last executing test programs:

6.380312517s ago: executing program 0 (id=2691):
socket$inet(0xa, 0x801, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
accept4$inet6(r0, 0x0, &(0x7f0000000000), 0x80800)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc)
writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0xf)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

6.129527541s ago: executing program 0 (id=2693):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94)
r4 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0)
sendfile(r3, r4, 0x0, 0x3ffffffffffffa)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0)

4.737561438s ago: executing program 3 (id=2706):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000080f858dbb8a190525144de236015655e853f2b0e7f5df9d4d0e86aa61f4311d47ea27a8cf9afe5a9bdcf1e3b1f4079c9369b04d4285e9f734d59f5bff4fdceb3b7d71ae25062", 0x71}, {&(0x7f0000000180)="00004b13c84e0046901541510000000d6640888222a200760900"/37, 0x25}, {&(0x7f00000001c0)="df5073053587b821433052497f06249b6d0f617f8de7ec7416f56786db553506704cbe750433b0ac1e93124b9c695d7bbf58d906e270ec6752864eb310a7c06dee606755ac20183db20d27d42c6008266499918da86da9f5ddab", 0x5a}], 0x3) (rerun: 32)

4.36521713s ago: executing program 3 (id=2707):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r0, 0x1f, 0x1, 0xff, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0]}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r0, 0x1f, 0x1, 0xff, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], <r3=>0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000800)={0x80000000, <r4=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)={@map=r0, r1, 0xf, 0xd51c8f922ade2ce6, r2, @void, @void, @value=r4, @void, r3}, 0x20)
socket$kcm(0x2, 0x3, 0x106) (async)
r5 = socket$kcm(0x2, 0x3, 0x106)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'vxcan1\x00', @remote})
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r9, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50)
bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) (async)
bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x12c, r12, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x40, 0xf, 0x42f, 0x40, 0x6, 0x10]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7b5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x7, 0x1000, 0x1000, 0x10, 0xf, 0x4, 0x5, 0x0]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7127}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2bc}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x3294, 0x64b5, 0x0]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x9, 0x2c]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x143a, 0x5, 0xffff, 0x3, 0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x801}, 0x4008)

4.236068268s ago: executing program 3 (id=2708):
r0 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x4004800)
r1 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xb4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70)
r2 = socket$netlink(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={<r4=>0x0, 0x3, 0x5, 0x9, 0xfff, 0x20000000}, &(0x7f0000000240)=0x14)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={r4, 0x4, 0x6, 0x24000000, 0x8, 0x7}, &(0x7f0000000300)=0x14)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="48006c8bf8803241a94e000023c00100f90000d300000000aca972e5a3a0dbea1640b1d47a5aa9e1d2d9166622d89168886acba7212885d9aefab4f591904179528467e28425c03674721683cf5bcd7dc23403bfbf1e9b974136bf46c2fd610281000000000100000000000000000000008bc805337ad927cb298ae5f325cf7df8bef95b5e7f166c71000000000000", @ANYRES32=0x0, @ANYRES16=r3], 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'})
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x2b, 'net_cls'}, {0x0, 'io'}, {0x2b, 'rlimit'}, {0x2b, 'freezer'}, {0x0, 'memory'}, {0x2d, 'pids'}]}, 0x2c)

4.156614006s ago: executing program 3 (id=2709):
recvmsg(0xffffffffffffffff, 0x0, 0x1f60)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
sendmsg$sock(r1, &(0x7f0000000240)={&(0x7f0000000140)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000400)}, 0x20004040)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

3.90991428s ago: executing program 3 (id=2710):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000180)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@end]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1402, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x42)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18)
socket$inet(0xa, 0x801, 0x84)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4)
r6 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x2f8}, 0x20000081)
setsockopt$sock_attach_bpf(r6, 0x6, 0x19, &(0x7f0000000200)=r6, 0x21)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a3100000000090001"], 0x6c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0)
sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r5, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r10, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)

3.612629645s ago: executing program 3 (id=2711):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
write(r0, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
unshare(0x6a040000)
unshare(0x44000000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000480, 0x2000000004b0, 0x2000000004e0], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000004000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000006d2500feffffff000000000000000000000000000000000000005cd29c01000000000000000000000000000000000000000000c8fe104400000000"]}, 0x108)
socketpair(0x23, 0x6, 0xfffffff9, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040411}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r2, &(0x7f0000000140)="fad0326270b25e1ef597861df94019a4eaeef07ef4371b0b8dec2a4f6d65478a192f2b12cf6457ad067355aecc49421f30c555bf6a340ab5885920380e1db2774890530a5d5131a5c890cb73699227e5e338e16a25af2222653526fa998e8f", 0x5f, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6}, 0x9c)

3.111320772s ago: executing program 2 (id=2714):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000050000000850000001100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}], 0x3c)

