last executing test programs:

1m52.387149924s ago: executing program 3 (id=210):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0xffffffbe, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0x1002}, {&(0x7f0000000a00)=""/229, 0xef}, {&(0x7f0000000400)=""/124, 0x86}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0), 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES32=r1], 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xd36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0x0, 0x6, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x15, &(0x7f0000000280)=""/21, 0x41000, 0x30, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x7, 0xae, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0x5}, {0x4, 0x5, 0x6, 0x7}, {0x2, 0x5, 0x3, 0x9}, {0x1, 0x2, 0xd, 0x6}, {0x1, 0x2, 0xd, 0xc}, {0x3, 0x5, 0xe, 0x7}], 0x10, 0xfffffff8}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000180)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0)
r7 = socket(0x10, 0x2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000005c0)={0x1537, 0x9, 0x4, 0x5, 0x5, 0x0, 0x7, 0xcd93, <r8=>0x0}, &(0x7f0000000600)=0x20) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) (async)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r9, &(0x7f0000000000)=ANY=[], 0x6)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000640)={r8, 0x67, "9d80614cb774113213656169efea6cac008039c9942dcab29d52bffc3387b433388653c0814dbda9d1ceedd7259e483177735f391468c53f9bc10d410eddbc630d9b073ed285038ee415981820d0d599905796ab9d0859f50000ea5a63aadd8b4452a4d722f717"}, &(0x7f00000006c0)=0x6f) (async)
write(r7, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf25060000000800020008100000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)

1m40.211906176s ago: executing program 3 (id=210):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0xffffffbe, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0x1002}, {&(0x7f0000000a00)=""/229, 0xef}, {&(0x7f0000000400)=""/124, 0x86}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0), 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES32=r1], 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xd36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0x0, 0x6, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x15, &(0x7f0000000280)=""/21, 0x41000, 0x30, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x7, 0xae, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0x5}, {0x4, 0x5, 0x6, 0x7}, {0x2, 0x5, 0x3, 0x9}, {0x1, 0x2, 0xd, 0x6}, {0x1, 0x2, 0xd, 0xc}, {0x3, 0x5, 0xe, 0x7}], 0x10, 0xfffffff8}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000180)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0)
r7 = socket(0x10, 0x2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000005c0)={0x1537, 0x9, 0x4, 0x5, 0x5, 0x0, 0x7, 0xcd93, <r8=>0x0}, &(0x7f0000000600)=0x20) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) (async)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r9, &(0x7f0000000000)=ANY=[], 0x6)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000640)={r8, 0x67, "9d80614cb774113213656169efea6cac008039c9942dcab29d52bffc3387b433388653c0814dbda9d1ceedd7259e483177735f391468c53f9bc10d410eddbc630d9b073ed285038ee415981820d0d599905796ab9d0859f50000ea5a63aadd8b4452a4d722f717"}, &(0x7f00000006c0)=0x6f) (async)
write(r7, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf25060000000800020008100000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)

1m28.691773413s ago: executing program 3 (id=210):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0xffffffbe, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0x1002}, {&(0x7f0000000a00)=""/229, 0xef}, {&(0x7f0000000400)=""/124, 0x86}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0), 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES32=r1], 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xd36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0x0, 0x6, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x15, &(0x7f0000000280)=""/21, 0x41000, 0x30, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x7, 0xae, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0x5}, {0x4, 0x5, 0x6, 0x7}, {0x2, 0x5, 0x3, 0x9}, {0x1, 0x2, 0xd, 0x6}, {0x1, 0x2, 0xd, 0xc}, {0x3, 0x5, 0xe, 0x7}], 0x10, 0xfffffff8}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000180)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0)
r7 = socket(0x10, 0x2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000005c0)={0x1537, 0x9, 0x4, 0x5, 0x5, 0x0, 0x7, 0xcd93, <r8=>0x0}, &(0x7f0000000600)=0x20) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) (async)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r9, &(0x7f0000000000)=ANY=[], 0x6)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000640)={r8, 0x67, "9d80614cb774113213656169efea6cac008039c9942dcab29d52bffc3387b433388653c0814dbda9d1ceedd7259e483177735f391468c53f9bc10d410eddbc630d9b073ed285038ee415981820d0d599905796ab9d0859f50000ea5a63aadd8b4452a4d722f717"}, &(0x7f00000006c0)=0x6f) (async)
write(r7, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf25060000000800020008100000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)

1m15.945980275s ago: executing program 3 (id=210):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0xffffffbe, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0x1002}, {&(0x7f0000000a00)=""/229, 0xef}, {&(0x7f0000000400)=""/124, 0x86}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0), 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES32=r1], 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xd36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0x0, 0x6, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x15, &(0x7f0000000280)=""/21, 0x41000, 0x30, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x7, 0xae, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0x5}, {0x4, 0x5, 0x6, 0x7}, {0x2, 0x5, 0x3, 0x9}, {0x1, 0x2, 0xd, 0x6}, {0x1, 0x2, 0xd, 0xc}, {0x3, 0x5, 0xe, 0x7}], 0x10, 0xfffffff8}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000180)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0)
r7 = socket(0x10, 0x2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000005c0)={0x1537, 0x9, 0x4, 0x5, 0x5, 0x0, 0x7, 0xcd93, <r8=>0x0}, &(0x7f0000000600)=0x20) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) (async)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r9, &(0x7f0000000000)=ANY=[], 0x6)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000640)={r8, 0x67, "9d80614cb774113213656169efea6cac008039c9942dcab29d52bffc3387b433388653c0814dbda9d1ceedd7259e483177735f391468c53f9bc10d410eddbc630d9b073ed285038ee415981820d0d599905796ab9d0859f50000ea5a63aadd8b4452a4d722f717"}, &(0x7f00000006c0)=0x6f) (async)
write(r7, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf25060000000800020008100000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)

1m3.539236331s ago: executing program 3 (id=210):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0xffffffbe, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0x1002}, {&(0x7f0000000a00)=""/229, 0xef}, {&(0x7f0000000400)=""/124, 0x86}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0), 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES32=r1], 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xd36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0x0, 0x6, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x15, &(0x7f0000000280)=""/21, 0x41000, 0x30, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x7, 0xae, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0x5}, {0x4, 0x5, 0x6, 0x7}, {0x2, 0x5, 0x3, 0x9}, {0x1, 0x2, 0xd, 0x6}, {0x1, 0x2, 0xd, 0xc}, {0x3, 0x5, 0xe, 0x7}], 0x10, 0xfffffff8}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000180)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0)
r7 = socket(0x10, 0x2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000005c0)={0x1537, 0x9, 0x4, 0x5, 0x5, 0x0, 0x7, 0xcd93, <r8=>0x0}, &(0x7f0000000600)=0x20) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) (async)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r9, &(0x7f0000000000)=ANY=[], 0x6)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000640)={r8, 0x67, "9d80614cb774113213656169efea6cac008039c9942dcab29d52bffc3387b433388653c0814dbda9d1ceedd7259e483177735f391468c53f9bc10d410eddbc630d9b073ed285038ee415981820d0d599905796ab9d0859f50000ea5a63aadd8b4452a4d722f717"}, &(0x7f00000006c0)=0x6f) (async)
write(r7, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf25060000000800020008100000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)

49.447339502s ago: executing program 3 (id=210):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0xffffffbe, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00'}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4093, 0x1002}, {&(0x7f0000000a00)=""/229, 0xef}, {&(0x7f0000000400)=""/124, 0x86}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0), 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40000020, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRES32=r1], 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xd36}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x0, 0x0, 0x6, 0x10}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x15, &(0x7f0000000280)=""/21, 0x41000, 0x30, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x7, 0xae, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0x5}, {0x4, 0x5, 0x6, 0x7}, {0x2, 0x5, 0x3, 0x9}, {0x1, 0x2, 0xd, 0x6}, {0x1, 0x2, 0xd, 0xc}, {0x3, 0x5, 0xe, 0x7}], 0x10, 0xfffffff8}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000180)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0)
r7 = socket(0x10, 0x2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000005c0)={0x1537, 0x9, 0x4, 0x5, 0x5, 0x0, 0x7, 0xcd93, <r8=>0x0}, &(0x7f0000000600)=0x20) (async)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) (async)
bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r9, &(0x7f0000000000)=ANY=[], 0x6)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000640)={r8, 0x67, "9d80614cb774113213656169efea6cac008039c9942dcab29d52bffc3387b433388653c0814dbda9d1ceedd7259e483177735f391468c53f9bc10d410eddbc630d9b073ed285038ee415981820d0d599905796ab9d0859f50000ea5a63aadd8b4452a4d722f717"}, &(0x7f00000006c0)=0x6f) (async)
write(r7, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf25060000000800020008100000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)

2.662518835s ago: executing program 4 (id=1850):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1e, 0x1, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x86, &(0x7f0000000100), 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="ccdf9aa0", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf250c000000080005000000000008000600f8ffffff"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
socket$pppoe(0x18, 0x1, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getpeername$llc(r4, &(0x7f0000000140), &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000003c0)={r5, 0xcb}, 0x8)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140f, 0x401, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}}, 0x24000800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="0600000004000000be7000005c", @ANYRES32=0x0], 0x50)
clock_gettime(0x0, &(0x7f0000006f80)={<r6=>0x0, <r7=>0x0})
recvmmsg(r0, &(0x7f0000006d00)=[{{&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000580)=""/75, 0x4b}, {&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000780)=""/245, 0xf5}], 0x4, &(0x7f00000009c0)=""/231, 0xe7}, 0x2}, {{&(0x7f00000008c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000940)}, {&(0x7f0000000ac0)=""/187, 0xbb}], 0x2, &(0x7f0000000bc0)=""/4096, 0x1000}}, {{&(0x7f0000001bc0)=@pppol2tp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001c40)=""/52, 0x34}, {&(0x7f0000001c80)=""/8, 0x8}], 0x2, &(0x7f0000001d00)}, 0x5}, {{&(0x7f0000001d40)=@alg, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001dc0)=""/220, 0xdc}], 0x1, &(0x7f0000001f00)=""/71, 0x47}, 0x81}, {{&(0x7f0000001f80)=@rc={0x1f, @none}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002000)=""/138, 0x8a}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/33, 0x21}, {&(0x7f0000003100)=""/129, 0x81}, {&(0x7f00000031c0)=""/145, 0x91}, {&(0x7f0000003280)=""/49, 0x31}], 0x6, &(0x7f0000003340)=""/155, 0x9b}, 0xffffffff}, {{&(0x7f0000003400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003480)=""/1, 0x1}, {&(0x7f00000034c0)=""/140, 0x8c}, {&(0x7f0000003580)=""/116, 0x74}, {&(0x7f0000003600)=""/24, 0x18}, {&(0x7f0000003640)=""/45, 0x2d}, {&(0x7f0000003680)=""/198, 0xc6}, {&(0x7f0000003780)=""/184, 0xb8}, {&(0x7f0000003840)=""/93, 0x5d}], 0x8, &(0x7f0000003940)=""/35, 0x23}, 0x2}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003980)=""/38, 0x26}, {&(0x7f00000039c0)=""/194, 0xc2}, {&(0x7f0000003ac0)=""/239, 0xef}, {&(0x7f0000003bc0)=""/31, 0x1f}, {&(0x7f0000003c00)=""/202, 0xca}, {&(0x7f0000003d00)=""/78, 0x4e}, {&(0x7f0000003d80)=""/103, 0x67}], 0x7}, 0x6}, {{&(0x7f0000003e80)=@xdp, 0x80, &(0x7f0000005240)=[{&(0x7f0000003f00)=""/180, 0xb4}, {&(0x7f0000003fc0)=""/245, 0xf5}, {&(0x7f00000040c0)=""/38, 0x26}, {&(0x7f0000004100)=""/204, 0xcc}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/44, 0x2c}], 0x6}, 0x8}, {{&(0x7f00000052c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000067c0)=[{&(0x7f0000005340)=""/61, 0x3d}, {&(0x7f0000005380)=""/111, 0x6f}, {&(0x7f0000005400)=""/223, 0xdf}, {&(0x7f0000005500)=""/106, 0x6a}, {&(0x7f0000005580)=""/29, 0x1d}, {&(0x7f00000055c0)=""/247, 0xf7}, {&(0x7f00000056c0)=""/4096, 0x1000}, {&(0x7f00000066c0)=""/172, 0xac}, {&(0x7f0000006780)=""/47, 0x2f}], 0x9, &(0x7f0000006880)=""/52, 0x34}, 0xfb}, {{&(0x7f00000068c0)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000006c00)=[{&(0x7f0000006940)=""/177, 0xb1}, {&(0x7f0000006a00)=""/209, 0xd1}, {&(0x7f0000006b00)=""/213, 0xd5}], 0x3, &(0x7f0000006c40)=""/144, 0x90}, 0x1}], 0xa, 0x0, &(0x7f0000006fc0)={r6, r7+60000000})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000400))

2.497469302s ago: executing program 4 (id=1851):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x25dfdbfb, {0x54}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}}, 0x0)
close(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0xf13, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="100029bd7000fbdbdf2507000000440003800800020007000000080001000100000008000300010000000800010008000000080700000000000000000200050000000800030006000000080001000c1d00000c0002800800010002000000340007800c000300fbffffffffffffff0c00030000000000000000000c000400ff0f0000000000000c000400080000000000000004000780"], 0x9c}, 0x1, 0x0, 0x0, 0x6}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x25dfdbfb, {0x54}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}}, 0x0) (async)
close(r0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, r3, 0xf13, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0) (async)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="100029bd7000fbdbdf2507000000440003800800020007000000080001000100000008000300010000000800010008000000080700000000000000000200050000000800030006000000080001000c1d00000c0002800800010002000000340007800c000300fbffffffffffffff0c00030000000000000000000c000400ff0f0000000000000c000400080000000000000004000780"], 0x9c}, 0x1, 0x0, 0x0, 0x6}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async)

2.394119426s ago: executing program 4 (id=1854):
r0 = socket(0x840000000002, 0x3, 0x100)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x50, &(0x7f00000000c0)={0x0, 0x0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x5, 0x8, @multicast1}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0xa9}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r9=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r8, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x30}}, 0x11)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r10, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x12, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x12, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x0, 0x0, 0x6, 0x4, 0x9, 0xfffffffffffffff0, 0x10}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

2.003245004s ago: executing program 4 (id=1859):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0xc, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x38}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000120001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000100"/112], 0xb8}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a0000272d"], 0x1c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYRESOCT=r6, @ANYRES32=r7, @ANYBLOB="7c005a807400008005000700020000001e0001000a300c9f4816161b091b030430300109093006220b5112093003000007000100182418"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20008840)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

1.060690925s ago: executing program 0 (id=1870):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1)

1.056351403s ago: executing program 4 (id=1871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
r4 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x6c00, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.036864443s ago: executing program 2 (id=1872):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = getpid()
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000003f000200feffffff007c000008006100c1237716ecf1", @ANYRES32=r0, @ANYBLOB="0c00018008000600", @ANYRES32=r1, @ANYBLOB="0800028004001780"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b80)=ANY=[@ANYRES64=r0], 0x1c}], 0x1}, 0x844) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) (async)
getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000300)={@multicast2, @initdev}, &(0x7f0000000380)=0x8)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000811}, 0x0) (async)
recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async)
sendmsg$inet(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="29132f23ac15ce98b9", 0x9}], 0x1}, 0x40)
bind$vsock_stream(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) (async)
sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b285d022f", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)='>Cj\a', 0x4}, {0x0}], 0x2}}], 0x2, 0x4000000) (async)
unshare(0x26020480)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000007c0), 0x10)
ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019525c00000000000000000000000000000000000000ffff00000000ac1414ba00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000)

