticast mode
[  167.001136][ T8608] bridge_slave_1: left promiscuous mode
[  167.019784][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.068958][ T8620] netlink: 'syz.3.781': attribute type 11 has an invalid length.
[  167.093145][ T8618] netlink: 'syz.2.782': attribute type 24 has an invalid length.
[  167.296837][ T8608] bond0: (slave bond_slave_0): Releasing backup interface
[  167.393396][ T8608] bond0: (slave bond_slave_1): Releasing backup interface
[  167.472431][ T8608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.480511][ T8608] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.505379][ T8608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.547354][ T8608] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.653023][ T8608] bond0: (slave macvlan2): Releasing backup interface
[  167.687552][ T8608] batadv0: left allmulticast mode
[  167.700037][ T8608] batadv0: left promiscuous mode
[  167.754742][ T8644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'.
[  167.830350][ T8642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.785'.
[  167.980976][ T5883] IPVS: starting estimator thread 0...
[  168.088073][ T8653] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.098645][ T8648] IPVS: using max 24 ests per chain, 57600 per kthread
[  168.136181][ T8655] netlink: 196 bytes leftover after parsing attributes in process `syz.1.789'.
[  168.929338][ T8659] nbd: must specify a device to reconfigure
[  169.449307][ T8652] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  169.449662][ T8653] netlink: 'syz.2.787': attribute type 29 has an invalid length.
[  169.472625][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'.
[  169.549530][ T8666] vlan3: entered promiscuous mode
[  169.555740][ T8666] vlan3: entered allmulticast mode
[  169.561017][ T8666] hsr_slave_1: entered allmulticast mode
[  169.760705][ T8680] netlink: 'syz.0.796': attribute type 23 has an invalid length.
[  169.800657][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.798'.
[  170.326639][ T8715] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  170.397527][ T8715] netlink: 72 bytes leftover after parsing attributes in process `syz.4.807'.
[  170.817397][ T8734] netlink: 'syz.0.812': attribute type 1 has an invalid length.
[  170.846537][ T8734] netlink: 224 bytes leftover after parsing attributes in process `syz.0.812'.
[  170.978014][ T8744] bridge3: entered promiscuous mode
[  171.001729][ T8744] bridge3: entered allmulticast mode
[  171.086872][ T8750] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  171.415620][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'.
[  171.427011][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'.
[  171.451851][ T8766] netlink: 'syz.2.820': attribute type 14 has an invalid length.
[  171.695749][ T8770] : entered promiscuous mode
[  171.838788][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'.
[  171.960743][   T30] audit: type=1107 audit(1751945766.401:6): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�$�.�~���`��V��"v}BW��;�_�k��yJx�"�B�U��n�����V9,d�7�g@!�5bh�v�=�Y�}1y���6�H�7yƄ�i�,�:�ҧ2�l����2��Clv%�.S�+�N�T0�\�����$��^+F��wE��qā��6zP�q���ZX�	�3\�LSx�9.�":���ؠ���U�Y5���JHx�@2Bs�(��o'
[  171.996969][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.830'.
[  172.042996][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.830'.
[  172.370244][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'.
[  173.220126][ T8840] netlink: 'syz.3.840': attribute type 4 has an invalid length.
[  173.232591][ T8843] xt_hashlimit: overflow, try lower: 1125899906842624/8
[  173.244593][ T8839] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  173.435241][ T8847] netlink: 'syz.1.843': attribute type 58 has an invalid length.
[  173.457766][   T30] audit: type=1107 audit(1751945767.901:7): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�$�.�~���`��V��"v}BW��;�_�k��yJx�"�B�U��n�����V9,d�7�g@!�5bh�v�=�Y�}1y���6�H�7yƄ�i�,�:�ҧ2�l����2��Clv%�.S�+�N�T0�\�����$��^+F��wE��qā��6zP�q���ZX�	�3\�LSx�9.�":���ؠ���U�Y5���JHx�@2Bs�(��o'
[  174.072014][ T8874] Unknown options in mask 1f4
[  174.633606][ T8901] ieee802154 phy1 wpan1: encryption failed: -22
[  174.729738][ T8905] veth0_vlan: entered allmulticast mode
[  175.199418][ T8927] __nla_validate_parse: 5 callbacks suppressed
[  175.199440][ T8927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.865'.