3.093211395s ago: executing program 0 (id=2715):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) (async)
close(r4) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x70, &(0x7f0000000700)='\x00\xd7\x03\x00\xf2_\xc2=\x91\xce\x93\xee\xce\x00\x00\x00\x00\x00\x00\xac\x9czB\x7f\x9c)r\xedC\x99\xad\xf8\xb3\xfa\x90\xd5\xbe\xb8M\xbd\xd6\x8d\xca\x85/\xe5\"\xfc\x04y\xf8.\x97\xf9\xc9P\xe9%x\xee*Y\x81l\x18+\x96\xcf2\xa4\xf5\xb3\xb8Q\x0f3\r\xf0\x18n\xf25cB\v\xb6\x13\x9f\x82\xd4\xc6B<\xb4QM5u[\xef\x1f\xf6\xfd\x8as\a\xd0L1\xbf|\x9d'}, 0x30) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000001c40)=ANY=[@ANYBLOB='-cpu  +'], 0x19) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x18) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYRESHEX=r6, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES64=0x0, @ANYRESDEC=r3, @ANYBLOB='\x00'/15], 0x48) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
sendmsg$AUDIT_LIST_RULES(r7, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x400, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000000) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) (async)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) (async)
close(r9) (async)
unshare(0x22020400) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x1, 0xc1, 0x4, 0x1, 0x3, 0x0, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x5, 0x5, 0x100000, 0x762, 0x3, 0x10, 0xe, 0x2b12, 0x100, 0x6, 0x1c02, 0xb, 0xfda, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x5, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x6, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r8}, 0x18)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={<r11=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r11, 0x1, 0x1d, &(0x7f00000001c0), 0x4)

2.95015323s ago: executing program 0 (id=2716):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000fcdbdf25030000001800285f74756e0000000000000000050003000300"/54], 0x3c}, 0x1, 0x0, 0x0, 0x2000d085}, 0x4000080)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c40b5000000400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c40b5000000400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

2.943788068s ago: executing program 2 (id=2717):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005a0735007f"], 0xc4}}, 0x2c000010)
syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @empty, @private1}}}}}}, 0x0)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x2}, {0xfff3, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044074)
sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x6, 0x9}, {0xffef, 0xb}, {0x7, 0xffe0}}, [{0x8, 0xb, 0xcc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffa}, 0xe)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000002200)=0xc0100100)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000580)={0x0, 0x5, 0x5})
close(0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)

2.889493645s ago: executing program 0 (id=2718):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000580)='sched_switch\x00', r1, 0x0, 0x10001}, 0x18)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x1}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)="5529a20e90ec420e9de3f041fb34843cf6f29d9fa5400908a5d2ef88289fbda7e09491978c11260992676626f18ed89204af4601ad65d307f96993b9d99fe33906486103b4ac80202e567d41d8a6e58efe964f9149ba478168a0cfe7868bd55c68748b2ef43b0b4b82f44c6eda60e2b51c9aa7f207374b28e3ae8a47ce36a935ef", 0x81}, {&(0x7f0000000200)="6a73b6771ebdd522a64b1ac9fa7f2e5bec38dcdc40a91161e68a", 0x1a}], 0x2, &(0x7f00000007c0)=[{0x20, 0x117, 0x7, "e4b800f7adb71dd2b6195fe3"}, {0x40, 0x0, 0x0, "c9e2e758539d4fc8f58d1f9ce3a75f41cb9ae356b093ac2e44cd9a53e722d82562e66465e82c246d6113"}, {0x40, 0x0, 0xb, "4c75b7d4c761fa0cff699a69bde6906b578a6d5c7a77de920f0fbac3b0fc9322a4a3ed13e1403a2dee9eabb9f8d6cb"}, {0x90, 0x118, 0x10001, "4691d611d5ba632f591ca15c7fd3adf2af9b4e3f5d52c5384892bcec900cdf01abfa59877e3381b9da65052ea86b0d7561902f55bce51dd52f2d0e97c212e72b53508c0cdaabd53a47377405d3c61e18a22c29cf521dc01d6672b8576661b646fe678726935d1650901491080234769e78d615a347e6f42204ac"}], 0x130}, 0x8000)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
close(0xffffffffffffffff)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000500), &(0x7f00000005c0)=0x10, 0x800)
ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000600)={0x8, 0x1, 0x2d52d831, 0x3, 0x2, 0x5})
connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_int(r6, 0x0, 0x3, &(0x7f00000000c0)=0xfffffffa, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
sendto$inet(r6, &(0x7f00000001c0)="286068dd571e5b9dcc6bfc7a7e92faffd354fe02", 0x14, 0x40480, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))