923.99746ms ago: executing program 0 (id=1873):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)='#^\x00', <r1=>0x0}, 0x30)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4)

852.85425ms ago: executing program 4 (id=1874):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
recvmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x8}], 0x2, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x101, 0x4)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1}}, 0x2f)
sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@can={{}, 0x6, 0x2, 0x0, 0x0, "68fe7468dfc712fe"}, 0x10}, 0x1, 0x0, 0x0, 0x20008095}, 0xc001)

850.853588ms ago: executing program 1 (id=1875):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001c40)="03", 0x1}], 0x1}}], 0x1, 0x8010)
recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x3}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wlan0\x00', 0x0})
shutdown(r0, 0x1) (async)
shutdown(r0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)

847.852929ms ago: executing program 2 (id=1876):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x10)
unshare(0x28000600)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000040)=0x2000000, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=@setneightbl={0x1c, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20050}, 0x40080)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x8, 0x0, 0x0, 0xe4}, {0x6, 0x3, 0x2, 0x10000}, {0x4, 0x3, 0x3, 0x5}, {0x1, 0x8f, 0xd0, 0xf}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d", 0xce}], 0x1}}], 0x1, 0xc0)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
close(0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='f2fs_fallocate\x00', r0}, 0x18)

748.804661ms ago: executing program 2 (id=1877):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYRES8=r0], 0x38}], 0x1}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00010400000000000000000a0000003f00000000000000080001"], 0x24}}, 0x0)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)

734.880322ms ago: executing program 0 (id=1878):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x34, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x34}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb301000000dbb7d553b4e92155", 0x39}], 0x1}, 0x20000050)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

592.376866ms ago: executing program 2 (id=1879):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e", 0x6b}, {&(0x7f0000000e80)="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", 0x1ad}], 0x2}}], 0x2, 0xc0)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c803c010b800800090000000000080009000000000008000a"], 0x16c}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="24f20000", @ANYRES16=r0, @ANYBLOB="010000000000fddbdf2555000000080001005100000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x240040c0)
r7 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f00000004c0)="8292a2b53086", 0x6}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x0)

578.080148ms ago: executing program 0 (id=1880):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 32)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async, rerun: 32)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a3000"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x3) (async)
close(0x4) (async)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3, 0x0, 0x5, 0x50}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8) (rerun: 64)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000680)={r8, @in6={{0xa, 0x4e22, 0xa9, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, [0x3, 0x10000, 0x7ff, 0x0, 0x85b, 0x9, 0x7, 0x7fffffffffffffff, 0x1, 0x5, 0x8, 0xfffb, 0xfffffc0000000000, 0x2, 0xd]}, &(0x7f0000000080)=0x100) (async)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={r8, 0xfc3e}, 0x8)

560.309555ms ago: executing program 1 (id=1881):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @rand_addr=0x64010103}}, 0x0, 0x0, 0x39, 0x0, "c3218d82c5890101d7cdb23c72887c897926a8856263b50c57bfccf9f362f16f21f5c8facc1d1518103bbde1a9fe13f6545bbdff9c1351ba69e297337d6a5e4a94bd192900"}, 0xd8)
ioctl$FICLONE(r0, 0x40049409, r0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x24, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYRESOCT=r3, @ANYRES8=r4, @ANYRES64=r3], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94)

371.06816ms ago: executing program 1 (id=1882):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x8, {@in6_addr=@remote, 0x8edd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x10)

335.061236ms ago: executing program 0 (id=1883):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xf27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x1fe, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0xa, 0x5b, 0x2, 0x6}, {0x4, 0x7, 0x0, 0x2}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14050000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000001400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4)
getsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f00000001c0), &(0x7f0000000800)=0x4)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)={0xc0, 0x4, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57feb997}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}]}, @NFTA_CHAIN_COUNTERS={0xfffffffffffffe42, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f2e}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x785b7848}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4b}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40040c4}, 0x20040000)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r6, @ANYBLOB="408052", @ANYRES16=r4], 0x1c}}, 0x0)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)
syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb8100000086dd60f51c9300403a00fe8000000000007f40ace0dadb4b85b9da926cd5829d8b0000000000000000bbff020000000000000000000000000001020090780000050060508359002c0000fc01000000000070460000000000000000000000000000000000000000000001"], 0x0)
sendmsg$can_raw(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x4, 0x1, 0x1}, 0x34, 0x2, 0x0, 0x0, "ffb4ec6f4c86da8df59df6e6b031a89360d53c2e3dbd9d6295f8b2e2d724210f8c476d20b193b1f2168acdbbbb90593364ee95b1cca4b90c0371d9481907670c"}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x400c0d0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x20004804)

300.642398ms ago: executing program 1 (id=1884):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_channels={0x50}})
setsockopt$inet6_int(r1, 0x29, 0x5, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vlan0\x00', 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000430016002bbd7002000000020000000000000045067a8eb632cd469f82724ff6ba551c1919b13299e24b187a8c35f253333732ec7f7c69649c7960c738550906ec9d9e07100f26f6aed3b355cf176a4c211dbcccde11a7d4eada0bac5d88026c8b2cea01f4d26b410b5053080e1b9f004df567fd7baf1540d800b91279e05cd8f5088180fcb6ff78699b953dae0b587b700eeb8fe19ec6e93cb02313b818f324b5ede644a9dbf7008c9f8faccb42f97bed100a91ca62c4a65ce66ab24bc8c0a88bb51ab4c3b50000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20050}, 0x40080)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fba509", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x1e, 0x11, "6467377ebbcd66b8eeb6ba68ea27fa"}]}}}}}}}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3], 0x44}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffe, @local}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc0)
r6 = socket(0x2, 0x3, 0xff)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={<r7=>0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x9, 0x3, 0x6, 0x1, 0x2, 0x7ff, 0x64}, &(0x7f0000000240)=0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000280)={0x1, 0x5, 0x8000, 0x10, 0x1, 0x2, 0x2, 0x80000001, r7}, 0x20)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x130, 0x130, 0x130, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)

256.592911ms ago: executing program 2 (id=1885):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000205400e50100000000fa3b8bc60ed841000000000000000077ae07bf9dd84804e84cf21a5da40e517fe0adc2cec7eddde54a9ada5761e101c515e2dd48d4131c0ed45f0b1b59caa04508bbe19b039895bad28b0e67445bbd6114141af028237bc04886df14cac9841d61fc67d2df4fb4be3c2053e8781179ff15e2519d5d6fc74373a70b8f0c5c3996069c", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010008000a01010100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x40055}, 0x10)
r3 = socket$pptp(0x18, 0x1, 0x2)
ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000))
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x801)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
r8 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000340)={0xc, 0xe6, 0x8, 0x686, 0x75b5, 0x8, 0xd2, 0xa, r5}, &(0x7f0000000380)=0x20)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
ppoll(&(0x7f00000001c0)=[{r9, 0x8038}], 0x1, &(0x7f00000003c0), 0x0, 0x0)
connect$l2tp6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40007, 0x200004}, 0x20)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r12}, 0x8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r11, r10, 0x4, r12}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r11, 0x6}, 0x94)

177.105348ms ago: executing program 1 (id=1886):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x4, 0x7, 0x0, 0x1}, 0x48)

146.070152ms ago: executing program 0 (id=1887):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="02000000"], 0x1c}}, 0x20024090)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r5=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_SECURITY(r8, 0x6, 0x4, 0x0, 0xf0ff1f00000000)
bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
setsockopt$inet_int(r7, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000340)=0x40, 0x4)
recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r9}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))

145.392258ms ago: executing program 2 (id=1888):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 64)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffdad, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 1 (id=1889):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r1)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd0, r3, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xa4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfea12d3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4040090)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xd}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x20000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r1)
sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r6, 0x24, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4048800)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r7, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x20000855)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r7, 0x24, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x408, 0x5d}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "e0363bd09c7f899a1f71f5009527ccd3"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c726e4118f089cb3b226c3c871cf1d15"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x11)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x3, 0x911b, 0xc, 0x4}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@o_path={&(0x7f0000000c40)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x11, &(0x7f0000000940)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], &(0x7f0000000a00)='syzkaller\x00', 0xac, 0x89, &(0x7f0000000a40)=""/137, 0x40f00, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0xf, 0x4, 0xd}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000cc0)=[0xffffffffffffffff, r10, r11, 0x1, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x0, 0x2, 0x6, 0x4}, {0x1, 0x2, 0x5, 0xb}, {0x4, 0x3, 0x8, 0x3}, {0x1, 0x3, 0x4, 0x5}, {0x4, 0x4, 0x4}, {0x2, 0x4, 0x3, 0x6}, {0x0, 0x4, 0x8}, {0x4, 0x5, 0x7, 0x3}], 0x10, 0x400}, 0x94)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r5)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r12, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008050}, 0x4015)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f80), r1)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001100)={r10, &(0x7f0000000fc0)="a4343197aafc912f70afee800417a934944dfe8707eb6569850372e49f0c8ee02925bf271134e19e6e715d65461f804988e0faa6ca4e57aaeb47d19529c39e5f2f9b979d2b67d05e6f34abe2e0f834e44a156c04e2aa66dcf9ceeae552", &(0x7f0000001040)=""/132, 0x4}, 0x20)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x40, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40041)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001280)={'wg0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001780)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f00000012c0)=@newtclass={0x460, 0x28, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x2, 0xfff2}, {0x10, 0x9}, {0x3, 0x9a53d6f0fd972dc1}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x80000000, 0x92e1, 0x0, 0x2, 0x5, 0x8, 0xe8, 0x1, 0x503, 0xfffff648, 0xfffffffd, 0x36, 0x8, 0x9aa, 0x9, 0x401, 0x9, 0xaf, 0x100, 0x2, 0xb, 0xfffffff9, 0xfff, 0x13e5f7a0, 0x1, 0x7fff, 0x76c, 0x611, 0xb, 0x2, 0x4, 0x8, 0x5, 0x6, 0x6, 0xffff99a1, 0x2, 0x7d83, 0x7e6, 0x6, 0x5157, 0x8, 0xc, 0x7f, 0xcdd, 0x4, 0x4, 0xf, 0x6, 0xe3, 0x1, 0x5, 0xfffffffa, 0x3, 0x9, 0x4, 0x3, 0xb3, 0x45b3, 0x8, 0x957, 0x5, 0x100, 0xf, 0xfffffff9, 0x4, 0x8, 0x2, 0x4, 0x8001, 0x2, 0x10000, 0xfffffff8, 0x10000, 0x7fff, 0x1, 0xfffffff7, 0x8, 0x2, 0x4, 0x9, 0x7, 0x10, 0x2, 0x28, 0x10, 0x8e3e, 0x7, 0x6, 0x6, 0x35, 0x200, 0x101, 0xc, 0x3, 0x3ff, 0x6, 0x59367b88, 0x4, 0xffffffff, 0x3, 0x4, 0x39, 0x6, 0x1, 0x80, 0x2, 0xba, 0x9, 0x4, 0x2, 0x8, 0x3, 0x3ff, 0x4, 0x40, 0x4, 0x3d, 0x3, 0x1f5, 0xde8, 0xce1, 0xfff, 0x4, 0x3, 0x5, 0x2, 0x6, 0x1000, 0x4, 0x8, 0x52, 0x1, 0x44, 0xc8, 0x1, 0x2, 0xf48, 0x2, 0x9, 0x0, 0xff, 0x5, 0x8, 0x98000000, 0x3, 0x8001, 0x40, 0x5780, 0x1, 0x7ff5, 0x100, 0x101, 0x33e, 0x7fffffff, 0x10, 0x101, 0x6, 0x8, 0x1, 0x8, 0x5, 0x2, 0x5, 0x3ff, 0x9, 0x101, 0x5b00c19a, 0xffc00000, 0x7fffffff, 0x4, 0x9, 0xde, 0x2, 0x8, 0x9, 0x3, 0x3, 0x7, 0x80, 0xfffffffc, 0x0, 0x0, 0x6c, 0x6, 0x1, 0x7, 0x8, 0x4800000, 0x7fffffff, 0x4, 0x3, 0x8001, 0x5, 0xfffffffa, 0xc84, 0x0, 0x0, 0x2, 0x5, 0x5, 0x6, 0x4, 0x1, 0x2, 0x4, 0x8, 0xfffffffa, 0x80000000, 0x0, 0x1, 0x2, 0x8001, 0x0, 0x372, 0x7, 0x0, 0x0, 0x4, 0x6, 0x430, 0x1d2, 0x8, 0x1, 0x0, 0xd1, 0xff, 0x7, 0x7, 0x6, 0xfffffff7, 0x7fffffff, 0x2, 0x4, 0xff, 0x7, 0x8, 0x1, 0x8, 0x4f8, 0x8, 0x1, 0x3, 0x80000001, 0x2, 0xffff, 0x8, 0x1, 0x5, 0x7, 0x3, 0x7e17, 0x80000000, 0x6, 0x7]}]}}, @TCA_RATE={0x6, 0x5, {0x2e, 0x81}}, @TCA_RATE={0x6, 0x5, {0x65, 0x8}}]}, 0x460}, 0x1, 0x0, 0x0, 0x800}, 0x404c005)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001800), 0x2, 0x0)

kernel console output (not intermixed with test programs):