[  175.261172][ T8927] netlink: 120 bytes leftover after parsing attributes in process `syz.1.865'.
[  175.283874][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.865'.
[  175.608002][ T8944] sock: sock_timestamping_bind_phc: sock not bind to device
[  175.636434][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'.
[  175.757002][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'.
[  175.805808][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'.
[  176.256416][ T8964] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8
[  176.393341][ T8969] SET target dimension over the limit!
[  176.401777][ T8969] netlink: 56 bytes leftover after parsing attributes in process `syz.4.875'.
[  176.411161][ T8969] (unnamed net_device) (uninitialized): (slave ip6gretap0): Device is not bonding slave
[  176.465695][ T8969] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6gretap0)
[  176.475652][ T5217] udevd[5217]: worker [6368] terminated by signal 33 (Unknown signal 33)
[  176.579421][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.878'.
[  176.607463][ T8971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.878'.
[  176.763819][ T8979] netlink: 'syz.2.880': attribute type 4 has an invalid length.
[  177.306620][ T9019] Cannot find add_set index 0 as target
[  177.388553][ T9022] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  177.448417][ T5914] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0
[  177.463587][ T5914] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  177.616992][ T9032] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[  177.619363][ T9035] netlink: 84 bytes leftover after parsing attributes in process `syz.3.899'.
[  177.719725][ T9043] xt_bpf: check failed: parse error
[  177.745767][ T9043] xt_bpf: check failed: parse error
[  177.829558][ T9048] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  178.001893][ T9057] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  178.202054][ T9066] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32)
[  178.995267][ T9103] x_tables: duplicate underflow at hook 3
[  179.483986][ T9118] syzkaller1: entered promiscuous mode
[  179.501814][ T9118] syzkaller1: entered allmulticast mode
[  180.075699][ T9150] netlink: 'syz.4.937': attribute type 8 has an invalid length.
[  180.519508][ T9156] team0 (unregistering): Port device team_slave_0 removed
[  180.545136][ T9156] team0 (unregistering): Port device team_slave_1 removed
[  180.571760][ T9156] team0 (unregistering): Port device geneve0 removed
[  188.435961][ T6849] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  199.895118][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  201.704629][ T9169] __nla_validate_parse: 10 callbacks suppressed
[  201.704651][ T9169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.943'.
[  201.748641][ T9169] netlink: 43 bytes leftover after parsing attributes in process `syz.3.943'.
[  201.774630][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'.
[  201.788365][ T9169] netlink: 'syz.3.943': attribute type 5 has an invalid length.
[  201.797692][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.945'.
[  201.813775][ T9169] netlink: 43 bytes leftover after parsing attributes in process `syz.3.943'.
[  201.813785][ T9175] netlink: 'syz.3.943': attribute type 1 has an invalid length.
[  202.234084][ T5167] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  202.244310][ T5167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  202.253321][ T5167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  202.262571][ T5167] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  202.270328][ T5167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  202.605797][ T9207] netlink: 'syz.4.952': attribute type 5 has an invalid length.
[  202.665371][ T9197] chnl_net:caif_netlink_parms(): no params data found
[  202.890438][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.919988][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.937175][ T9197] bridge_slave_0: entered allmulticast mode
[  202.952987][ T9197] bridge_slave_0: entered promiscuous mode
[  202.979883][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'.
[  202.995718][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.996213][ T9225] xt_HMARK: spi-set and port-set can't be combined
[  203.005877][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.026979][ T9197] bridge_slave_1: entered allmulticast mode
[  203.035171][ T9197] bridge_slave_1: entered promiscuous mode
[  203.154093][ T9231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.960'.
[  203.236623][ T9197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.260382][ T9197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.276174][ T9237] netlink: 156 bytes leftover after parsing attributes in process `syz.3.963'.
[  203.399194][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.965'.