2.685181591s ago: executing program 0 (id=2719):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e0001006970366772657461700000001800020006001000000000001400060000000000000000000000ffff0000e3ff090001"], 0x60}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850)
unshare(0x6a040000)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
unshare(0x400)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2.659889186s ago: executing program 2 (id=2720):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r0, 0x1, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x60}}}}}, 0x28}}, 0x0)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4041)

2.263311426s ago: executing program 2 (id=2723):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x11, 0x2, 0x74c4b674)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000b7d41c4e0000000666d4c400000000d66d1353c489914c9f1501471df1631095617bbf3bf354f8eeaeb24a8e189921606e45d333edabff229e5f232e8c1959d2609b873822aa9d20b2d5dd18ed5a06be534813cc366d128a3f69f089dc73016d7153e5a746ee8c871003dc437668d808d4901d05291ff5525747649cc52876e24d9f341f25e5f5a6026d03ced6a3b785f2e2f17265b24f697a318618057a0b15ede5a73d12eeb0ad5300a38ecaf8d28b9cee0459e9ea953664e5"], 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000600000000000000000000040000000000", @ANYRES8=r1, @ANYBLOB='\x00'/20, @ANYRESOCT=r2, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48)
socket$unix(0x1, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000ff15f5c9ab115dc5072697ef6ec264f67d507dcc49f0cc4372765a8bfec305743e63d9a0d357a421139e2b143264a96f15e4610e9673595e49250d6f9ec0e71a139af1b2b1102c7728f684dc31f9bc6c8d698fecf8903f6e2297073213e511f996989db3d58ad424200d144ea52f45c613a7ff237c083ad6bbdc0304979f424f98bd609a73148835bdcc8d12ecac942925496e26dab8a2fa", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0x4}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:'], 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r5, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012801a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket(0x3, 0x2, 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)

2.18609245s ago: executing program 4 (id=2724):
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) (async)
sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1af3050013000000", 0x8)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

1.961771845s ago: executing program 4 (id=2726):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="017f04000000000000000b"], 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x0) (async)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="017f04000000000000000b"], 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) (async)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="710504960301020308094e670fbbe76cb4c0a1cbb5bd73ccd8ba31b0df491c1bf68ea78f47c27f6ebec43b6f708a7add0fdff5bcb7a78e1c8fdd69f331a6e32ddb78e752206ad663deab49b8a876e166f9278e505f54bfe86c8cfd085680030368"], 0x61) (async)
write$nci(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="710504960301020308094e670fbbe76cb4c0a1cbb5bd73ccd8ba31b0df491c1bf68ea78f47c27f6ebec43b6f708a7add0fdff5bcb7a78e1c8fdd69f331a6e32ddb78e752206ad663deab49b8a876e166f9278e505f54bfe86c8cfd085680030368"], 0x61)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x1f, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd70c54629e8fe00fcdbdf25739cca360000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x40)

1.886283155s ago: executing program 2 (id=2727):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x10, 0x29, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000001010000040000000200000000000000", @ANYRES32, @ANYBLOB="feffffff000000000000000000000000145c48d15eb489a9ee6ad94ec081f647d3be248581558cf43fe7b968cbe704679392935dc653dac75bddbdb13ab3d4dbf5d3557fcc697656e6900c5b7d3a2144b613e4837e785deb0e3d3bfa021548f347c972806c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000040000003d17131f7d4ea816", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x10)
pipe(&(0x7f0000000480)={<r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r5)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000180)=0x200000, 0x4)
getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, 0x0, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x2d)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ffffffc}, 0x0, 0x0)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
close(0x4)
r8 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000fee000)=0x3fa, 0x4)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='iocost_ioc_vrate_adj\x00', r10}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

1.83368071s ago: executing program 1 (id=2728):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', <r2=>0x0, 0x2f, 0xab, 0x1, 0x7fffffff, 0x54, @loopback, @loopback, 0x0, 0x700, 0x1, 0x8}}) (rerun: 32)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d40)={r2, @multicast1, @multicast1}, 0xc) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5], 0x31) (async, rerun: 32)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="720ac4ff000000007110ab0000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="008f0700000000000000b70500f007000002850000006b2700009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async, rerun: 32)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000000140)={0x11, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 'lc\x00', 0xa, 0x401, 0x65}, 0x2c) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000780)=[0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r11=>0x0, 0xdf, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xd7, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000200000000000000a5be891c950000000000000065642000040000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xa3bd, 0x70, &(0x7f0000000180)=""/112, 0x40f00, 0xc, '\x00', r10, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xa, 0x6, 0x7}, 0x10, r11, r1, 0x1, &(0x7f0000000a40)=[r3], &(0x7f0000000a80)=[{0x4, 0x1, 0x6, 0xf}], 0x10, 0x7fff}, 0x94)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000aac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1.72327265s ago: executing program 1 (id=2729):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r1}, 0x18)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x5c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000890)
sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r5, 0x11, 0x70bd2d, 0x25dfdbff, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x30004880)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r7, &(0x7f0000000000)="9882e70131b512e63686ac1b", 0xc)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000580)={r3, r7, 0xf000, 0xec, &(0x7f00000003c0)="8121fec4eb1624c1a1944b61e32324d130f6f291690b9f46916e329e03c81bfe9d5cf75e79d40f1a96a33db5fcf4b34b0580dd33584a161e33ee0c65891ce8fad9bac9c40cbb1b508bd7b4b536512e423d423ded9870a2b7b1d21b75f9910502f0269c5fc548e381efdf4f0813041c99be4bda3a8be3442c2aa61d777cc0e91d0ec1799128525d0e8a9fbeb6029b18fe0534f455917185c0ae3f8e43e69fe7f2f2cdb2f0880d99622d66e4c340c562b321d89225b9ca98ada748966755ab14408c752db37be4fb9153ac02486b87074c4bbf9c40ea16aa9b273f21564b9cf033481b56f84bb0a604b55888ac", 0x0, 0xd1, 0x7, 0x1, 0xfffe, 0x0, 0xfffffffd, 'syz1\x00'})
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x34, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3353724d}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7ad}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x54000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x80010)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x1c)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r8}, 0x18)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)