.754436][ T7854] hsr_slave_0: entered promiscuous mode
[  151.761294][ T7854] hsr_slave_1: entered promiscuous mode
[  151.991328][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.524'.
[  152.011113][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.524'.
[  152.023985][ T7979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.524'.
[  152.062570][ T5836] Bluetooth: hci1: command tx timeout
[  152.155756][ T7989] nbd: socks must be embedded in a SOCK_ITEM attr
[  152.367864][ T7999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.529'.
[  152.432699][ T7999] batadv0: entered promiscuous mode
[  152.450906][ T7999] batadv0: left promiscuous mode
[  152.991885][ T8034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.539'.
[  153.060731][ T7854] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  153.096231][ T7854] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  153.125610][ T7854] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  153.152690][ T7854] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  153.318210][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'.
[  153.355312][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.424624][ T8053] bridge_slave_1 (unregistering): left allmulticast mode
[  153.447276][ T8053] bridge_slave_1 (unregistering): left promiscuous mode
[  153.464908][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.665791][ T7854] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.743020][ T7854] 8021q: adding VLAN 0 to HW filter on device team0
[  153.778196][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.785478][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.835161][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.842436][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.940744][ T8084] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  153.978007][ T8084] input: failed to attach handler evdev to device input7, error: -4
[  153.986365][ T7854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.139550][ T5836] Bluetooth: hci1: command tx timeout
[  154.157436][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'.
[  154.266523][ T8095] Cannot find del_set index 128 as target
[  154.275875][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.556'.
[  154.499065][ T7854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.585571][ T8110] netlink: 'syz.2.557': attribute type 3 has an invalid length.
[  154.651386][ T7854] veth0_vlan: entered promiscuous mode
[  154.693647][ T7854] veth1_vlan: entered promiscuous mode
[  154.776652][ T7854] veth0_macvtap: entered promiscuous mode
[  154.807906][ T7854] veth1_macvtap: entered promiscuous mode
[  154.984713][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.024057][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.045824][ T7854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.055152][ T7854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.064087][ T7854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.073800][ T7854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.300787][ T8141] netlink: 'syz.2.569': attribute type 21 has an invalid length.
[  155.310451][ T8141] IPv6: NLM_F_CREATE should be specified when creating new route
[  155.333099][ T8145] xt_hashlimit: size too large, truncated to 1048576
[  155.434885][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.459610][ T8150] netlink: 'syz.0.570': attribute type 6 has an invalid length.
[  155.490032][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.696980][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.736499][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.756999][ T8165] netlink: 'syz.1.574': attribute type 24 has an invalid length.
[  156.186187][ T8185] __nla_validate_parse: 9 callbacks suppressed
[  156.186208][ T8185] netlink: 76 bytes leftover after parsing attributes in process `syz.1.582'.
[  156.339756][ T8192] veth5: entered allmulticast mode
[  156.623437][ T8208] syz.1.590: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  156.676540][ T8208] CPU: 1 UID: 0 PID: 8208 Comm: syz.1.590 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  156.676593][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  156.676604][ T8208] Call Trace:
[  156.676613][ T8208]  <TASK>
[  156.676622][ T8208]  dump_stack_lvl+0x189/0x250
[  156.676661][ T8208]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.676690][ T8208]  ? __pfx__printk+0x10/0x10
[  156.676713][ T8208]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  156.676735][ T8208]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  156.676759][ T8208]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  156.676782][ T8208]  warn_alloc+0x214/0x310
[  156.676813][ T8208]  ? __pfx_warn_alloc+0x10/0x10
[  156.676848][ T8208]  ? __get_vm_area_node+0x28f/0x300
[  156.676870][ T8208]  ? hash_ipportnet_create+0x358/0xfe0
[  156.676903][ T8208]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  156.676924][ T8208]  ? do_syscall_64+0xfa/0x3b0
[  156.676990][ T8208]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  156.677019][ T8208]  ? rcu_is_watching+0x15/0xb0
[  156.677058][ T8208]  ? hash_ipportnet_create+0x358/0xfe0
[  156.677082][ T8208]  ? hash_ipportnet_create+0x358/0xfe0
[  156.677107][ T8208]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  156.677128][ T8208]  ? hash_ipportnet_create+0x358/0xfe0
[  156.677156][ T8208]  ? hash_ipportnet_create+0x2fe/0xfe0
[  156.677189][ T8208]  hash_ipportnet_create+0x358/0xfe0
[  156.677227][ T8208]  ? __nla_parse+0x40/0x60
[  156.677255][ T8208]  ? __pfx_hash_ipportnet_create+0x10/0x10
[  156.677286][ T8208]  ip_set_create+0xa94/0x1940
[  156.677314][ T8208]  ? ip_set_create+0x4a2/0x1940
[  156.677356][ T8208]  ? __pfx_ip_set_create+0x10/0x10
[  156.677430][ T8208]  nfnetlink_rcv_msg+0xb4d/0x1130
[  156.677461][ T8208]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  156.677513][ T8208]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  156.677538][ T8208]  ? kasan_save_free_info+0x46/0x50
[  156.677635][ T8208]  netlink_rcv_skb+0x205/0x470
[  156.677660][ T8208]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  156.677691][ T8208]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  156.677727][ T8208]  ? bpf_lsm_capable+0x9/0x20
[  156.677743][ T8208]  ? security_capable+0x7e/0x2e0
[  156.677775][ T8208]  nfnetlink_rcv+0x26a/0x2520
[  156.677806][ T8208]  ? __dev_queue_xmit+0x1cd7/0x3a70
[  156.677838][ T8208]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[  156.677870][ T8208]  ? __dev_queue_xmit+0x27e/0x3a70
[  156.677895][ T8208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.677927][ T8208]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  156.677953][ T8208]  ? __pfx___dev_queue_xmit+0x10/0x10
[  156.677995][ T8208]  ? ref_tracker_free+0x63a/0x7d0
[  156.678018][ T8208]  ? __copy_skb_header+0xa7/0x550
[  156.678044][ T8208]  ? __pfx_ref_tracker_free+0x10/0x10
[  156.678091][ T8208]  ? skb_clone+0x246/0x3a0
[  156.678120][ T8208]  ? __netlink_deliver_tap+0x807/0x850
[  156.678141][ T8208]  ? netlink_deliver_tap+0x2e/0x1b0
[  156.678171][ T8208]  ? netlink_deliver_tap+0x2e/0x1b0
[  156.678192][ T8208]  ? netlink_deliver_tap+0x2e/0x1b0
[  156.678221][ T8208]  netlink_unicast+0x758/0x8d0
[  156.678278][ T8208]  netlink_sendmsg+0x805/0xb30
[  156.678312][ T8208]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.678338][ T8208]  ? aa_sock_msg_perm+0x94/0x160
[  156.678365][ T8208]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  156.678388][ T8208]  ? __pfx_netlink_sendmsg+0x10/0x10
[  156.678412][ T8208]  __sock_sendmsg+0x219/0x270
[  156.678445][ T8208]  ____sys_sendmsg+0x505/0x830
[  156.678477][ T8208]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.678513][ T8208]  ? import_iovec+0x74/0xa0
[  156.678537][ T8208]  ___sys_sendmsg+0x21f/0x2a0
[  156.678578][ T8208]  ? __pfx____sys_sendmsg+0x10/0x10
[  156.678655][ T8208]  ? __fget_files+0x2a/0x420
[  156.678675][ T8208]  ? __fget_files+0x3a0/0x420
[  156.678707][ T8208]  __x64_sys_sendmsg+0x19b/0x260
[  156.678734][ T8208]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  156.678772][ T8208]  ? rcu_is_watching+0x15/0xb0
[  156.678807][ T8208]  ? do_syscall_64+0xbe/0x3b0
[  156.678841][ T8208]  do_syscall_64+0xfa/0x3b0
[  156.678867][ T8208]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.678894][ T8208]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.678913][ T8208]  ? clear_bhb_loop+0x60/0xb0
[  156.678937][ T8208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.678956][ T8208] RIP: 0033:0x7f763d78e929
[  156.678974][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.678990][ T8208] RSP: 002b:00007f763e65c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.679012][ T8208] RAX: ffffffffffffffda RBX: 00007f763d9b5fa0 RCX: 00007f763d78e929
[  156.679026][ T8208] RDX: 0000000000004020 RSI: 0000200000000040 RDI: 0000000000000003
[  156.679039][ T8208] RBP: 00007f763d810b39 R08: 0000000000000000 R09: 0000000000000000
[  156.679051][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.679063][ T8208] R13: 0000000000000000 R14: 00007f763d9b5fa0 R15: 00007ffd8c577368
[  156.679097][ T8208]  </TASK>
[  157.204191][ T8208] Mem-Info:
[  157.207470][ T8208] active_anon:3285 inactive_anon:0 isolated_anon:0
[  157.207470][ T8208]  active_file:1125 inactive_file:39858 isolated_file:0
[  157.207470][ T8208]  unevictable:768 dirty:48 writeback:0
[  157.207470][ T8208]  slab_reclaimable:10724 slab_unreclaimable:95719
[  157.207470][ T8208]  mapped:23564 shmem:1363 pagetables:801
[  157.207470][ T8208]  sec_pagetables:0 bounce:0
[  157.207470][ T8208]  kernel_misc_reclaimable:0
[  157.207470][ T8208]  free:1345271 free_pcp:15080 free_cma:0
[  157.253079][ T8208] Node 0 active_anon:13140kB inactive_anon:0kB active_file:4500kB inactive_file:159228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94256kB dirty:184kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11132kB pagetables:3048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  157.297604][ T8208] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  157.344565][ T8208] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  157.385649][ T8208] lowmem_reserve[]: 0 2500 2502 2502 2502
[  157.391647][ T8208] Node 0 DMA32 free:1496376kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13012kB inactive_anon:0kB active_file:4500kB inactive_file:157396kB unevictable:1536kB writepending:180kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:36860kB local_pcp:19780kB free_cma:0kB
[  157.462098][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.476520][ T8208] lowmem_reserve[]: 0 0 1 1 1
[  157.481527][ T8208] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  157.517457][ T8208] lowmem_reserve[]: 0 0 0 0 0
[  157.522924][ T8208] Node 1 Normal free:3899364kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21240kB local_pcp:9304kB free_cma:0kB
[  157.554994][ T8208] lowmem_reserve[]: 0 0 0 0 0
[  157.559851][ T8208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  157.572685][ T8208] Node 0 DMA32: 4047*4kB (UME) 1480*8kB (UME) 690*16kB (UME) 569*32kB (UME) 157*64kB (UME) 61*128kB (UME) 34*256kB (UM) 24*512kB (UME) 17*1024kB (UM) 9*2048kB (UM) 333*4096kB (M) = 1495932kB
[  157.594134][ T8208] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  157.606311][ T8208] Node 1 Normal: 175*4kB (UME) 67*8kB (UME) 41*16kB (UME) 88*32kB (UME) 28*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3899364kB
[  157.624658][ T8208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  157.634274][ T8208] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  157.643641][ T8208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  157.653240][ T8208] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  157.663385][ T8208] 42343 total pagecache pages
[  157.668095][ T8208] 0 pages in swap cache
[  157.672435][ T8208] Free swap  = 124996kB
[  157.676639][ T8208] Total swap = 124996kB
[  157.686721][ T8208] 2097051 pages RAM
[  157.691095][ T8208] 0 pages HighMem/MovableOnly
[  157.695870][ T8208] 424694 pages reserved
[  157.700420][ T8208] 0 pages cma reserved
[  157.983327][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.005820][ T8231] net_ratelimit: 396 callbacks suppressed
[  158.005840][ T8231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.134270][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.415472][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.477313][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.494532][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.505291][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.530537][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.546071][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.689694][ T1147] bridge_slave_1: left allmulticast mode
[  158.697362][ T1147] bridge_slave_1: left promiscuous mode
[  158.705105][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.721502][ T1147] bridge_slave_0: left allmulticast mode
[  158.729398][ T1147] bridge_slave_0: left promiscuous mode
[  158.735519][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.212169][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'.
[  159.323501][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.337228][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.349741][ T1147] bond0 (unregistering): Released all slaves
[  159.394779][ T8264] dvmrp0: entered allmulticast mode
[  159.407751][ T8270] dvmrp0: left allmulticast mode
[  159.469568][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'.
[  159.872564][    T9] IPVS: starting estimator thread 0...
[  159.988853][ T8297] IPVS: using max 25 ests per chain, 60000 per kthread
[  160.078963][ T1147] hsr_slave_0: left promiscuous mode
[  160.113059][ T1147] hsr_slave_1: left promiscuous mode
[  160.133310][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.164740][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.182158][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.199934][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.268104][ T1147] veth1_macvtap: left promiscuous mode
[  160.284303][ T1147] veth0_macvtap: left promiscuous mode
[  160.291211][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'.
[  160.312679][ T1147] veth1_vlan: left promiscuous mode
[  160.322687][ T1147] veth0_vlan: left promiscuous mode
[  160.331072][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'.
[  160.381735][ T8316] xt_CT: No such helper "syz0"
[  160.619307][ T5829] Bluetooth: hci1: command tx timeout
[  160.943632][ T1147] team0 (unregistering): Port device team_slave_1 removed
[  160.985650][ T1147] team0 (unregistering): Port device team_slave_0 removed
[  162.077681][ T8247] chnl_net:caif_netlink_parms(): no params data found
[  162.134465][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.634'.
[  162.340315][ T8377] netlink: 'syz.4.636': attribute type 12 has an invalid length.
[  162.342829][ T8374] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.374267][ T8377] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  162.388139][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'.
[  162.554047][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.574408][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.597270][ T8247] bridge_slave_0: entered allmulticast mode
[  162.616857][ T8247] bridge_slave_0: entered promiscuous mode
[  162.627473][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.635037][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.645138][ T8247] bridge_slave_1: entered allmulticast mode
[  162.660318][ T8247] bridge_slave_1: entered promiscuous mode
[  162.699888][ T5829] Bluetooth: hci1: command tx timeout
[  162.770064][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.783833][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.838405][ T8395] netlink: 3 bytes leftover after parsing attributes in process `syz.1.643'.
[  162.873290][ T8247] team0: Port device team_slave_0 added
[  162.888187][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'.
[  162.892304][ T8247] team0: Port device team_slave_1 added
[  162.905295][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'.
[  162.914997][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'.
[  162.984576][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.998754][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.058752][ T8247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.081148][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.088199][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.161535][ T8247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.293179][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'.
[  163.316511][ T8247] hsr_slave_0: entered promiscuous mode
[  163.328045][ T8402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.646'.
[  163.340326][ T8247] hsr_slave_1: entered promiscuous mode
[  163.348942][ T8393] Driver unsupported XDP return value 0 on prog  (id 126) dev N/A, expect packet loss!
[  163.519228][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.527934][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.745135][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.760884][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.861025][ T8393] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.878790][ T8393] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.887699][ T8393] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.901452][ T8393] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.118207][ T8433] can: request_module (can-proto-4) failed.
[  164.254758][ T8433] can: request_module (can-proto-4) failed.
[  164.386125][ T8433] can: request_module (can-proto-4) failed.
[  164.460856][ T8440] syzkaller1: entered promiscuous mode
[  164.468897][ T8440] syzkaller1: entered allmulticast mode
[  164.513345][ T8433] can: request_module (can-proto-4) failed.
[  164.569396][ T8433] can: request_module (can-proto-4) failed.
[  164.593832][ T8433] can: request_module (can-proto-4) failed.
[  164.597820][ T8451] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  164.612241][ T8451] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  164.614896][ T8433] can: request_module (can-proto-4) failed.
[  164.666838][ T8433] can: request_module (can-proto-4) failed.
[  164.712490][ T8433] can: request_module (can-proto-4) failed.
[  164.779909][ T5829] Bluetooth: hci1: command tx timeout
[  164.821261][ T8460] netlink: 'syz.2.660': attribute type 7 has an invalid length.
[  164.832775][ T8433] can: request_module (can-proto-4) failed.
[  165.058450][ T8465] netlink: 'syz.2.662': attribute type 1 has an invalid length.
[  165.074115][ T8465] netlink: 244 bytes leftover after parsing attributes in process `syz.2.662'.
[  165.198013][ T8469] SET target dimension over the limit!
[  165.214363][ T8470] xt_hashlimit: Unknown mode mask 115, kernel too old?
[  165.267407][ T8247] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  165.302248][ T8247] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  165.378845][ T8247] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  165.415541][ T8247] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  165.462672][ T8475] ipvlan0: entered promiscuous mode