[  203.424878][ T9197] team0: Port device team_slave_0 added
[  203.431556][ T9245] netlink: 68 bytes leftover after parsing attributes in process `syz.0.965'.
[  203.456674][ T9237] netlink: 'syz.3.963': attribute type 10 has an invalid length.
[  203.515362][ T9237] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  203.545216][ T9197] team0: Port device team_slave_1 added
[  203.707323][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.726247][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.763449][ T9197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.788768][ T9197] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.815620][ T9197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.898724][ T9197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.924795][ T9271] sctp: [Deprecated]: syz.2.973 (pid 9271) Use of struct sctp_assoc_value in delayed_ack socket option.
[  203.924795][ T9271] Use struct sctp_sack_info instead
[  204.087666][ T9197] hsr_slave_0: entered promiscuous mode
[  204.096305][ T9197] hsr_slave_1: entered promiscuous mode
[  204.107307][ T9197] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  204.115959][ T9197] Cannot create hsr debugfs directory
[  204.292043][ T5167] Bluetooth: hci2: command tx timeout
[  204.465867][ T9287] netlink: 'syz.3.977': attribute type 1 has an invalid length.
[  204.595859][ T9291] team0: entered promiscuous mode
[  204.603076][ T9291] team0: entered allmulticast mode
[  204.666542][ T9197] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.785685][ T9197] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.896494][ T9197] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.997057][ T9197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.275838][ T9197] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  205.298824][ T9197] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  205.398079][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.407683][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.414927][ T9327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.426211][ T9197] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  205.486623][ T9197] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  205.599344][ T9332] xt_CT: No such helper "snmp"
[  205.810031][ T9351] geneve2: entered promiscuous mode
[  205.820269][ T9351] geneve2: entered allmulticast mode
[  205.977539][ T9197] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.044976][ T9197] 8021q: adding VLAN 0 to HW filter on device team0
[  206.096332][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.104538][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.166260][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.173529][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.381812][ T5167] Bluetooth: hci2: command 0x041b tx timeout
[  206.619035][ T9197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.836750][ T9197] veth0_vlan: entered promiscuous mode
[  206.895954][ T9197] veth1_vlan: entered promiscuous mode
[  206.974543][ T9197] veth0_macvtap: entered promiscuous mode
[  206.995060][ T9197] veth1_macvtap: entered promiscuous mode
[  207.060744][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.104588][ T9197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.155983][ T9197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.164916][ T9414] netlink: zone id is out of range
[  207.165929][ T9414] netlink: del zone limit has 4 unknown bytes
[  207.190733][ T9197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.201208][ T9197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.210245][ T9197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.258000][ T5914] hid-generic 0005:0B57:00AA.0002: collection stack underflow
[  207.271990][ T5914] hid-generic 0005:0B57:00AA.0002: item 0 0 0 12 parsing failed
[  207.281866][ T9419] __nla_validate_parse: 16 callbacks suppressed
[  207.281886][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1015'.
[  207.284129][ T5914] hid-generic 0005:0B57:00AA.0002: probe with driver hid-generic failed with error -22
[  207.456915][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.531176][ T9419] bridge_slave_1 (unregistering): left allmulticast mode
[  207.541983][ T9419] bridge_slave_1 (unregistering): left promiscuous mode
[  207.549097][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.719834][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'.
[  207.755590][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'.
[  207.785507][ T8027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.832034][ T8027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.869894][ T9432] sctp: [Deprecated]: syz.3.1018 (pid 9432) Use of int in maxseg socket option.
[  207.869894][ T9432] Use struct sctp_assoc_value instead
[  207.934117][ T8027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.936674][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'.
[  207.957505][ T8027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.964847][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1021'.
[  207.985985][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'.
[  208.227283][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'.
[  208.366598][ T9462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1029'.
[  208.479318][ T9464] batman_adv: batadv0: Adding interface: ipvlan0
[  208.490166][ T9464] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.518043][ T9464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  208.548150][ T9464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  208.559097][ T9464] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  208.571201][ T9462] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1029'.
[  208.761228][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.800939][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'.