1.623866782s ago: executing program 4 (id=2730):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x24}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.493556933s ago: executing program 1 (id=2731):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002180)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xbc, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r6, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

1.162031721s ago: executing program 1 (id=2732):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0xff, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="90", 0x1}], 0x1}}], 0x2, 0x4000000)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r4, 0x6}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)

675.905488ms ago: executing program 4 (id=2733):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500e502000000000000000007"], 0x38}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x60}}}}}, 0x20}}, 0x4081)

441.713404ms ago: executing program 1 (id=2734):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x0, 0x0, {0x3}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c0002800400108004"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6)

213.442133ms ago: executing program 1 (id=2735):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000480)={0x7, 'pimreg1\x00', {0x7}, 0x8})
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts={{0x18}}], 0x18}, 0xc4)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000009000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500182a000200000555000000000000000000", @ANYRES32=0x1, @ANYBLOB="00000000080000005047100010000000007701000000000085200000010000004bb90001fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000085200000010000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x10, 0x1}, 0x94)
r7 = socket$kcm(0x29, 0x5, 0x0)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x201, 0x2}, 0x1c)
recvmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x10}], 0x1, 0x2100, 0x0)
recvmmsg$unix(r8, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x3, 0x0, 0x2, 0x2, {0xa, 0x4e22, 0xc, @mcast1, 0xbe4}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="956a3456", 0x4}], 0x1, &(0x7f00000006c0)=[{0xd8, 0x10f, 0x47, "989757ac1b87091f22d6da63611423cb97737e8214a0eea85eda5eb87c161847e35004a35f4a0451c512ae9f19db439b4eff0f2462314d6ce1a94a6ab1854301b3e151aa4cd40fc514bb121dac596d45bdad4beb223477f66d6450ca695e8c9e97368d051965ab5585f659a9520b971e5d47c6898b0aeb0b03b4b8adc82e4eed07c387024db0131165e25326fd8bbfa9cfd65054c7daa6d793d58fc010391ba1c1e6b993a455d6bf7f1f76edef3c325c6a32d3937d81e62e551e7d1d5934629a532d"}, {0x48, 0x114, 0x3, "f71683e7b16f08dc3d4f68e78375f8466ef1c527ec568d2206cd08278cf688e55104081ba271792842a7f001419cd8ffbd7f354f2a6c"}, {0xf, 0x111, 0xf, "8ba75eef003ea8bbca331b8c9c7d4075375ed4be7daff79007c2ee938def1fedd53ed6f18e49ea9959e77cff43c9436aa1a4c824d7a0eaccd3779c18c049a61e48e982a1d4e17251de4bc0d74d9082e17925650c76436180613143982b595c2519a65b80c35076608f71857d06cf876f8509e860f9fc258449ac8c1a0ea1202a142d19e3141c1f52fd62f64799d21ad28fbf31b970d74bcacbf2c8756456"}, {0x10, 0x102, 0x5, "68b4afd7a129a61568c02de53140d46e5c8bcf1ffec57e6e8e0c676bc72791f9c8f815d04897c40343138cc22f491f49f0f6866ef8b29ab600000000beed8ee6e99cffe558700a7a1fb584112dd138bc77e766a4952404de8b7b69434ebd0624dece30eb4a6416489ae95180e0e081da4df0687c7000219b3bafa4a5ac1199e48e8ae35029bf0ba251a86f756dfcf76023239a7bb15584341c20abca0bd308f7845b2d73f12b56d784bf26632bc80e6b8d60f02e17121d0964452c87174c6c7ca5920cc3c03957193fcefa44a48b97582b229c3f7897dbab3b9127f3341bc644bb090bce59e75404e565133df8d8cf14fe846ced39894a07d6d5b6dc392f4e6b2f7fb3c59f52834537ba558300"/281}], 0x1e0}, 0x8080)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x50, &(0x7f0000000040), 0x4)