[  165.469446][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'.
[  165.478893][ T8475] ipvlan0: entered allmulticast mode
[  165.550676][ T8475] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  165.596669][ T8475] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  165.786271][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.844912][ T8247] 8021q: adding VLAN 0 to HW filter on device team0
[  165.866884][ T8501] netlink: 'syz.2.672': attribute type 4 has an invalid length.
[  165.871395][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.881776][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.925972][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.933232][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.964143][ T8501] netlink: 'syz.2.672': attribute type 10 has an invalid length.
[  166.021857][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.042000][ T8501] team0: Port device batadv0 added
[  166.112101][ T8247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  166.853093][ T8247] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.868867][ T5829] Bluetooth: hci1: command tx timeout
[  167.106454][ T8247] veth0_vlan: entered promiscuous mode
[  167.136822][ T8247] veth1_vlan: entered promiscuous mode
[  167.198869][   T43] IPVS: starting estimator thread 0...
[  167.232245][ T8247] veth0_macvtap: entered promiscuous mode
[  167.247101][ T8247] veth1_macvtap: entered promiscuous mode
[  167.257827][ T8565] netlink: 'syz.1.694': attribute type 2 has an invalid length.
[  167.283597][ T8565] netlink: 'syz.1.694': attribute type 8 has an invalid length.
[  167.319387][ T8567] IPVS: using max 26 ests per chain, 62400 per kthread
[  167.338022][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.397663][ T8247] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.456996][ T8247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.474266][ T8247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.485048][ T8247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.500023][ T8247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.636513][ T8583] bond1: entered promiscuous mode
[  167.641805][ T8583] bond1: entered allmulticast mode
[  167.647519][ T8583] 8021q: adding VLAN 0 to HW filter on device bond1
[  167.828080][ T8603] netlink: 'syz.2.705': attribute type 11 has an invalid length.
[  167.853980][ T8603] __nla_validate_parse: 2 callbacks suppressed
[  167.854357][ T8603] netlink: 224 bytes leftover after parsing attributes in process `syz.2.705'.
[  167.904807][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'.
[  167.950208][ T8610] netlink: 40 bytes leftover after parsing attributes in process `syz.2.705'.
[  167.990084][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.997967][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.122615][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.157774][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.464340][ T8633] xt_l2tp: v2 sid > 0xffff: 262144
[  168.735364][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'.
[  168.751138][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'.
[  168.768861][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'.
[  168.946035][ T8660] netlink: 'syz.4.724': attribute type 1 has an invalid length.
[  168.954074][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.968880][ T8660] netlink: 228 bytes leftover after parsing attributes in process `syz.4.724'.
[  168.986579][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'.
[  169.123969][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.312684][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.465464][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.614659][   T12] bridge_slave_1: left allmulticast mode
[  169.620547][   T12] bridge_slave_1: left promiscuous mode
[  169.626253][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.635886][   T12] bridge_slave_0: left allmulticast mode
[  169.641811][   T12] bridge_slave_0: left promiscuous mode
[  169.647547][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.826631][ T8667] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20001
[  169.840904][ T8670] sock: sock_set_timeout: `syz.4.728' (pid 8670) tries to set negative timeout
[  170.042579][ T8684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.730'.
[  170.110690][ T8685] xt_hashlimit: max too large, truncated to 1048576
[  170.169542][ T8684] sock: sock_set_timeout: `syz.4.730' (pid 8684) tries to set negative timeout
[  170.258072][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.731'.
[  170.440264][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.460716][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.471246][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  170.483840][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  170.492287][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  170.493540][   T12] bond0 (unregistering): Released all slaves
[  170.513479][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  170.522786][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  170.539231][ T8698] bridge_slave_0: left allmulticast mode
[  170.545046][ T8698] bridge_slave_0: left promiscuous mode
[  170.563781][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.792237][ T8711] netlink: 'syz.2.736': attribute type 10 has an invalid length.
[  170.835897][ T8711] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  170.894869][ T8711] sctp: [Deprecated]: syz.2.736 (pid 8711) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.894869][ T8711] Use struct sctp_sack_info instead
[  170.944765][ T8712] netlink: 'syz.2.736': attribute type 10 has an invalid length.
[  171.323007][   T12] hsr_slave_0: left promiscuous mode
[  171.328621][ T8739] x_tables: duplicate underflow at hook 2
[  171.340841][   T12] hsr_slave_1: left promiscuous mode
[  171.347285][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.359211][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.383870][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.406588][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.448313][   T12] veth1_macvtap: left promiscuous mode
[  171.463224][   T12] veth0_macvtap: left promiscuous mode
[  171.480079][   T12] veth1_vlan: left promiscuous mode
[  171.490597][   T12] veth0_vlan: left promiscuous mode
[  172.028290][   T12] team0 (unregistering): Port device team_slave_1 removed
[  172.065556][   T12] team0 (unregistering): Port device team_slave_0 removed
[  172.585362][ T8755] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  172.624564][ T5836] Bluetooth: hci1: command tx timeout
[  172.793062][ T8765] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  172.896170][ T8770] RDS: rds_bind could not find a transport for 800:a40::900:200:7379:7a31, load rds_tcp or rds_rdma?
[  172.904653][ T8773] bond0: entered allmulticast mode
[  172.914315][ T8773] bond_slave_0: entered allmulticast mode
[  172.920387][ T8773] bond_slave_1: entered allmulticast mode
[  172.948902][ T8773] team0: entered allmulticast mode
[  172.954360][ T8773] team_slave_0: entered allmulticast mode
[  172.981119][ T8773] team_slave_1: entered allmulticast mode
[  173.003479][ T8773] geneve0: entered allmulticast mode
[  173.013571][ T8773] batadv0: entered allmulticast mode
[  173.022880][ T8773] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  173.043103][ T8700] chnl_net:caif_netlink_parms(): no params data found
[  173.177195][ T8783] netlink: 'syz.1.757': attribute type 1 has an invalid length.
[  173.228186][ T8787] netlink: 'syz.2.758': attribute type 9 has an invalid length.
[  173.236101][ T8790] netlink: 'syz.2.758': attribute type 9 has an invalid length.
[  173.343606][ T8796] netlink: 'syz.0.760': attribute type 83 has an invalid length.
[  173.353015][ T8796] __nla_validate_parse: 6 callbacks suppressed
[  173.353033][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'.
[  173.354751][ T8791] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  173.393765][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  173.411842][ T8783] 8021q: adding VLAN 0 to HW filter on device bond2
[  173.423552][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'.
[  173.509670][   T78] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  173.758463][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.775961][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.792189][ T8700] bridge_slave_0: entered allmulticast mode
[  173.801570][ T8700] bridge_slave_0: entered promiscuous mode
[  173.829872][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.837094][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.865543][ T8700] bridge_slave_1: entered allmulticast mode
[  173.877583][ T8700] bridge_slave_1: entered promiscuous mode
[  173.938110][ T8820] netlink: set zone limit has 8 unknown bytes
[  173.963880][ T8820] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.769'.
[  174.002910][ T8700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.026235][ T8700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.117126][ T8700] team0: Port device team_slave_0 added
[  174.144657][ T8700] team0: Port device team_slave_1 added
[  174.189058][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'.
[  174.306273][ T8700] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.314265][ T8700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.316091][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'.
[  174.340771][ T8700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.363299][ T8700] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.371888][ T8700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.399859][ T8700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.581080][ T8700] hsr_slave_0: entered promiscuous mode
[  174.601372][ T8700] hsr_slave_1: entered promiscuous mode
[  174.698827][ T5836] Bluetooth: hci1: command tx timeout
[  175.417279][ T8879] sctp: [Deprecated]: syz.4.789 (pid 8879) Use of int in maxseg socket option.
[  175.417279][ T8879] Use struct sctp_assoc_value instead
[  175.667966][ T8700] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  175.764540][ T8700] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  175.798424][ T8700] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  175.846043][ T8700] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  175.881821][ T8898] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  176.039977][ T8911] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  176.103895][ T8901] syzkaller0: entered promiscuous mode
[  176.111189][ T8901] syzkaller0: entered allmulticast mode
[  176.425634][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'.
[  176.780566][ T5836] Bluetooth: hci1: command tx timeout
[  177.592168][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'.
[  177.779683][ T8700] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.793832][ T8940] netlink: 'syz.1.804': attribute type 10 has an invalid length.
[  177.808167][ T8940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.804'.
[  177.825665][ T8940] batadv0: entered promiscuous mode
[  177.831922][ T8940] batadv0: entered allmulticast mode
[  177.845185][ T8940] bond0: (slave batadv0): Releasing backup interface
[  177.870022][ T8940] bridge0: port 3(batadv0) entered blocking state
[  177.883112][ T8940] bridge0: port 3(batadv0) entered disabled state
[  177.918202][ T8700] 8021q: adding VLAN 0 to HW filter on device team0
[  177.958307][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.963634][ T1147] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  177.965505][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.974979][ T1147] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  178.065303][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.072564][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.317751][ T8972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.502085][ T8984] netlink: 'syz.0.818': attribute type 1 has an invalid length.
[  178.542469][ T8984] netlink: 172 bytes leftover after parsing attributes in process `syz.0.818'.
[  178.762604][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'.
[  178.858037][ T8700] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.884548][ T5836] Bluetooth: hci1: command tx timeout
[  178.938533][ T9010] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  178.971308][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.826'.
[  179.066403][ T8700] veth0_vlan: entered promiscuous mode
[  179.123010][ T8700] veth1_vlan: entered promiscuous mode
[  179.233492][ T8700] veth0_macvtap: entered promiscuous mode
[  179.248213][ T8700] veth1_macvtap: entered promiscuous mode
[  179.322743][ T8700] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.374088][ T8700] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.396004][ T8700] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.405778][ T8700] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.415067][ T8700] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.425590][ T8700] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.603314][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.630326][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.683410][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.697169][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.892941][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'.
[  179.997555][ T9061] netlink: 240 bytes leftover after parsing attributes in process `syz.4.837'.
[  180.118555][ T9065] lo: entered promiscuous mode
[  180.151050][ T9065] netlink: 'syz.1.839': attribute type 2 has an invalid length.
[  180.181936][ T9065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.215852][ T9077] netlink: 14 bytes leftover after parsing attributes in process `syz.2.842'.
[  180.229481][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'.
[  180.362023][ T9077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.378278][ T9077] bond_slave_0: left allmulticast mode
[  180.399739][ T9077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.402175][ T9085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'.
[  180.420053][ T9077] bond_slave_1: left allmulticast mode
[  180.427273][ T9077] bond0 (unregistering): (slave team0): Releasing backup interface
[  180.436135][ T9077] team0: left allmulticast mode
[  180.441696][ T9077] team_slave_0: left allmulticast mode
[  180.447804][ T9077] team_slave_1: left allmulticast mode
[  180.454120][ T9077] geneve0: left allmulticast mode
[  180.460146][ T9077] batadv0: left allmulticast mode
[  180.469858][ T9077] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  180.481340][ T9077] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  180.507220][ T9077] bond0 (unregistering): Released all slaves
[  180.727181][ T3471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.828629][ T3471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.182910][ T3471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.374908][ T3471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.691921][ T9104] netlink: 'syz.0.850': attribute type 10 has an invalid length.
[  181.729094][ T9104] netlink: 40 bytes leftover after parsing attributes in process `syz.0.850'.
[  181.769393][ T3471] bridge_slave_1: left allmulticast mode
[  181.787234][ T3471] bridge_slave_1: left promiscuous mode
[  181.809050][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.850068][ T3471] bridge_slave_0: left allmulticast mode
[  181.855881][ T3471] bridge_slave_0: left promiscuous mode
[  181.884233][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.246823][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.257953][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.266361][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.276652][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.287523][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  182.348531][ T9130] warn_alloc: 1 callbacks suppressed
[  182.348551][ T9130] syz.0.859: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  182.374315][ T9130] CPU: 1 UID: 0 PID: 9130 Comm: syz.0.859 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  182.374342][ T9130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  182.374353][ T9130] Call Trace:
[  182.374360][ T9130]  <TASK>
[  182.374368][ T9130]  dump_stack_lvl+0x189/0x250
[  182.374407][ T9130]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.374436][ T9130]  ? __pfx__printk+0x10/0x10
[  182.374457][ T9130]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  182.374478][ T9130]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  182.374500][ T9130]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  182.374523][ T9130]  warn_alloc+0x214/0x310
[  182.374544][ T9130]  ? stack_depot_save_flags+0x40/0x900
[  182.374572][ T9130]  ? __pfx_warn_alloc+0x10/0x10
[  182.374596][ T9130]  ? kasan_save_track+0x4f/0x80
[  182.374623][ T9130]  ? xskq_create+0x56/0x170
[  182.374646][ T9130]  ? xsk_init_queue+0xb0/0x110
[  182.374667][ T9130]  ? xsk_setsockopt+0x43f/0x710
[  182.374688][ T9130]  ? do_sock_setsockopt+0x25a/0x3e0
[  182.374708][ T9130]  ? __x64_sys_setsockopt+0x18b/0x220
[  182.374726][ T9130]  ? do_syscall_64+0xfa/0x3b0
[  182.374751][ T9130]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.374779][ T9130]  __vmalloc_node_range_noprof+0x125/0x12f0
[  182.374835][ T9130]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  182.374857][ T9130]  ? xskq_create+0x56/0x170
[  182.374884][ T9130]  ? __kasan_kmalloc+0x93/0xb0
[  182.374906][ T9130]  vmalloc_user_noprof+0xad/0xf0
[  182.374926][ T9130]  ? xskq_create+0xbf/0x170
[  182.374952][ T9130]  xskq_create+0xbf/0x170
[  182.374980][ T9130]  xsk_init_queue+0xb0/0x110
[  182.375008][ T9130]  xsk_setsockopt+0x43f/0x710
[  182.375035][ T9130]  ? __pfx_xsk_setsockopt+0x10/0x10
[  182.375058][ T9130]  ? __lock_acquire+0xab9/0xd20
[  182.375095][ T9130]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  182.375118][ T9130]  ? __pfx_xsk_setsockopt+0x10/0x10
[  182.375143][ T9130]  do_sock_setsockopt+0x25a/0x3e0
[  182.375169][ T9130]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  182.375196][ T9130]  ? __fget_files+0x2a/0x420
[  182.375237][ T9130]  __x64_sys_setsockopt+0x18b/0x220
[  182.375267][ T9130]  do_syscall_64+0xfa/0x3b0
[  182.375292][ T9130]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.375317][ T9130]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.375335][ T9130]  ? clear_bhb_loop+0x60/0xb0
[  182.375358][ T9130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.375376][ T9130] RIP: 0033:0x7fadb898e929
[  182.375394][ T9130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.375410][ T9130] RSP: 002b:00007fadb9729038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  182.375431][ T9130] RAX: ffffffffffffffda RBX: 00007fadb8bb5fa0 RCX: 00007fadb898e929
[  182.375444][ T9130] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  182.375455][ T9130] RBP: 00007fadb8a10b39 R08: 0000000000000004 R09: 0000000000000000