[  208.954839][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.099794][ T9477] netlink: 'syz.0.1031': attribute type 8 has an invalid length.
[  209.335603][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.587370][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.813970][ T9512] netlink: 'syz.2.1040': attribute type 3 has an invalid length.
[  209.912463][ T5167] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  209.925516][ T5167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  209.926626][ T9520] netlink: 'syz.4.1042': attribute type 6 has an invalid length.
[  209.943048][ T5167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  209.958825][ T5167] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  209.967073][ T5167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  210.059969][ T9523] batman_adv: batadv0: Adding interface: netdevsim0
[  210.082272][ T9523] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.162583][ T9523] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  210.223536][ T9528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.238948][ T9528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.881318][ T9557] netlink: 'syz.0.1053': attribute type 64 has an invalid length.
[  210.923435][   T49] bridge_slave_1: left allmulticast mode
[  210.929444][   T49] bridge_slave_1: left promiscuous mode
[  210.973219][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.040720][   T49] bridge_slave_0: left allmulticast mode
[  211.072704][   T49] bridge_slave_0: left promiscuous mode
[  211.078589][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.622068][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.637564][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.658284][   T49] bond0 (unregistering): Released all slaves
[  212.031175][ T9515] chnl_net:caif_netlink_parms(): no params data found
[  212.061147][ T5167] Bluetooth: hci2: command tx timeout
[  212.440125][   T49] hsr_slave_0: left promiscuous mode
[  212.475974][   T49] hsr_slave_1: left promiscuous mode
[  212.482613][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.490637][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.503450][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.511128][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.552011][   T49] veth1_macvtap: left promiscuous mode
[  212.558152][   T49] veth0_macvtap: left promiscuous mode
[  212.564915][   T49] veth1_vlan: left promiscuous mode
[  212.572217][   T49] veth0_vlan: left promiscuous mode
[  212.849257][ T9614] __nla_validate_parse: 10 callbacks suppressed
[  212.849277][ T9614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1069'.
[  213.241553][   T49] team0 (unregistering): Port device team_slave_1 removed
[  213.286597][   T49] team0 (unregistering): Port device team_slave_0 removed
[  213.815432][ T9515] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.842371][ T9515] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.882968][ T9515] bridge_slave_0: entered allmulticast mode
[  213.906455][ T9515] bridge_slave_0: entered promiscuous mode
[  213.945210][ T9515] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.978460][ T9515] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.010389][ T9515] bridge_slave_1: entered allmulticast mode
[  214.033497][ T9515] bridge_slave_1: entered promiscuous mode
[  214.131397][ T5167] Bluetooth: hci2: command tx timeout
[  214.274524][ T9515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.290956][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'.
[  214.311128][ T9515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.517859][ T9515] team0: Port device team_slave_0 added
[  214.548253][ T9515] team0: Port device team_slave_1 added
[  214.563250][ T9654] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20002
[  214.718958][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.739539][ T9662] netlink: 'syz.0.1081': attribute type 8 has an invalid length.
[  214.759093][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.815188][ T9515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.915927][ T9515] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.943342][ T9515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.945485][ T9668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1083'.
[  215.017177][ T9515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.083561][ T9674] netlink: 'syz.0.1085': attribute type 10 has an invalid length.
[  215.098253][ T9674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1085'.
[  215.191706][ T9674] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  215.254579][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.265541][ T9515] hsr_slave_0: entered promiscuous mode
[  215.282429][ T9515] hsr_slave_1: entered promiscuous mode
[  215.288905][ T9515] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.301386][ T9515] Cannot create hsr debugfs directory
[  215.337405][ T9683] netlink: 'syz.4.1088': attribute type 39 has an invalid length.
[  215.504769][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1090'.
[  215.819449][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'.
[  215.947581][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1097'.
[  215.975928][ T9707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1096'.
[  216.131212][ T9515] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  216.152762][ T9515] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  216.180239][ T9515] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  216.211592][   T51] Bluetooth: hci2: command tx timeout
[  216.215768][ T9515] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  216.314231][ T9721] netlink: 'syz.4.1102': attribute type 21 has an invalid length.