202.651662ms ago: executing program 4 (id=2736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240))
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x92}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, 0x0, &(0x7f0000000300)=""/249}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$tipc(0x1e, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
bind$bt_hci(r3, &(0x7f0000000040), 0x6)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_bt_hci(r3, 0x400448ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2b, 'hugetlb'}]}, 0xf)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r8=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000001c0)={r8, 0x6}, &(0x7f0000000200)=0x8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000001480)=0xc)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001500))
sendmsg$netlink(r4, &(0x7f0000001b80)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc, &(0x7f0000001b40)=[{&(0x7f0000000140)={0x28, 0x26, 0x200, 0x70bd29, 0x25dfdbfb, "", [@nested={0x18, 0x80, 0x0, 0x1, [@typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x28}, {&(0x7f0000000440)={0xfd8, 0x30, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0xf8, 0x0, 0x0, @u32=0x80000000}, @generic="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"]}, 0xfd8}, {&(0x7f0000001540)={0x10, 0x17, 0x200, 0x70bd2c, 0x25dfdbfd}, 0x10}, {0x0}], 0x4, 0x0, 0x0, 0x20008005}, 0xc004)

133.070736ms ago: executing program 2 (id=2737):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x134, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={<r4=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={<r6=>r5, 0x6}, &(0x7f0000000340)=0x8)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4088951)
r10 = socket(0x1e, 0x4, 0x0)
getsockopt$inet6_tcp_int(r10, 0x6, 0x6, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r11, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000780)={r6, @in6={{0xa, 0x4e23, 0xffff, @mcast1, 0x2}}, [0x1ff, 0x8, 0x4, 0x2, 0x0, 0x0, 0x1, 0x2, 0x9, 0x2, 0x0, 0x8, 0xfff, 0x7, 0x4]}, &(0x7f0000000300)=0x100)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8a321ffb702000008000000b50200000000000085000000cb0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000880)={r4}, &(0x7f00000008c0)=0x8)

0s ago: executing program 4 (id=2738):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x20, 0x0, 0x0, 0x0, 0x4a, @random="e23cc7510a2c"}, 0x10)
connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @local}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x224, 0x7, 0x0, 0x81, 0x9}, 0x10)
connect$llc(r1, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffff2cfe7a2bedb862d4442f241f0dff0000000000000000eb173affff02000000000000000000001f00000188009078c0000000fe8000000040a4e93359f058ed0000bb0000000000000000000100000000000030da46ca1e0a6ee9041fa2e9d0078a19742883d808f4917dfb3d755b43475852047eb3ed160350e138f25db866f5dc109552805018f85c75528f0ef8ea27f4ea84ab19e73ab1c96578a3fc58541fff3f140bcff56d8018a7df206a06bc7c7ae7977289aae4d35252d401846859bd9b64"], 0x0)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
accept(r2, 0x0, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0022006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

kernel console output (not intermixed with test programs):