[  182.375466][ T9130] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  182.375477][ T9130] R13: 0000000000000000 R14: 00007fadb8bb5fa0 R15: 00007ffd0596ee28
[  182.375507][ T9130]  </TASK>
[  182.375514][ T9130] Mem-Info:
[  182.690660][ T9130] active_anon:3545 inactive_anon:0 isolated_anon:0
[  182.690660][ T9130]  active_file:1142 inactive_file:39873 isolated_file:0
[  182.690660][ T9130]  unevictable:768 dirty:35 writeback:25
[  182.690660][ T9130]  slab_reclaimable:10895 slab_unreclaimable:96359
[  182.690660][ T9130]  mapped:28660 shmem:1363 pagetables:876
[  182.690660][ T9130]  sec_pagetables:0 bounce:0
[  182.690660][ T9130]  kernel_misc_reclaimable:0
[  182.690660][ T9130]  free:1341170 free_pcp:12573 free_cma:0
[  182.749156][ T9130] Node 0 active_anon:14180kB inactive_anon:0kB active_file:4568kB inactive_file:159288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114640kB dirty:136kB writeback:100kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:3348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  182.784780][ T9130] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  182.816899][ T9130] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  182.855691][ T9130] lowmem_reserve[]: 0 2500 2502 2502 2502
[  182.866919][ T9130] Node 0 DMA32 free:1449036kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14224kB inactive_anon:0kB active_file:4568kB inactive_file:157456kB unevictable:1536kB writepending:152kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:30316kB local_pcp:20108kB free_cma:0kB
[  182.905120][ T9130] lowmem_reserve[]: 0 0 1 1 1
[  182.927135][ T9130] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  182.956222][ T9130] lowmem_reserve[]: 0 0 0 0 0
[  182.961141][ T9130] Node 1 Normal free:3900184kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20448kB local_pcp:8768kB free_cma:0kB
[  182.993358][ T9130] lowmem_reserve[]: 0 0 0 0 0
[  182.998145][ T9130] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  183.011276][ T9130] Node 0 DMA32: 517*4kB (UME) 490*8kB (UME) 222*16kB (UM) 431*32kB (UM) 178*64kB (UME) 77*128kB (UM) 48*256kB (UM) 29*512kB (UME) 21*1024kB (UME) 10*2048kB (UME) 326*4096kB (UM) = 1448996kB
[  183.032111][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'.
[  183.041108][ T9130] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  183.053121][ T9130] Node 1 Normal: 236*4kB (UME) 67*8kB (UME) 41*16kB (UME) 104*32kB (UME) 29*64kB (UME) 7*128kB (UME) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3900184kB
[  183.071821][ T9130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  183.082631][ T9130] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  183.095180][ T9130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  183.105212][ T9130] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  183.114729][ T9130] 42375 total pagecache pages
[  183.119621][ T9130] 0 pages in swap cache
[  183.123808][ T9130] Free swap  = 124996kB
[  183.127998][ T9130] Total swap = 124996kB
[  183.132364][ T9130] 2097051 pages RAM
[  183.132943][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.136175][ T9130] 0 pages HighMem/MovableOnly
[  183.136221][ T9130] 424694 pages reserved
[  183.136231][ T9130] 0 pages cma reserved
[  183.162777][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.172784][ T3471] bond0 (unregistering): Released all slaves
[  183.656017][ T3471] hsr_slave_0: left promiscuous mode
[  183.670887][ T3471] hsr_slave_1: left promiscuous mode
[  183.681213][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.692490][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.706616][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.724636][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.794602][ T3471] veth1_macvtap: left promiscuous mode
[  183.815559][ T3471] veth0_macvtap: left promiscuous mode
[  183.845672][ T3471] veth1_vlan: left promiscuous mode
[  183.865137][ T3471] veth0_vlan: left promiscuous mode
[  184.380285][ T5829] Bluetooth: hci1: command tx timeout
[  184.521958][ T3471] team0 (unregistering): Port device team_slave_1 removed
[  184.562432][ T3471] team0 (unregistering): Port device team_slave_0 removed
[  184.934585][ T9159] __nla_validate_parse: 1 callbacks suppressed
[  184.934606][ T9159] netlink: 20 bytes leftover after parsing attributes in process `syz.1.866'.
[  185.159732][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'.
[  185.316449][ T9187] geneve2: entered promiscuous mode
[  185.325989][ T9187] geneve2: entered allmulticast mode
[  185.333282][ T9191] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  185.573093][ T9127] chnl_net:caif_netlink_parms(): no params data found
[  185.886742][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.905131][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.912874][ T9127] bridge_slave_0: entered allmulticast mode
[  185.921273][ T9127] bridge_slave_0: entered promiscuous mode
[  185.962604][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.979968][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.987229][ T9127] bridge_slave_1: entered allmulticast mode
[  186.003273][ T9127] bridge_slave_1: entered promiscuous mode
[  186.041235][ T9224] dvmrp0: entered allmulticast mode
[  186.192943][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.213171][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.290582][ T9236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  186.301040][ T9235] FAULT_INJECTION: forcing a failure.
[  186.301040][ T9235] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  186.317028][ T9235] CPU: 1 UID: 0 PID: 9235 Comm: syz.2.887 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  186.317058][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  186.317069][ T9235] Call Trace:
[  186.317076][ T9235]  <TASK>
[  186.317084][ T9235]  dump_stack_lvl+0x189/0x250
[  186.317118][ T9235]  ? __pfx____ratelimit+0x10/0x10
[  186.317147][ T9235]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.317182][ T9235]  ? __pfx__printk+0x10/0x10
[  186.317218][ T9235]  should_fail_ex+0x414/0x560
[  186.317247][ T9235]  _copy_from_user+0x2d/0xb0
[  186.317266][ T9235]  sctp_setsockopt+0x19f/0x1200
[  186.317289][ T9235]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  186.317321][ T9235]  do_sock_setsockopt+0x25a/0x3e0
[  186.317347][ T9235]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  186.317373][ T9235]  ? __fget_files+0x2a/0x420
[  186.317402][ T9235]  __x64_sys_setsockopt+0x18b/0x220
[  186.317432][ T9235]  do_syscall_64+0xfa/0x3b0
[  186.317459][ T9235]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.317486][ T9235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.317506][ T9235]  ? clear_bhb_loop+0x60/0xb0
[  186.317530][ T9235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.317548][ T9235] RIP: 0033:0x7fdc04d8e929
[  186.317567][ T9235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.317584][ T9235] RSP: 002b:00007fdc05bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  186.317607][ T9235] RAX: ffffffffffffffda RBX: 00007fdc04fb5fa0 RCX: 00007fdc04d8e929
[  186.317621][ T9235] RDX: 0000000000000023 RSI: 0000000000000084 RDI: 0000000000000003
[  186.317632][ T9235] RBP: 00007fdc05bd5090 R08: 0000000000000008 R09: 0000000000000000
[  186.317642][ T9235] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001
[  186.317653][ T9235] R13: 0000000000000000 R14: 00007fdc04fb5fa0 R15: 00007ffdfae99e98
[  186.317684][ T9235]  </TASK>
[  186.518233][ T5829] Bluetooth: hci1: command tx timeout
[  186.521867][ T9127] team0: Port device team_slave_0 added
[  186.539712][ T9127] team0: Port device team_slave_1 added
[  186.599558][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.606615][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.649183][ T9127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.664794][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.674498][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.701260][ T9127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.813254][ T9127] hsr_slave_0: entered promiscuous mode
[  186.821482][ T9127] hsr_slave_1: entered promiscuous mode
[  186.946436][ T9255] macvlan0: entered promiscuous mode
[  186.955518][ T9255] macvlan0: entered allmulticast mode
[  187.262734][ T9268] bond2: entered promiscuous mode
[  187.268503][ T9268] bond2: entered allmulticast mode
[  187.284929][ T9268] 8021q: adding VLAN 0 to HW filter on device bond2
[  187.442272][ T9276] FAULT_INJECTION: forcing a failure.
[  187.442272][ T9276] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.456297][ T9276] CPU: 0 UID: 0 PID: 9276 Comm: syz.1.901 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  187.456327][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  187.456339][ T9276] Call Trace:
[  187.456348][ T9276]  <TASK>
[  187.456356][ T9276]  dump_stack_lvl+0x189/0x250
[  187.456392][ T9276]  ? __pfx____ratelimit+0x10/0x10
[  187.456421][ T9276]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.456451][ T9276]  ? __pfx__printk+0x10/0x10
[  187.456490][ T9276]  should_fail_ex+0x414/0x560
[  187.456521][ T9276]  _copy_to_user+0x31/0xb0
[  187.456544][ T9276]  simple_read_from_buffer+0xe1/0x170
[  187.456571][ T9276]  proc_fail_nth_read+0x1df/0x250
[  187.456599][ T9276]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  187.456626][ T9276]  ? rw_verify_area+0x258/0x650
[  187.456655][ T9276]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  187.456680][ T9276]  vfs_read+0x200/0x980
[  187.456716][ T9276]  ? __pfx___mutex_lock+0x10/0x10
[  187.456747][ T9276]  ? __pfx_vfs_read+0x10/0x10
[  187.456778][ T9276]  ? __fget_files+0x2a/0x420
[  187.456805][ T9276]  ? __fget_files+0x3a0/0x420
[  187.456826][ T9276]  ? __fget_files+0x2a/0x420
[  187.456857][ T9276]  ksys_read+0x145/0x250
[  187.456884][ T9276]  ? __fget_files+0x2a/0x420
[  187.456907][ T9276]  ? __pfx_ksys_read+0x10/0x10
[  187.456950][ T9276]  ? do_syscall_64+0xbe/0x3b0
[  187.456984][ T9276]  do_syscall_64+0xfa/0x3b0
[  187.457011][ T9276]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.457037][ T9276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.457058][ T9276]  ? clear_bhb_loop+0x60/0xb0
[  187.457083][ T9276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.457101][ T9276] RIP: 0033:0x7f763d78d33c
[  187.457120][ T9276] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  187.457137][ T9276] RSP: 002b:00007f763e65c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  187.457160][ T9276] RAX: ffffffffffffffda RBX: 00007f763d9b5fa0 RCX: 00007f763d78d33c
[  187.457174][ T9276] RDX: 000000000000000f RSI: 00007f763e65c0a0 RDI: 0000000000000004
[  187.457186][ T9276] RBP: 00007f763e65c090 R08: 0000000000000000 R09: 0000000000000000
[  187.457198][ T9276] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000001
[  187.457210][ T9276] R13: 0000000000000000 R14: 00007f763d9b5fa0 R15: 00007ffd8c577368
[  187.457245][ T9276]  </TASK>
[  187.944917][   T30] audit: type=1107 audit(1751019952.170:2): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  187.953306][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'.
[  188.421431][ T9316] netlink: 10 bytes leftover after parsing attributes in process `syz.1.912'.
[  188.434019][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'.
[  188.467148][ T9127] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  188.507001][ T9127] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.533328][ T9127] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  188.548978][ T5829] Bluetooth: hci1: command tx timeout
[  188.621367][ T9127] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  188.959872][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  189.101275][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.168618][ T9127] 8021q: adding VLAN 0 to HW filter on device team0
[  189.215974][ T3471] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.223302][ T3471] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.249185][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  189.449722][ T9376] netlink: 'syz.0.927': attribute type 4 has an invalid length.
[  189.891918][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.899263][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.069174][ T9393] netlink: 'syz.0.934': attribute type 29 has an invalid length.
[  190.104512][ T9396] netlink: 'syz.0.934': attribute type 29 has an invalid length.
[  190.175825][ T9398] netlink: 'syz.1.935': attribute type 1 has an invalid length.
[  190.291275][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'.
[  190.296495][ T9398] 8021q: adding VLAN 0 to HW filter on device bond3
[  190.377737][ T9414] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  190.403480][ T9406] bond3: (slave geneve2): making interface the new active one
[  190.425800][ T9406] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  190.452777][ T9393] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  190.495306][ T9406] bond3: entered promiscuous mode
[  190.517392][   T43] hid-generic 0005:16C0:0006.0001: unknown main item tag 0x0
[  190.543376][   T43] hid-generic 0005:16C0:0006.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa
[  190.592914][ T9406] geneve2: entered promiscuous mode
[  190.620068][ T5829] Bluetooth: hci1: command tx timeout
[  190.670780][ T9420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.939'.
[  190.793717][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'.
[  190.976853][ T9127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.137543][ T9127] veth0_vlan: entered promiscuous mode
[  191.153338][ T9435] openvswitch: netlink: Message has 24 unknown bytes.
[  191.189627][ T9435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.216759][ T9437] dvmrp0: entered allmulticast mode
[  191.233789][ T9127] veth1_vlan: entered promiscuous mode
[  191.351851][ T9127] veth0_macvtap: entered promiscuous mode
[  191.387824][ T9127] veth1_macvtap: entered promiscuous mode
[  191.443880][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.477299][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.522969][ T9127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.544834][ T9127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.553716][ T9127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.562719][ T9127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.591613][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'.
[  191.861807][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.911496][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.954413][ T9472] bond0: (slave bond_slave_0): Releasing backup interface
[  192.001082][ T9472] bond0: (slave bond_slave_1): Releasing backup interface
[  192.081410][ T9472] team0: Port device team_slave_0 removed
[  192.161360][ T9472] team0: Port device team_slave_1 removed
[  192.180512][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.194914][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.226461][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.238614][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.413417][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.428133][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.168746][ T3471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.266213][ T3471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.366510][ T3471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.433617][ T3471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.759291][ T3471] bridge_slave_1: left allmulticast mode
[  193.765077][ T3471] bridge_slave_1: left promiscuous mode
[  193.772063][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.781524][ T3471] bridge_slave_0: left allmulticast mode
[  193.787175][ T3471] bridge_slave_0: left promiscuous mode
[  193.793181][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.899975][ T1151] wlan1: Trigger new scan to find an IBSS to join
[  194.122956][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.174925][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.195420][ T9531] netlink: 36 bytes leftover after parsing attributes in process `syz.4.972'.
[  194.228132][ T3471] bond0 (unregistering): Released all slaves
[  194.306016][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.377046][ T9538] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.399677][ T9540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.724122][ T9548] tipc: Failed to remove unknown binding: 66,1,1/0:4236630393/4236630395
[  194.744405][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'.
[  194.775819][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'.
[  194.808414][ T3471] hsr_slave_0: left promiscuous mode
[  194.824009][ T3471] hsr_slave_1: left promiscuous mode
[  194.845416][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.849184][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.860400][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.871180][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.874416][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.883696][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.887813][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.902989][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.911264][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.941472][ T3471] veth1_macvtap: left promiscuous mode
[  194.948123][ T3471] veth0_macvtap: left promiscuous mode
[  194.962369][ T3471] veth1_vlan: left promiscuous mode
[  194.967794][ T3471] veth0_vlan: left promiscuous mode
[  195.222954][ T9570] sctp: [Deprecated]: syz.0.981 (pid 9570) Use of int in max_burst socket option.
[  195.222954][ T9570] Use struct sctp_assoc_value instead
[  195.529695][ T3471] team0 (unregistering): Port device team_slave_1 removed
[  195.602951][ T3471] team0 (unregistering): Port device team_slave_0 removed
[  196.015618][ T9568] bridge0: entered allmulticast mode
[  196.030021][ T1151] bond2: (slave ip6gretap1): link status up again after 0 ms
[  196.037725][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  196.242341][ T9575] netlink: 'syz.0.985': attribute type 83 has an invalid length.
[  196.275907][ T9585] netlink: 'syz.1.983': attribute type 39 has an invalid length.
[  196.530363][ T1147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  196.658008][ T9557] chnl_net:caif_netlink_parms(): no params data found
[  196.718166][ T9600] tap0: tun_chr_ioctl cmd 1074025677
[  196.727412][ T9600] tap0: linktype set to 65534
[  196.863641][   T78] wlan1: Trigger new scan to find an IBSS to join
[  196.943804][ T5836] Bluetooth: hci1: command tx timeout
[  196.946865][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  197.144350][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  197.279925][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  197.283089][ T9625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.299679][ T9557] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.307359][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.350097][ T9557] bridge_slave_0: entered allmulticast mode
[  197.373149][ T9557] bridge_slave_0: entered promiscuous mode