[  216.431609][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'.
[  216.457870][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'.
[  216.498917][ T9721] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  217.090430][ T9515] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.177499][ T9515] 8021q: adding VLAN 0 to HW filter on device team0
[  217.214919][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.222276][ T8028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.297616][ T9748] 0�X��D: renamed from gretap0
[  217.316586][ T9748] 0�X��D: left promiscuous mode
[  217.335425][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  217.336794][ T5859] Bluetooth: hci1: command 0x0406 tx timeout
[  217.342873][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  217.354829][ T9748] 0�X��D: entered allmulticast mode
[  217.356156][ T9748] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  217.445513][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.452919][ T6844] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.511220][ T9754] geneve3: entered promiscuous mode
[  217.553362][ T9754] geneve3: entered allmulticast mode
[  218.159832][ T9781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.308568][ T5851] Bluetooth: hci2: command tx timeout
[  218.315512][ T9788] __nla_validate_parse: 5 callbacks suppressed
[  218.315530][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'.
[  218.401070][ T9515] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.447034][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'.
[  218.463315][ T9515] veth0_vlan: entered promiscuous mode
[  218.489835][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'.
[  218.495700][ T9515] veth1_vlan: entered promiscuous mode
[  218.615722][ T9794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1121'.
[  218.633255][ T9515] veth0_macvtap: entered promiscuous mode
[  218.670487][ T9515] veth1_macvtap: entered promiscuous mode
[  218.718571][ T9799] netlink: 'syz.3.1122': attribute type 4 has an invalid length.
[  218.735016][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.775096][ T9515] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.813910][ T9515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.826079][ T9515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.835567][ T9515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.845972][ T9515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.056067][ T8027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.080822][ T8027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.128025][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'.
[  219.146148][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'.
[  219.166778][ T9809] netlink: 'syz.4.1127': attribute type 3 has an invalid length.
[  219.254511][ T8028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.274804][ T8028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.362585][ T8028] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  219.397733][ T8028] ------------[ cut here ]------------
[  219.416778][ T8028] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5
[  219.448975][ T8028] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]')
[  219.505650][ T8028] CPU: 0 UID: 0 PID: 8028 Comm: kworker/u8:22 Not tainted 6.16.0-rc4-syzkaller-00114-g1e3b66e32601 #0 PREEMPT(full) 
[  219.505682][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  219.505695][ T8028] Workqueue: events_unbound cfg80211_wiphy_work
[  219.505726][ T8028] Call Trace:
[  219.505734][ T8028]  <TASK>
[  219.505743][ T8028]  dump_stack_lvl+0x189/0x250
[  219.505775][ T8028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.505801][ T8028]  ? __pfx__printk+0x10/0x10
[  219.505843][ T8028]  ubsan_epilogue+0xa/0x40
[  219.505873][ T8028]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  219.505907][ T8028]  ieee80211_request_ibss_scan+0x600/0x8b0
[  219.505962][ T8028]  ieee80211_ibss_work+0xd85/0x1060