syz.1.438': attribute type 12 has an invalid length.
[  153.036749][ T7694] netlink: 'syz.1.438': attribute type 4 has an invalid length.
[  153.242020][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'.
[  153.273730][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'.
[  154.176596][ T7749] netlink: 96 bytes leftover after parsing attributes in process `syz.0.455'.
[  154.251381][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'.
[  154.324589][ T7755] xt_CT: You must specify a L4 protocol and not use inversions on it
[  154.387834][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'.
[  154.404500][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'.
[  154.904067][ T7785] netlink: 'syz.4.465': attribute type 1 has an invalid length.
[  155.657309][ T7812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.778652][ T7812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.855798][ T7822] : entered promiscuous mode
[  155.856331][ T7829] netlink: 'syz.3.478': attribute type 1 has an invalid length.
[  155.958703][ T7829] bond2: entered promiscuous mode
[  155.965303][ T7829] 8021q: adding VLAN 0 to HW filter on device bond2
[  155.978314][ T5889] hid-generic 0005:10CF:05DF.0001: item fetching failed at offset 0/1
[  155.992495][ T5889] hid-generic 0005:10CF:05DF.0001: probe with driver hid-generic failed with error -22
[  156.085638][ T7812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.207766][ T7812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.420265][ T7849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  156.487757][ T1142] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.542873][ T7856] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  156.717723][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.776073][ T1142] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.852169][   T64] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.384370][ T7883] netlink: 'syz.3.493': attribute type 1 has an invalid length.
[  157.443763][ T7883] __nla_validate_parse: 7 callbacks suppressed
[  157.443781][ T7883] netlink: 224 bytes leftover after parsing attributes in process `syz.3.493'.
[  157.493596][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.494'.
[  158.406643][ T7929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.504'.
[  158.556285][ T7934] netlink: 'syz.3.507': attribute type 3 has an invalid length.
[  158.609169][ T7935] block nbd2: not configured, cannot reconfigure
[  158.686502][ T7937] openvswitch: netlink: IP tunnel dst address not specified
[  158.728509][ T7940] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  160.053048][ T7981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.522'.
[  160.091266][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.522'.
[  160.167102][ T7981] netlink: zone id is out of range
[  160.182561][ T7981] netlink: zone id is out of range
[  160.195479][ T7981] netlink: zone id is out of range
[  160.211580][ T7981] netlink: zone id is out of range
[  160.216756][ T7981] netlink: zone id is out of range
[  160.238864][ T7981] netlink: get zone limit has 4 unknown bytes
[  161.287446][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'.
[  161.340209][ T8015] netlink: 'syz.3.532': attribute type 1 has an invalid length.
[  161.460574][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'.
[  161.470912][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.501131][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.502929][ T8015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.532'.
[  161.807580][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.536'.
[  161.833083][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'.
[  162.513428][ T8052] syzkaller0: entered promiscuous mode
[  162.540295][ T8052] syzkaller0: entered allmulticast mode
[  162.746074][ T8064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.941353][ T8064] syzkaller0: entered promiscuous mode
[  162.965233][ T8064] syzkaller0: entered allmulticast mode
[  162.992807][ T8064] tipc: Resetting bearer <eth:syzkaller0>
[  163.044859][ T8078] netlink: 'syz.4.549': attribute type 10 has an invalid length.
[  163.067209][ T8078] netlink: 228 bytes leftover after parsing attributes in process `syz.4.549'.
[  163.085296][ T8063] tipc: Resetting bearer <eth:syzkaller0>
[  163.088959][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'.
[  163.136848][ T8085] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  164.318896][ T8063] tipc: Disabling bearer <eth:syzkaller0>
[  164.442907][ T8082] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.470693][ T8087] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  164.551235][ T8087] 8021q: adding VLAN 0 to HW filter on device bond1
[  164.565502][ T8087] bond1: (slave lo): Enslaving as an active interface with an up link
[  164.686932][ T8091] bond1 (unregistering): (slave lo): Releasing backup interface
[  164.696230][ T8091] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  164.717438][ T8091] bond1 (unregistering): Released all slaves
[  164.757525][ T5888] tipc: Node number set to 1126966497
[  165.037551][ T8124] netlink: 'syz.1.558': attribute type 2 has an invalid length.
[  165.059463][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'.
[  165.151211][   T54] Bluetooth: hci0: command tx timeout
[  165.169706][ T8132] netlink: 'syz.4.561': attribute type 1 has an invalid length.
[  165.182632][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.558'.
[  165.257588][ T8134] xt_ecn: cannot match TCP bits for non-tcp packets
[  165.307663][ T8136] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  165.320982][ T8136] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  165.374547][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'.
[  165.568492][ T8148] netlink: 36 bytes leftover after parsing attributes in process `syz.4.564'.
[  165.714385][ T8145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.565'.
[  165.862455][ T8161] netlink: 56 bytes leftover after parsing attributes in process `syz.4.567'.
[  166.058475][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'.