[  197.393971][ T9557] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.410507][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.425806][ T9557] bridge_slave_1: entered allmulticast mode
[  197.437659][ T9557] bridge_slave_1: entered promiscuous mode
[  197.504297][ T9557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.532167][ T9557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.562043][ T9641] netlink: 248 bytes leftover after parsing attributes in process `syz.1.998'.
[  197.572541][ T9641] netlink: 52 bytes leftover after parsing attributes in process `syz.1.998'.
[  197.614868][ T9557] team0: Port device team_slave_0 added
[  197.624501][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'.
[  197.638518][ T9557] team0: Port device team_slave_1 added
[  197.650965][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  197.724776][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'.
[  197.744566][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.765250][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.821103][ T9557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.832674][   T78] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  197.851759][ T9557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.871124][ T9557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.914061][ T9557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.938031][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1003'.
[  197.983246][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1003'.
[  198.025360][ T9557] hsr_slave_0: entered promiscuous mode
[  198.032596][ T9557] hsr_slave_1: entered promiscuous mode
[  198.138351][ T9662] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1005'.
[  198.303211][ T9666] xt_bpf: check failed: parse error
[  198.384286][ T9671] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1009'.
[  198.578987][ T9679] netlink: 'syz.0.1010': attribute type 1 has an invalid length.
[  198.586996][ T9679] netlink: 'syz.0.1010': attribute type 4 has an invalid length.
[  198.599431][ T9679] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1010'.
[  198.650488][ T9683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  198.881623][ T9690] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1017'.
[  198.892368][ T9690] netem: invalid attributes len -24
[  198.897588][ T9690] netem: change failed
[  199.023725][ T5836] Bluetooth: hci1: command tx timeout
[  199.903562][ T1151] wlan1: Trigger new scan to find an IBSS to join
[  200.450094][ T1147] net_ratelimit: 3 callbacks suppressed
[  200.450116][ T1147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  200.618436][ T9726] openvswitch: netlink: IP tunnel dst address not specified
[  200.628790][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  200.725032][ T9557] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  200.746992][ T9557] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  200.772629][ T9557] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  200.809293][ T9557] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  200.856779][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.897134][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  200.932491][ T9746] netlink: 'syz.2.1029': attribute type 1 has an invalid length.
[  201.047642][ T9746] syzkaller0: entered promiscuous mode
[  201.053450][ T9746] syzkaller0: entered allmulticast mode
[  201.078895][   T36] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  201.098964][ T5836] Bluetooth: hci1: command tx timeout
[  201.373260][ T9759] xt_ipcomp: unknown flags B
[  202.590564][ T3471] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  202.605638][ T9772] batadv0: Device is already in use.
[  202.624179][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.666372][ T9557] 8021q: adding VLAN 0 to HW filter on device team0
[  202.692184][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.699422][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.756432][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.763679][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.813578][   T49] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  202.991882][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  203.087483][ T9792] __nla_validate_parse: 5 callbacks suppressed
[  203.087505][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1044'.
[  203.159011][   T36] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  203.180973][ T5836] Bluetooth: hci1: command tx timeout
[  203.273835][ T9809] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1050'.
[  203.446193][ T9809] 8021q: adding VLAN 0 to HW filter on device bond3
[  203.472053][ T9809] bond0: (slave bond3): Enslaving as an active interface with an up link
[  203.525270][ T9817] bond0: (slave bond3): Error -95 calling ndo_bpf
[  203.540542][ T9817] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  203.610306][ T9819] x_tables: duplicate underflow at hook 1
[  203.773260][ T9835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'.
[  203.796756][ T9557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.824046][ T9838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'.
[  203.992953][ T9557] veth0_vlan: entered promiscuous mode
[  204.014046][ T9557] veth1_vlan: entered promiscuous mode
[  204.135379][ T9557] veth0_macvtap: entered promiscuous mode
[  204.195670][ T9557] veth1_macvtap: entered promiscuous mode
[  204.277082][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.318291][ T9557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.361579][ T9557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.378123][ T9557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.409128][ T9557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.417901][ T9557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.436632][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1060'.
[  204.450664][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'.
[  204.698484][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.718196][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.792616][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.828566][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.869741][ T9877] netlink: 'syz.4.1065': attribute type 1 has an invalid length.
[  204.935351][ T9882] pim6reg1: entered promiscuous mode
[  204.956455][ T9882] pim6reg1: entered allmulticast mode
[  205.134510][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1067'.
[  205.366934][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  205.644866][ T3471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.758944][ T1147] net_ratelimit: 11 callbacks suppressed
[  205.758968][ T1147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  205.848514][ T3471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.910253][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  205.973503][ T3471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.018996][   T49] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  206.139098][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  206.248867][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  206.268260][ T3471] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.358813][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  206.486667][ T3471] bridge_slave_1: left allmulticast mode
[  206.492414][ T3471] bridge_slave_1: left promiscuous mode
[  206.498163][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.508282][ T3471] bridge_slave_0: left allmulticast mode
[  206.514286][ T3471] bridge_slave_0: left promiscuous mode
[  206.520389][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.779148][ T9928] netlink: 'syz.1.1079': attribute type 13 has an invalid length.
[  206.947028][ T3471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.972161][ T3471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.994256][ T3471] bond0 (unregistering): Released all slaves
[  207.038104][ T9926] veth0: entered promiscuous mode
[  207.063415][ T9928] veth0_macvtap: left promiscuous mode
[  207.081924][ T9928] macvtap0: entered allmulticast mode
[  207.140065][ T9928] macvtap0: refused to change device tx_queue_len
[  207.149761][   T78] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  207.181663][ T9922] veth0: left promiscuous mode
[  207.258299][ T9941] ieee802154 phy0 wpan0: encryption failed: -22
[  207.343852][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  207.357088][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  207.367091][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  207.379988][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  207.387929][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  207.456000][ T9949] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1085'.
[  207.564624][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  207.679847][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1089'.
[  207.719573][ T3471] hsr_slave_0: left promiscuous mode
[  207.736244][ T3471] hsr_slave_1: left promiscuous mode
[  207.761286][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.780084][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.805910][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.820375][ T3471] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.855591][ T3471] veth1_macvtap: left promiscuous mode
[  207.889198][ T3471] veth0_macvtap: left promiscuous mode
[  207.895093][ T3471] veth1_vlan: left promiscuous mode
[  207.901117][ T3471] veth0_vlan: left promiscuous mode
[  207.922683][ T9971] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.434279][ T3471] team0 (unregistering): Port device team_slave_1 removed
[  208.472692][ T3471] team0 (unregistering): Port device team_slave_0 removed
[  208.890882][   T36] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  209.395755][ T9946] chnl_net:caif_netlink_parms(): no params data found
[  209.419361][ T5836] Bluetooth: hci1: command tx timeout
[  209.429645][T10004] __nla_validate_parse: 1 callbacks suppressed
[  209.429664][T10004] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1104'.
[  209.520046][T10004] team_slave_0: entered allmulticast mode
[  209.795335][ T9946] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.815086][ T9946] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.816404][T10026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1108'.
[  209.828887][ T9946] bridge_slave_0: entered allmulticast mode
[  209.858539][ T9946] bridge_slave_0: entered promiscuous mode
[  209.884961][T10021] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.1109'.
[  209.896335][T10031] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1111'.
[  209.905699][T10021] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  209.929485][ T9946] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.936702][ T9946] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.971377][T10032] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1111'.
[  209.985091][T10031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'.
[  209.994680][ T9946] bridge_slave_1: entered allmulticast mode
[  210.015214][ T9946] bridge_slave_1: entered promiscuous mode
[  210.173313][ T9946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.216275][T10036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1113'.
[  210.238339][ T9946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.284007][T10043] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1114'.
[  210.416479][T10043] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  210.451932][T10036] batadv0: entered promiscuous mode
[  210.460267][T10036] batadv0: left promiscuous mode
[  210.503268][ T9946] team0: Port device team_slave_0 added
[  210.532804][ T9946] team0: Port device team_slave_1 added
[  210.687030][ T9946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.700671][ T9946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.769222][ T9946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.811800][T10066] team0: Device vti0 is of different type
[  210.813551][T10068] netlink: 'syz.0.1121': attribute type 2 has an invalid length.
[  210.832419][T10068] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1121'.
[  210.842116][T10068] nbd: must specify a device to reconfigure
[  210.852793][ T9946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.860242][ T9946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.886464][ T9946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.961428][ T9946] hsr_slave_0: entered promiscuous mode
[  210.967888][ T9946] hsr_slave_1: entered promiscuous mode
[  211.039211][   T13] net_ratelimit: 4 callbacks suppressed
[  211.039231][   T13] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  211.209806][   T36] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  211.314637][T10079] netlink: 'syz.1.1125': attribute type 4 has an invalid length.
[  211.339101][   T78] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  211.421090][T10083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1127'.
[  211.470110][   T78] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  211.517133][ T5838] Bluetooth: hci1: command tx timeout
[  211.585481][T10085] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  211.636401][ T9946] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  211.680712][   T78] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  211.688811][ T9946] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  211.721159][T10085] team0: Port device batadv0 removed
[  211.727135][T10085] bridge_slave_0: left allmulticast mode
[  211.733995][T10085] bridge_slave_0: left promiscuous mode
[  211.742672][T10085] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.751701][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  211.757784][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  211.767114][T10086] netlink: 'syz.2.1128': attribute type 10 has an invalid length.
[  211.778089][T10085] bridge_slave_1: left allmulticast mode
[  211.780187][T10096] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[  211.789406][T10085] bridge_slave_1: left promiscuous mode
[  211.791931][T10096] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[  211.798090][T10085] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.825727][T10085] team0: Port device team_slave_0 removed
[  211.841420][T10085] team0: Port device team_slave_1 removed
[  211.849084][T10085] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.857878][T10085] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.873222][T10085] team0: Port device geneve0 removed
[  211.886394][ T9946] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  211.909329][T10086] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  211.917811][T10098] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  211.940427][ T9946] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  211.941071][T10103] xt_TCPMSS: Only works on TCP SYN packets
[  212.029592][   T78] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  212.160030][   T36] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  212.182082][T10117] netlink: 'syz.2.1135': attribute type 1 has an invalid length.
[  212.272498][ T9946] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.300840][ T9946] 8021q: adding VLAN 0 to HW filter on device team0
[  212.309321][   T78] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  212.355866][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.363146][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.399913][T10120] netlink: 'syz.2.1137': attribute type 1 has an invalid length.
[  212.402571][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.414896][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.470837][T10120] bond1: (slave gretap1): making interface the new active one
[  212.479646][T10120] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  212.512347][T10122] netlink: 'syz.1.1136': attribute type 10 has an invalid length.
[  212.632899][T10122] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  212.660579][   T36] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  212.782111][ T3471] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  213.011762][T10148] netlink: 'syz.0.1143': attribute type 29 has an invalid length.
[  213.141533][T10151] netlink: 'syz.0.1143': attribute type 29 has an invalid length.
[  213.195165][T10154] veth0: entered promiscuous mode
[  213.213885][T10157] sch_tbf: burst 0 is lower than device lo mtu (230) !
[  213.238907][T10155] veth0: left promiscuous mode
[  213.579189][ T5836] Bluetooth: hci1: command tx timeout
[  213.595731][ T9946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.882550][ T9946] veth0_vlan: entered promiscuous mode
[  213.952552][ T9946] veth1_vlan: entered promiscuous mode
[  214.001303][T10187] ieee802154 phy0 wpan0: encryption failed: -22
[  214.085255][ T9946] veth0_macvtap: entered promiscuous mode
[  214.215559][ T9946] veth1_macvtap: entered promiscuous mode
[  214.591822][T10200] __nla_validate_parse: 4 callbacks suppressed
[  214.591843][T10200] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1159'.
[  214.698258][ T9946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.735312][ T9946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.737338][T10216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.752215][ T9946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.788090][ T9946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.797119][ T9946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.806047][ T9946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.818325][T10216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.846019][T10220] veth1_vlan: entered allmulticast mode
[  214.878609][T10220] team0: Device veth1_vlan failed to register rx_handler
[  214.885116][T10216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.941054][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1163'.
[  215.084645][T10228] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.1165'.
[  215.659580][ T5836] Bluetooth: hci1: command tx timeout
[  216.880288][ T1151] net_ratelimit: 8 callbacks suppressed
[  216.880312][ T1151] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  217.012730][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1171'.
[  217.048344][ T1147] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  217.056187][T10252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1171'.
[  217.082665][T10252] (unnamed net_device) (uninitialized): option arp_validate: invalid value (134217728)
[  217.102955][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.138782][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.276279][T10258] syzkaller0: entered promiscuous mode
[  217.286214][T10258] syzkaller0: entered allmulticast mode
[  217.318844][   T12] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  217.350512][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.368846][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.014193][   T36] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  219.159674][   T78] bond2: (slave ip6gretap1): failed to get link speed/duplex