[  219.505993][ T8028]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.506027][ T8028]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  219.506058][ T8028]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.506086][ T8028]  ? kcov_remote_stop+0x17e/0x6d0
[  219.506105][ T8028]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  219.506162][ T8028]  ? skb_dequeue+0x10e/0x150
[  219.506181][ T8028]  ? ieee80211_iface_work+0xcd4/0xfe0
[  219.506206][ T8028]  ? ieee80211_iface_work+0xf39/0xfe0
[  219.506241][ T8028]  cfg80211_wiphy_work+0x2dc/0x460
[  219.506267][ T8028]  ? process_scheduled_works+0x9ef/0x17b0
[  219.506295][ T8028]  process_scheduled_works+0xade/0x17b0
[  219.506356][ T8028]  ? __pfx_process_scheduled_works+0x10/0x10
[  219.506431][ T8028]  worker_thread+0x8a0/0xda0
[  219.506492][ T8028]  kthread+0x70e/0x8a0
[  219.506528][ T8028]  ? __pfx_worker_thread+0x10/0x10
[  219.506562][ T8028]  ? __pfx_kthread+0x10/0x10
[  219.506595][ T8028]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.506626][ T8028]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.506657][ T8028]  ? __pfx_kthread+0x10/0x10
[  219.506689][ T8028]  ret_from_fork+0x3fc/0x770
[  219.506716][ T8028]  ? __pfx_ret_from_fork+0x10/0x10
[  219.506748][ T8028]  ? __switch_to_asm+0x39/0x70
[  219.506775][ T8028]  ? __switch_to_asm+0x33/0x70
[  219.506801][ T8028]  ? __pfx_kthread+0x10/0x10
[  219.506834][ T8028]  ret_from_fork_asm+0x1a/0x30
[  219.506883][ T8028]  </TASK>
[  219.506982][ T8028] ---[ end trace ]---
[  219.727881][ T8028] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  219.735237][ T8028] CPU: 0 UID: 0 PID: 8028 Comm: kworker/u8:22 Not tainted 6.16.0-rc4-syzkaller-00114-g1e3b66e32601 #0 PREEMPT(full) 
[  219.747892][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  219.758005][ T8028] Workqueue: events_unbound cfg80211_wiphy_work
[  219.764339][ T8028] Call Trace:
[  219.767688][ T8028]  <TASK>
[  219.770740][ T8028]  dump_stack_lvl+0x99/0x250
[  219.775605][ T8028]  ? __asan_memcpy+0x40/0x70
[  219.780256][ T8028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.785525][ T8028]  ? __pfx__printk+0x10/0x10
[  219.790268][ T8028]  panic+0x2db/0x790
[  219.794195][ T8028]  ? __pfx_panic+0x10/0x10
[  219.798692][ T8028]  ? _printk+0xcf/0x120
[  219.802900][ T8028]  ? __pfx__printk+0x10/0x10
[  219.807567][ T8028]  check_panic_on_warn+0x89/0xb0
[  219.812590][ T8028]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  219.818360][ T8028]  ieee80211_request_ibss_scan+0x600/0x8b0
[  219.824473][ T8028]  ieee80211_ibss_work+0xd85/0x1060
[  219.829795][ T8028]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.835027][ T8028]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  219.840971][ T8028]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.847326][ T8028]  ? kcov_remote_stop+0x17e/0x6d0
[  219.852368][ T8028]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  219.858034][ T8028]  ? skb_dequeue+0x10e/0x150
[  219.862652][ T8028]  ? ieee80211_iface_work+0xcd4/0xfe0
[  219.868088][ T8028]  ? ieee80211_iface_work+0xf39/0xfe0
[  219.873536][ T8028]  cfg80211_wiphy_work+0x2dc/0x460
[  219.878676][ T8028]  ? process_scheduled_works+0x9ef/0x17b0
[  219.884428][ T8028]  process_scheduled_works+0xade/0x17b0
[  219.890031][ T8028]  ? __pfx_process_scheduled_works+0x10/0x10
[  219.896163][ T8028]  worker_thread+0x8a0/0xda0
[  219.900802][ T8028]  kthread+0x70e/0x8a0
[  219.904901][ T8028]  ? __pfx_worker_thread+0x10/0x10
[  219.910041][ T8028]  ? __pfx_kthread+0x10/0x10
[  219.914702][ T8028]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.919935][ T8028]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.925160][ T8028]  ? __pfx_kthread+0x10/0x10
[  219.929781][ T8028]  ret_from_fork+0x3fc/0x770
[  219.934436][ T8028]  ? __pfx_ret_from_fork+0x10/0x10
[  219.939580][ T8028]  ? __switch_to_asm+0x39/0x70
[  219.944374][ T8028]  ? __switch_to_asm+0x33/0x70
[  219.949169][ T8028]  ? __pfx_kthread+0x10/0x10
[  219.953815][ T8028]  ret_from_fork_asm+0x1a/0x30
[  219.958636][ T8028]  </TASK>
[  219.962034][ T8028] Kernel Offset: disabled
[  219.966626][ T8028] Rebooting in 86400 seconds..