[  166.088696][ T8173] netlink: 'syz.1.569': attribute type 12 has an invalid length.
[  166.206633][ T8173] netlink: 'syz.1.569': attribute type 4 has an invalid length.
[  166.602575][ T8197] Cannot find add_set index 0 as target
[  167.075204][ T8213] netlink: zone id is out of range
[  167.080783][ T8214] netlink: zone id is out of range
[  167.086080][ T8213] netlink: zone id is out of range
[  167.091729][ T8214] netlink: zone id is out of range
[  167.110942][ T8213] netlink: set zone limit has 8 unknown bytes
[  167.122391][ T8214] netlink: set zone limit has 8 unknown bytes
[  167.413163][ T8232] syzkaller0: entered promiscuous mode
[  167.420994][ T8232] syzkaller0: entered allmulticast mode
[  167.450387][ T8231] bridge0: port 3(erspan0) entered blocking state
[  167.456944][ T8231] bridge0: port 3(erspan0) entered disabled state
[  167.465719][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[  167.481551][ T8231] erspan0: entered allmulticast mode
[  167.505054][ T8231] erspan0: entered promiscuous mode
[  167.512140][ T8231] bridge0: port 3(erspan0) entered blocking state
[  167.519078][ T8231] bridge0: port 3(erspan0) entered forwarding state
[  167.530599][ T8236] erspan0: left allmulticast mode
[  167.535809][ T8236] erspan0: left promiscuous mode
[  167.545596][ T8236] bridge0: port 3(erspan0) entered disabled state
[  168.332569][ T8258] __nla_validate_parse: 3 callbacks suppressed
[  168.332587][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'.
[  168.361790][ T8258] sch_tbf: peakrate 786 is lower than or equals to rate 19658 !
[  168.396213][ T8265] netlink: 48 bytes leftover after parsing attributes in process `syz.0.594'.
[  168.716108][ T8274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'.
[  168.716169][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'.
[  168.736729][ T8275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.597'.
[  169.068290][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'.
[  169.316814][ T8290] netlink: 428 bytes leftover after parsing attributes in process `syz.0.602'.
[  169.346755][ T8290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'.
[  169.407099][ T8292] netlink: 32 bytes leftover after parsing attributes in process `syz.2.603'.
[  169.571256][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'.
[  169.796168][ T8309] trusted_key: syz.0.606 sent an empty control message without MSG_MORE.
[  169.903546][ T8309] syzkaller0: entered promiscuous mode
[  169.909239][ T8309] syzkaller0: entered allmulticast mode
[  171.492285][ T8346] netlink: 'syz.4.616': attribute type 1 has an invalid length.
[  171.721437][ T8351] sctp: [Deprecated]: syz.0.617 (pid 8351) Use of struct sctp_assoc_value in delayed_ack socket option.
[  171.721437][ T8351] Use struct sctp_sack_info instead
[  172.613739][ T8394] netlink: 'syz.3.630': attribute type 21 has an invalid length.
[  172.613920][ T8387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.200888][ T8436] x_tables: duplicate underflow at hook 2
[  174.608204][ T8460] __nla_validate_parse: 9 callbacks suppressed
[  174.608222][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.642'.
[  174.814773][ T8460] bond0: entered promiscuous mode
[  174.819902][ T8460] bond_slave_0: entered promiscuous mode
[  174.832210][ T8460] bond_slave_1: entered promiscuous mode
[  174.839832][ T8460] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  174.852981][ T8460] bond0: left promiscuous mode
[  174.858339][ T8460] bond_slave_0: left promiscuous mode
[  174.864505][ T8460] bond_slave_1: left promiscuous mode
[  175.023513][ T8466] syzkaller1: entered promiscuous mode
[  175.029496][ T8466] syzkaller1: entered allmulticast mode
[  175.156135][ T8478] erspan0: left allmulticast mode
[  175.162058][ T8478] erspan0: left promiscuous mode
[  175.175965][ T8478] bridge0: port 1(erspan0) entered disabled state
[  175.266814][ T8478] bond0: (slave bond_slave_0): Releasing backup interface
[  175.330176][ T8478] bond0: (slave bond_slave_1): Releasing backup interface
[  175.367697][ T8478] team0: Port device team_slave_0 removed
[  175.405230][ T8478] team0: Port device team_slave_1 removed
[  175.447517][ T8478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.480975][ T8478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.506271][ T8478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  175.568852][ T8488] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  175.595283][ T8494] bridge1: entered allmulticast mode
[  175.601150][ T8506] netlink: 156 bytes leftover after parsing attributes in process `syz.3.652'.
[  175.658563][ T8493] bridge2: entered allmulticast mode
[  175.960490][ T8514] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  176.212510][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'.
[  176.449603][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'.
[  176.536372][ T8547] netlink: 'syz.3.661': attribute type 10 has an invalid length.
[  176.546509][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.554397][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.578586][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.585878][ T8547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.589912][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'.
[  176.593508][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.609293][ T8547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.628011][ T8547] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  176.641760][ T8553] bridge_slave_1: left allmulticast mode
[  176.648073][ T8553] bridge_slave_1: left promiscuous mode
[  176.658737][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.677291][ T8553] bridge_slave_0: left allmulticast mode
[  176.685017][ T8553] bridge_slave_0: left promiscuous mode
[  176.693140][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.776598][ T8553] bond0: (slave bridge0): Releasing backup interface
[  177.057372][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.667'.
[  177.088168][ T8575] sch_fq: defrate 0 ignored.
[  177.339816][ T8585] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.348488][ T8585] batadv_slave_0: entered promiscuous mode