[  219.338121][T10294] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  219.395306][T10294] bridge0: port 3(batadv0) entered disabled state
[  219.413872][T10305] validate_nla: 1 callbacks suppressed
[  219.413894][T10305] netlink: 'syz.0.1185': attribute type 23 has an invalid length.
[  219.441335][T10294] bridge_slave_0: left allmulticast mode
[  219.447552][T10294] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.460672][T10303] netlink: 'syz.1.1181': attribute type 10 has an invalid length.
[  219.476707][T10294] bridge_slave_1: left allmulticast mode
[  219.482837][T10294] bridge_slave_1: left promiscuous mode
[  219.489002][T10294] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.506943][T10294] bond0: (slave bond_slave_0): Releasing backup interface
[  219.523672][T10294] bond0: (slave bond_slave_1): Releasing backup interface
[  219.543427][T10294] team0: Port device team_slave_0 removed
[  219.570304][T10294] team0: Port device team_slave_1 removed
[  219.577130][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.595570][T10294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.605688][T10294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.615854][T10294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.641020][T10294] bond0: (slave wlan1): Releasing backup interface
[  219.653281][T10294] bond1: (slave gretap1): Releasing active interface
[  219.680697][T10294] bond2: (slave ip6gretap1): Removing an active aggregator
[  219.690110][T10294] bond2: (slave ip6gretap1): Releasing backup interface
[  219.705882][T10294] bond3: (slave geneve2): Releasing active interface
[  219.721888][T10294] geneve2: left promiscuous mode
[  219.750973][T10303] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  219.792388][T10303] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.822719][T10303] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  219.886678][T10313] bond0: (slave wlan1): Releasing backup interface
[  220.024278][ T1147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.105701][ T1147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.175804][ T1147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.233864][ T1147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.336271][ T1147] bridge_slave_1: left allmulticast mode
[  220.342076][ T1147] bridge_slave_1: left promiscuous mode
[  220.348448][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.357701][ T1147] bridge_slave_0: left allmulticast mode
[  220.365165][ T1147] bridge_slave_0: left promiscuous mode
[  220.370966][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.683407][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.695680][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.708200][ T1147] bond0 (unregistering): Released all slaves
[  220.908586][T10325] netlink: 'syz.2.1191': attribute type 10 has an invalid length.
[  220.973230][T10325] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  221.019684][T10325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.297304][T10342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1195'.
[  221.312761][T10342] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1195'.
[  221.347309][T10342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1195'.
[  221.466456][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.476916][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.485332][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.494396][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.504925][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.528061][ T1147] hsr_slave_0: left promiscuous mode
[  221.536235][ T1147] hsr_slave_1: left promiscuous mode
[  221.542548][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.550716][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.561427][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.569274][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.587125][ T1147] veth1_macvtap: left promiscuous mode
[  221.593803][ T1147] veth0_macvtap: left promiscuous mode
[  221.600120][ T1147] veth1_vlan: left promiscuous mode
[  221.605485][ T1147] veth0_vlan: left promiscuous mode
[  222.106764][ T1147] team0 (unregistering): Port device team_slave_1 removed
[  222.149637][ T1147] team0 (unregistering): Port device team_slave_0 removed
[  222.882212][   T30] audit: type=1107 audit(1751019987.120:3): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  222.902759][T10374] netlink: 'syz.4.1203': attribute type 6 has an invalid length.
[  223.150131][T10381] IPVS: length: 157 != 24
[  223.345652][T10392] veth0: entered promiscuous mode
[  223.380163][T10347] chnl_net:caif_netlink_parms(): no params data found
[  223.400491][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1210'.
[  223.579246][ T5829] Bluetooth: hci1: command tx timeout
[  223.594864][T10399] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1212'.
[  223.677918][T10405] sctp: [Deprecated]: syz.1.1214 (pid 10405) Use of int in maxseg socket option.
[  223.677918][T10405] Use struct sctp_assoc_value instead
[  223.685044][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'.
[  223.703039][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1215'.
[  223.743580][T10405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.764659][T10405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.863341][T10347] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.878824][T10347] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.900032][T10347] bridge_slave_0: entered allmulticast mode
[  223.927043][T10347] bridge_slave_0: entered promiscuous mode
[  223.945970][T10347] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.969504][T10347] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.984863][T10347] bridge_slave_1: entered allmulticast mode
[  223.993753][T10347] bridge_slave_1: entered promiscuous mode
[  224.090762][T10347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.156326][T10347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.177674][T10431] netlink: 'syz.4.1221': attribute type 58 has an invalid length.
[  224.199298][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1221'.
[  224.247164][T10347] team0: Port device team_slave_0 added
[  224.263936][T10347] team0: Port device team_slave_1 added
[  224.362710][T10347] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.380784][T10347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.421764][T10347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.443994][T10347] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.444678][T10443] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  224.466692][T10347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.502219][T10347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.531128][T10446] netlink: 'syz.1.1226': attribute type 4 has an invalid length.
[  224.588244][T10445] netlink: 'syz.1.1226': attribute type 4 has an invalid length.
[  224.610192][T10453] netlink: 'syz.4.1228': attribute type 1 has an invalid length.
[  224.658179][T10453] 8021q: adding VLAN 0 to HW filter on device bond4
[  224.863987][T10459] bond4: (slave gretap1): making interface the new active one
[  224.901508][T10459] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  225.012934][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1233'.
[  225.015856][T10347] hsr_slave_0: entered promiscuous mode
[  225.035301][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  225.069690][T10347] hsr_slave_1: entered promiscuous mode
[  225.243575][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'.
[  225.258314][T10488] netlink: 'syz.4.1238': attribute type 1 has an invalid length.
[  225.659435][ T5829] Bluetooth: hci1: command tx timeout
[  225.726679][T10512] netlink: zone id is out of range
[  225.753056][T10514] netlink: 'syz.1.1247': attribute type 5 has an invalid length.
[  225.763284][T10512] netlink: zone id is out of range
[  225.768553][T10512] netlink: zone id is out of range
[  225.810757][T10512] netlink: zone id is out of range
[  225.816850][T10512] netlink: zone id is out of range
[  225.828107][T10512] netlink: zone id is out of range
[  225.833363][T10512] netlink: zone id is out of range
[  225.849301][T10512] netlink: zone id is out of range
[  226.026517][T10347] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  226.057757][T10347] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  226.084866][T10347] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  226.106598][T10347] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  226.366581][T10347] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.432023][T10347] 8021q: adding VLAN 0 to HW filter on device team0
[  226.470991][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.478236][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.495946][T10553] __nla_validate_parse: 4 callbacks suppressed
[  226.495966][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'.
[  226.544582][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'.
[  226.554647][T10555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1257'.
[  226.569760][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.576965][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.703063][T10347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  226.818918][T10570] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1262'.
[  227.226679][T10594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1268'.
[  227.261181][T10597] netlink: 'syz.0.1270': attribute type 2 has an invalid length.
[  227.296753][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'.
[  227.299714][T10597] netlink: 'syz.0.1270': attribute type 2 has an invalid length.
[  227.335997][T10597] netlink: 'syz.0.1270': attribute type 2 has an invalid length.
[  227.404640][T10596] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1269'.
[  227.418529][T10347] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.549079][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1273'.
[  227.576824][T10347] veth0_vlan: entered promiscuous mode
[  227.589261][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'.
[  227.628063][T10611] netlink: 'syz.0.1273': attribute type 14 has an invalid length.
[  227.645329][T10347] veth1_vlan: entered promiscuous mode
[  227.660148][T10611] netlink: 'syz.0.1273': attribute type 13 has an invalid length.
[  227.739156][ T5829] Bluetooth: hci1: command tx timeout
[  227.795664][T10347] veth0_macvtap: entered promiscuous mode
[  227.827262][T10347] veth1_macvtap: entered promiscuous mode
[  227.895639][T10347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.005097][T10623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.054448][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'.
[  228.076498][T10623] veth0_vlan: left promiscuous mode
[  228.083351][T10623] veth0_vlan: entered promiscuous mode
[  228.104795][T10623] veth0_macvtap: entered promiscuous mode
[  228.111601][T10623] veth0_macvtap: entered allmulticast mode
[  228.165459][T10623] 8021q: adding VLAN 0 to HW filter on device bond1
[  228.210491][T10347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.313399][T10347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.323171][T10347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.334845][T10347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.350571][T10347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.482372][   T36] ip6_tunnel: nl802154 xmit: Local address not yet configured!
[  228.685720][T10662] sctp: [Deprecated]: syz.1.1289 (pid 10662) Use of int in max_burst socket option.
[  228.685720][T10662] Use struct sctp_assoc_value instead
[  228.711386][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.746539][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.857488][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.896001][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.818928][ T5836] Bluetooth: hci1: command tx timeout
[  230.488313][T10694] validate_nla: 49 callbacks suppressed
[  230.488332][T10694] netlink: 'syz.2.1295': attribute type 1 has an invalid length.
[  230.938246][T10717] netlink: 'syz.1.1305': attribute type 21 has an invalid length.
[  230.967870][T10717] netlink: 'syz.1.1305': attribute type 22 has an invalid length.
[  230.983057][T10717] netlink: 'syz.1.1305': attribute type 23 has an invalid length.
[  231.008742][T10717] netlink: 'syz.1.1305': attribute type 25 has an invalid length.
[  231.042985][T10717] netlink: 'syz.1.1305': attribute type 26 has an invalid length.
[  231.100383][T10728] net_ratelimit: 15 callbacks suppressed
[  231.100405][T10728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.584558][T10753] __nla_validate_parse: 16 callbacks suppressed
[  231.584651][T10753] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1317'.
[  231.605735][T10753] netlink: 'syz.1.1317': attribute type 1 has an invalid length.
[  231.612034][T10749] netlink: 'syz.0.1315': attribute type 10 has an invalid length.
[  231.621742][T10753] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1317'.
[  231.725623][T10749] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  231.892849][T10764] netlink: 'syz.0.1321': attribute type 6 has an invalid length.
[  232.298891][    C0] ip6_tunnel: nl802154 xmit: Local address not yet configured!
[  232.441586][T10804] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1332'.
[  232.629683][T10808] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  232.638947][T10808] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  232.818479][T10821] netlink: 'syz.0.1338': attribute type 1 has an invalid length.
[  232.819329][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1337'.
[  232.827743][T10821] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1338'.
[  233.264129][T10851] ip6gre1: entered promiscuous mode
[  233.364868][T10855] vlan2: entered promiscuous mode
[  233.370518][T10855] vlan2: entered allmulticast mode
[  233.375807][T10855] hsr_slave_1: entered allmulticast mode
[  233.410709][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'.
[  233.687706][T10871] openvswitch: netlink: Message has 199 unknown bytes.
[  233.695020][T10871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.861635][T10882] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:0
[  233.924329][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'.
[  234.108900][T10893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1362'.
[  234.125035][T10896] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  234.135673][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1362'.
[  234.151078][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1361'.
[  235.683158][T10976] netlink: 'syz.0.1389': attribute type 58 has an invalid length.
[  235.814945][T10980] netlink: 'syz.4.1391': attribute type 5 has an invalid length.
[  237.069323][T11054] __nla_validate_parse: 76 callbacks suppressed
[  237.069344][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1412'.
[  237.075814][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'.
[  237.191032][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'.
[  237.407924][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'.
[  237.426497][T11070] x_tables: duplicate underflow at hook 1
[  237.610506][T11081] xt_nat: multiple ranges no longer supported
[  238.024517][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'.
[  238.086929][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'.
[  238.096533][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'.
[  238.117639][T11109] netlink: 'syz.0.1433': attribute type 20 has an invalid length.
[  238.204949][T11115] tipc: Started in network mode
[  238.213136][T11115] tipc: Node identity d2c106eee5dd, cluster identity 4711
[  238.225870][T11115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.241813][T11112] tipc: Disabling bearer <eth:syzkaller0>
[  238.408221][T11130] netlink: 'syz.0.1440': attribute type 1 has an invalid length.
[  238.416963][T11130] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1440'.
[  238.435168][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1440'.
[  238.548244][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'.
[  238.611075][T11137] syzkaller0: entered promiscuous mode
[  238.616779][T11137] syzkaller0: entered allmulticast mode
[  238.630915][T11137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.644893][T11136] tipc: Resetting bearer <eth:syzkaller0>
[  238.673186][T11136] tipc: Disabling bearer <eth:syzkaller0>
[  238.874065][ T5836] Bluetooth: hci4: link tx timeout
[  238.880258][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  238.894552][ T5838] Bluetooth: hci4: link tx timeout
[  238.900703][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  238.909469][ T5838] Bluetooth: hci4: link tx timeout
[  238.914653][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  238.922614][ T5838] Bluetooth: hci4: link tx timeout
[  238.927768][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  239.283609][T11174] openvswitch: netlink: Key type 16144 is out of range max 32
[  239.691673][T11200] openvswitch: netlink: Missing key (keys=40, expected=80)
[  239.739055][    C0] ip6_tunnel: nl802154 xmit: Local address not yet configured!
[  240.924624][T11279] nbd: couldn't find a device at index -373156329
[  240.939236][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  241.460743][T11307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.681883][T11317] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003
[  241.719723][T11317] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003
[  241.737910][T11317] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20003
[  241.850548][T11326] netlink: 'syz.2.1495': attribute type 9 has an invalid length.
[  242.132678][T11340] __nla_validate_parse: 5 callbacks suppressed
[  242.132699][T11340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1500'.
[  242.269580][T11350] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1504'.
[  242.302746][T11350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'.
[  242.512344][T11365] netdevsim netdevsim1: Direct firmware load for /.� failed with error -2
[  242.545137][T11365] netdevsim netdevsim1: Falling back to sysfs fallback for: /.�
[  242.663683][T11370] x_tables: ip_tables: esp match: only valid for protocol 50
[  243.334843][T11399] netlink: 'syz.4.1516': attribute type 2 has an invalid length.
[  243.351642][T11399] netlink: 'syz.4.1516': attribute type 8 has an invalid length.
[  243.360740][T11399] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1516'.
[  243.527329][T11407] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  243.631432][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'.
[  244.093849][T11432] 8021q: adding VLAN 0 to HW filter on device bond2
[  244.113121][T11432] bond0: (slave bond2): Enslaving as a backup interface with a down link
[  244.185590][T11442] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  244.217174][T11442] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1528'.
[  244.488237][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1532'.
[  244.492022][T11453] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1533'.
[  244.668477][T11464] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1536'.
[  244.698509][T11464] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.726544][T11464] tipc: Resetting bearer <eth:syzkaller0>
[  244.961919][T11475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1541'.
[  245.064934][T11480] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  245.107011][T11484] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  245.243377][T11491] netlink: 'syz.2.1547': attribute type 1 has an invalid length.
[  245.253592][T11489] netlink: 'syz.0.1546': attribute type 1 has an invalid length.
[  245.265864][T11491] netlink: 'syz.2.1547': attribute type 2 has an invalid length.
[  245.637855][T11513] netlink: 'syz.4.1555': attribute type 4 has an invalid length.
[  245.722041][T11519] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  245.732778][T11517] netlink: zone id is out of range
[  245.738399][T11517] netlink: zone id is out of range
[  245.744358][T11517] netlink: zone id is out of range
[  245.750448][T11517] netlink: zone id is out of range
[  245.755902][T11517] netlink: zone id is out of range
[  245.762116][T11517] netlink: zone id is out of range
[  245.767808][T11517] netlink: zone id is out of range
[  245.777347][T11517] netlink: zone id is out of range
[  245.784442][T11517] netlink: zone id is out of range
[  245.964613][T11527] bond0: option mode: unable to set because the bond device has slaves
[  246.243332][T11545] xt_ecn: cannot match TCP bits for non-tcp packets
[  246.327657][T11547] ip6gre2: entered allmulticast mode
[  246.490261][T11554] netem: change failed
[  246.605229][T11559] batadv0: entered promiscuous mode
[  246.620671][T11559] batadv0: left promiscuous mode
[  246.898872][T11564] xfrm0: entered promiscuous mode
[  246.903984][T11564] xfrm0: entered allmulticast mode
[  247.163916][T11578] netlink: 'syz.4.1578': attribute type 12 has an invalid length.
[  247.240691][T11584] __nla_validate_parse: 7 callbacks suppressed
[  247.240714][T11584] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1579'.
[  247.314008][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'.
[  248.022127][T11609] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1587'.
[  248.032533][T11608] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1587'.
[  248.053465][T11608] hsr_slave_0: left promiscuous mode
[  248.110464][T11608] hsr_slave_1: left promiscuous mode
[  248.184318][T11616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1589'.
[  248.345252][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1591'.
[  248.582471][T11636] No such timeout policy "syz0"
[  248.812754][T11646] ieee802154 phy0 wpan0: encryption failed: -22
[  249.374441][T11681] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1608'.
[  249.401496][T11676] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1606'.
[  249.462305][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1607'.
[  249.523497][T11685] macvtap2: entered promiscuous mode
[  249.529228][T11685] macvtap2: entered allmulticast mode
[  249.933582][T11708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  250.037628][T11716] netlink: 'syz.0.1618': attribute type 10 has an invalid length.
[  250.056909][T11716] team0: Port device hsr_slave_0 added
[  250.206999][T11723] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  250.286942][T11724] netlink: 'syz.0.1621': attribute type 1 has an invalid length.
[  250.304175][T11724] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1621'.
[  251.275610][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.339208][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.405971][T11780] xt_l2tp: unknown flags: 18
[  251.440599][T11774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.472660][T11774] netlink: 'syz.2.1639': attribute type 10 has an invalid length.
[  251.499272][T11774] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  251.562414][T11789] net_ratelimit: 8 callbacks suppressed
[  251.562433][T11789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.377816][T11831] netlink: 'syz.2.1655': attribute type 13 has an invalid length.
[  252.387526][T11829] syzkaller0: entered promiscuous mode
[  252.395648][T11833] openvswitch: netlink: Duplicate or invalid key (type 0).
[  252.396574][T11829] syzkaller0: entered allmulticast mode
[  252.404161][T11833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.061275][T11847] netlink: 'syz.4.1660': attribute type 1 has an invalid length.
[  254.253672][T11863] __nla_validate_parse: 3 callbacks suppressed
[  254.253695][T11863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1665'.
[  254.432287][T11872] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  254.459587][    C0] ip6_tunnel: nl802154 xmit: Local address not yet configured!
[  254.486703][T11872] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  254.686185][T11888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1672'.
[  254.705927][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1672'.
[  254.920201][T11894] netlink: 'syz.4.1674': attribute type 1 has an invalid length.
[  254.938240][T11894] netlink: 'syz.4.1674': attribute type 2 has an invalid length.
[  255.229278][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1676'.
[  255.242822][T11904] openvswitch: netlink: Flow actions attr not present in new flow.
[  255.297866][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1678'.
[  255.486646][T11914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1681'.
[  255.706552][T11925] netlink: 'syz.1.1685': attribute type 29 has an invalid length.
[  255.743883][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.955777][T11933] C: renamed from lo (while UP)
[  256.021496][T11935] : entered promiscuous mode
[  256.485706][T11964] netlink: 'syz.2.1700': attribute type 23 has an invalid length.
[  256.581034][T11964] can_create: 1 callbacks suppressed
[  256.581057][T11964] can: request_module (can-proto-0) failed.
[  256.707234][T11972] !
: renamed from dummy0 (while UP)
[  257.059916][T11997] xt_TPROXY: Can be used only with -p tcp or -p udp
[  257.180286][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  257.615555][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'.
[  258.073555][T12042] team0: Device gtp0 is up. Set it down before adding it as a team port
[  258.125596][T12048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.126597][T12049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.361083][T12059] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1724'.
[  258.380153][T12059] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1724'.
[  258.669691][T12075] netlink: 'syz.0.1728': attribute type 13 has an invalid length.
[  258.711233][T12075] veth0_macvtap: left promiscuous mode
[  258.744255][T12075] macvtap0: entered allmulticast mode
[  258.768076][T12084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1731'.
[  258.785620][T12075] macvtap0: refused to change device tx_queue_len
[  259.265531][ T5836] Bluetooth: hci4: command 0x0406 tx timeout
[  259.498380][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'.
[  259.825799][T12142] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  260.375215][T12173] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  260.398588][T12173] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  260.415315][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'.
[  260.856957][T12204] netlink: 416 bytes leftover after parsing attributes in process `syz.4.1761'.
[  260.881829][T12204] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  260.975269][T12210] netlink: 'syz.1.1763': attribute type 2 has an invalid length.
[  260.986291][T12210] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  261.070852][T12215] netlink: 'syz.0.1764': attribute type 5 has an invalid length.
[  261.272479][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'.
[  261.436657][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'.
[  261.446395][T12237] netlink: 'syz.1.1771': attribute type 1 has an invalid length.
[  261.465988][T12237] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1771'.
[  261.553619][T12241] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  261.567002][T12242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'.
[  261.567089][T12242] netlink: 'syz.1.1771': attribute type 1 has an invalid length.
[  261.567103][T12242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1771'.
[  261.704099][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1773'.
[  261.830797][T12253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1777'.
[  262.412069][T12295] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  262.557632][T12288] bond0 (unregistering): (slave bond3): Releasing backup interface
[  262.576330][T12288] bond0 (unregistering): Released all slaves
[  262.599304][T12302] netdevsim netdevsim2: Direct firmware load for /.� failed with error -2
[  262.608974][T12302] netdevsim netdevsim2: Falling back to sysfs fallback for: /.�
[  262.794773][T12311] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  262.933932][T12322] netlink: 'syz.0.1794': attribute type 1 has an invalid length.
[  262.998541][T12322] bond3: (slave gretap1): making interface the new active one
[  263.010766][T12322] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  263.023293][T12325] netlink: 'syz.2.1795': attribute type 12 has an invalid length.
[  263.036351][T12322] 8021q: adding VLAN 0 to HW filter on device bond3
[  263.256805][T12334] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  263.257652][T12335] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  263.391759][T12342] netlink: 'syz.1.1801': attribute type 3 has an invalid length.
[  264.135015][T12377] macvlan0: entered promiscuous mode
[  264.155330][T12377] macvlan0: entered allmulticast mode
[  264.572063][T12406] __nla_validate_parse: 9 callbacks suppressed
[  264.572085][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.595135][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.605153][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.636056][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.657007][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.687393][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.702357][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.712676][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.725683][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.736604][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'.
[  264.845526][T12418] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222)
[  264.969894][T12423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.981426][T12424] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  265.153155][ T5893] hid-generic 0005:0C45:1010.0002: item fetching failed at offset 0/1
[  265.164017][ T5893] hid-generic 0005:0C45:1010.0002: probe with driver hid-generic failed with error -22
[  265.181847][T12433] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000
[  265.597278][T12452] netlink: 'syz.2.1835': attribute type 4 has an invalid length.
[  265.639939][T12452] netlink: 'syz.2.1835': attribute type 4 has an invalid length.
[  265.727659][T12466] bridge: RTM_NEWNEIGH with invalid ether address
[  265.997525][T12475] dvmrp1: entered allmulticast mode
[  266.431479][T12492] bond3: entered promiscuous mode
[  266.436624][T12492] bond3: entered allmulticast mode
[  266.442885][T12492] 8021q: adding VLAN 0 to HW filter on device bond3
[  266.925489][T12525] xt_l2tp: invalid flags combination: c
[  267.435628][T12547] xt_CT: No such helper "syz0"
[  267.537420][T12556] netlink: 'syz.0.1865': attribute type 1 has an invalid length.
[  267.739594][T12562] netlink: 'syz.0.1868': attribute type 10 has an invalid length.
[  267.781734][T12562] 8021q: adding VLAN 0 to HW filter on device team0
[  267.800212][T12562] bond0: (slave team0): Enslaving as an active interface with an up link
[  267.984770][T12569] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  268.009769][T12571] netlink: 'syz.4.1871': attribute type 10 has an invalid length.
[  268.042463][T12571] netlink: 'syz.4.1871': attribute type 4 has an invalid length.
[  268.777184][T12613] ipt_REJECT: TCP_RESET invalid for non-tcp
[  269.183071][ T5828] ------------[ cut here ]------------
[  269.188941][ T5828] workqueue: cannot queue hci_conn_timeout on wq hci1
[  269.195823][ T5828] WARNING: CPU: 1 PID: 5828 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  269.204885][ T5828] Modules linked in:
[  269.209010][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/1:3 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  269.221106][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  269.231196][ T5828] Workqueue: events l2cap_chan_timeout
[  269.236683][ T5828] RIP: 0010:__queue_work+0xd62/0xfe0
[  269.242376][ T5828] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  269.262000][ T5828] RSP: 0018:ffffc9000427f7a8 EFLAGS: 00010046
[  269.268092][ T5828] RAX: 8d02664a9e3c9e00 RBX: 0000000000000020 RCX: ffff88802f4e1e00
[  269.276161][ T5828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  269.284162][ T5828] RBP: 1ffff1100fc34e38 R08: 0000000000000003 R09: 0000000000000004
[  269.292157][ T5828] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  269.300144][ T5828] R13: ffff8880326e0960 R14: ffff88801a494408 R15: ffff88807e1a7178
[  269.308123][ T5828] FS:  0000000000000000(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000
[  269.317059][ T5828] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  269.323654][ T5828] CR2: 0000200000001100 CR3: 0000000059782000 CR4: 00000000003526f0
[  269.331639][ T5828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  269.339624][ T5828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  269.347603][ T5828] Call Trace:
[  269.350892][ T5828]  <TASK>
[  269.353843][ T5828]  ? __queue_delayed_work+0xe1/0x2d0
[  269.359145][ T5828]  queue_delayed_work_on+0x18b/0x280
[  269.364447][ T5828]  ? __pfx___cancel_work+0x10/0x10
[  269.369585][ T5828]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  269.375421][ T5828]  ? hci_conn_drop+0x14d/0x280
[  269.380234][ T5828]  l2cap_chan_del+0x285/0x5e0
[  269.384942][ T5828]  l2cap_chan_close+0x597/0x980
[  269.389830][ T5828]  ? __pfx_l2cap_chan_close+0x10/0x10
[  269.395218][ T5828]  ? process_scheduled_works+0x9ef/0x17b0
[  269.400971][ T5828]  l2cap_chan_timeout+0x158/0x390
[  269.406041][ T5828]  ? process_scheduled_works+0x9ef/0x17b0
[  269.411817][ T5828]  process_scheduled_works+0xae1/0x17b0
[  269.417410][ T5828]  ? __pfx_process_scheduled_works+0x10/0x10
[  269.423428][ T5828]  worker_thread+0x8a0/0xda0
[  269.428039][ T5828]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.434392][ T5828]  ? __kthread_parkme+0x7b/0x200
[  269.439359][ T5828]  kthread+0x70e/0x8a0
[  269.443447][ T5828]  ? __pfx_worker_thread+0x10/0x10
[  269.448578][ T5828]  ? __pfx_kthread+0x10/0x10
[  269.453185][ T5828]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.458400][ T5828]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.463615][ T5828]  ? __pfx_kthread+0x10/0x10
[  269.468217][ T5828]  ret_from_fork+0x3fc/0x770
[  269.472828][ T5828]  ? __pfx_ret_from_fork+0x10/0x10
[  269.478047][ T5828]  ? __switch_to_asm+0x39/0x70
[  269.482826][ T5828]  ? __switch_to_asm+0x33/0x70
[  269.487595][ T5828]  ? __pfx_kthread+0x10/0x10
[  269.492208][ T5828]  ret_from_fork_asm+0x1a/0x30
[  269.497016][ T5828]  </TASK>
[  269.500056][ T5828] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  269.507349][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/1:3 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  269.519420][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  269.529484][ T5828] Workqueue: events l2cap_chan_timeout
[  269.534968][ T5828] Call Trace:
[  269.538256][ T5828]  <TASK>
[  269.541204][ T5828]  dump_stack_lvl+0x99/0x250
[  269.545904][ T5828]  ? __asan_memcpy+0x40/0x70
[  269.550603][ T5828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.555817][ T5828]  ? __pfx__printk+0x10/0x10
[  269.560430][ T5828]  panic+0x2db/0x790
[  269.564351][ T5828]  ? __pfx_panic+0x10/0x10
[  269.568780][ T5828]  ? show_trace_log_lvl+0x4fb/0x550
[  269.574005][ T5828]  ? ret_from_fork_asm+0x1a/0x30
[  269.578959][ T5828]  __warn+0x31b/0x4b0
[  269.582960][ T5828]  ? __queue_work+0xd62/0xfe0
[  269.587651][ T5828]  ? __queue_work+0xd62/0xfe0
[  269.592351][ T5828]  report_bug+0x2be/0x4f0
[  269.596693][ T5828]  ? __queue_work+0xd62/0xfe0
[  269.601378][ T5828]  ? __queue_work+0xd62/0xfe0
[  269.606065][ T5828]  ? __queue_work+0xd64/0xfe0
[  269.610751][ T5828]  handle_bug+0x84/0x160
[  269.615002][ T5828]  exc_invalid_op+0x1a/0x50
[  269.619513][ T5828]  asm_exc_invalid_op+0x1a/0x20
[  269.624370][ T5828] RIP: 0010:__queue_work+0xd62/0xfe0
[  269.629662][ T5828] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  269.649281][ T5828] RSP: 0018:ffffc9000427f7a8 EFLAGS: 00010046
[  269.655386][ T5828] RAX: 8d02664a9e3c9e00 RBX: 0000000000000020 RCX: ffff88802f4e1e00
[  269.663393][ T5828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  269.671388][ T5828] RBP: 1ffff1100fc34e38 R08: 0000000000000003 R09: 0000000000000004
[  269.679390][ T5828] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: dffffc0000000000
[  269.687404][ T5828] R13: ffff8880326e0960 R14: ffff88801a494408 R15: ffff88807e1a7178
[  269.695432][ T5828]  ? __queue_work+0xd61/0xfe0
[  269.700141][ T5828]  ? __queue_delayed_work+0xe1/0x2d0
[  269.705445][ T5828]  queue_delayed_work_on+0x18b/0x280
[  269.710748][ T5828]  ? __pfx___cancel_work+0x10/0x10
[  269.715874][ T5828]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  269.721708][ T5828]  ? hci_conn_drop+0x14d/0x280
[  269.726492][ T5828]  l2cap_chan_del+0x285/0x5e0
[  269.731197][ T5828]  l2cap_chan_close+0x597/0x980
[  269.736074][ T5828]  ? __pfx_l2cap_chan_close+0x10/0x10
[  269.741485][ T5828]  ? process_scheduled_works+0x9ef/0x17b0
[  269.747232][ T5828]  l2cap_chan_timeout+0x158/0x390
[  269.752273][ T5828]  ? process_scheduled_works+0x9ef/0x17b0
[  269.758026][ T5828]  process_scheduled_works+0xae1/0x17b0
[  269.763624][ T5828]  ? __pfx_process_scheduled_works+0x10/0x10
[  269.769640][ T5828]  worker_thread+0x8a0/0xda0
[  269.774255][ T5828]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.780618][ T5828]  ? __kthread_parkme+0x7b/0x200
[  269.785581][ T5828]  kthread+0x70e/0x8a0
[  269.789669][ T5828]  ? __pfx_worker_thread+0x10/0x10
[  269.794799][ T5828]  ? __pfx_kthread+0x10/0x10
[  269.799404][ T5828]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.804631][ T5828]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.809846][ T5828]  ? __pfx_kthread+0x10/0x10
[  269.814452][ T5828]  ret_from_fork+0x3fc/0x770
[  269.819098][ T5828]  ? __pfx_ret_from_fork+0x10/0x10
[  269.824506][ T5828]  ? __switch_to_asm+0x39/0x70
[  269.829281][ T5828]  ? __switch_to_asm+0x33/0x70
[  269.834057][ T5828]  ? __pfx_kthread+0x10/0x10
[  269.838683][ T5828]  ret_from_fork_asm+0x1a/0x30
[  269.843507][ T5828]  </TASK>
[  269.846814][ T5828] Kernel Offset: disabled
[  269.851140][ T5828] Rebooting in 86400 seconds..