[  177.819814][ T8626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'.
[  178.265544][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.687'.
[  178.339613][ T8648] netlink: 88 bytes leftover after parsing attributes in process `syz.4.690'.
[  178.371488][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.690'.
[  178.497897][ T8656] netlink: 'syz.4.692': attribute type 3 has an invalid length.
[  178.525596][ T8656] bridge2: entered allmulticast mode
[  178.673848][ T8664] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) !
[  179.133571][ T8674] bond3: entered promiscuous mode
[  179.138744][ T8674] bond3: entered allmulticast mode
[  179.145053][ T8674] 8021q: adding VLAN 0 to HW filter on device bond3
[  179.312511][ T8674] bond3 (unregistering): Released all slaves
[  179.367327][ T8678] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  179.685009][ T8703] __nla_validate_parse: 5 callbacks suppressed
[  179.685030][ T8703] netlink: 256 bytes leftover after parsing attributes in process `syz.0.701'.
[  179.737144][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.701'.
[  180.006703][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'.
[  180.027780][ T8712] bond0: (slave rose0): Releasing backup interface
[  180.558562][ T8719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.664397][ T8714] tipc: Disabling bearer <eth:syzkaller0>
[  181.217189][ T8746] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  181.675108][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'.
[  181.683506][ T8768] netlink: 'syz.3.720': attribute type 10 has an invalid length.
[  181.694535][ T8768] netlink: 2 bytes leftover after parsing attributes in process `syz.3.720'.
[  181.705598][ T8768] batadv_slave_1: entered promiscuous mode
[  181.712260][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.720728][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.373998][ T8800] sit0: entered promiscuous mode
[  182.393494][ T8800] netlink: 1 bytes leftover after parsing attributes in process `syz.3.729'.
[  182.438733][ T8802] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  182.481128][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.732'.
[  182.563823][ T8817] netlink: 'syz.1.733': attribute type 10 has an invalid length.
[  182.685175][ T8827] netlink: 'syz.0.735': attribute type 5 has an invalid length.
[  182.878019][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'.
[  182.902812][ T8841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'.
[  182.912099][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'.
[  182.986896][ T8841] bond5: entered promiscuous mode
[  182.995786][ T8841] 8021q: adding VLAN 0 to HW filter on device bond5
[  183.013994][   T64] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.069890][   T64] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.119805][   T64] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.197257][   T64] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.245963][ T8852] netlink: 'syz.0.741': attribute type 6 has an invalid length.
[  183.478603][ T8865] syzkaller0: entered promiscuous mode
[  183.496691][ T8865] syzkaller0: entered allmulticast mode
[  183.615593][ T8873] netlink: 'syz.3.748': attribute type 14 has an invalid length.
[  184.750565][ T8924] 8021q: VLANs not supported on lo
[  184.811702][ T8930] sctp: [Deprecated]: syz.4.758 (pid 8930) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.811702][ T8930] Use struct sctp_sack_info instead
[  184.870673][ T5889] IPVS: starting estimator thread 0...
[  184.880841][ T8932] sctp: [Deprecated]: syz.3.760 (pid 8932) Use of int in max_burst socket option.
[  184.880841][ T8932] Use struct sctp_assoc_value instead
[  184.919470][ T8929] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  184.972636][ T8933] IPVS: using max 30 ests per chain, 72000 per kthread
[  185.726162][ T8961] xt_ecn: cannot match TCP bits for non-tcp packets
[  185.762454][ T8961] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  185.785947][ T8965] __nla_validate_parse: 3 callbacks suppressed
[  185.785966][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'.
[  185.897919][ T8966] syzkaller0: entered promiscuous mode
[  185.908192][ T8966] syzkaller0: entered allmulticast mode
[  185.921690][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  185.996829][ T8966] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  186.000122][ T8968] netlink: 100 bytes leftover after parsing attributes in process `syz.1.768'.
[  186.234009][ T8983] sock: sock_set_timeout: `syz.4.771' (pid 8983) tries to set negative timeout
[  186.249933][ T8965] bond6: option ad_select: invalid value (34)
[  186.272400][ T8965] bond6 (unregistering): Released all slaves
[  186.331263][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  186.475809][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'.
[  186.906977][ T9020] netdevsim netdevsim2: Direct firmware load for � failed with error -2
[  186.917651][ T9020] netdevsim netdevsim2: Falling back to sysfs fallback for: �
[  187.185531][ T9042] 8021q: VLANs not supported on ip6gre0
[  187.196443][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'.
[  187.489217][ T9046] nbd: must specify at least one socket
[  188.059726][ T9066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.222673][ T9066] syzkaller0: entered promiscuous mode
[  188.228209][ T9066] syzkaller0: entered allmulticast mode
[  188.271821][ T9075] tipc: Resetting bearer <eth:syzkaller0>
[  188.340496][ T9066] tipc: Resetting bearer <eth:syzkaller0>
[  188.439690][ T9087] netlink: 'syz.1.800': attribute type 30 has an invalid length.
[  188.833533][ T5832] Bluetooth: hci4: command 0x0405 tx timeout
[  188.888244][ T9110] ip6t_srh: unknown srh match flags  4000
[  189.753685][ T9066] tipc: Disabling bearer <eth:syzkaller0>
[  189.768354][ T9083] bridge_slave_0: invalid flags given to default FDB implementation
[  189.804433][ T9101] bridge1: entered promiscuous mode
[  189.835312][ T9113] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  190.267662][ T9138] 8021q: VLANs not supported on ip_vti0
[  190.291166][ T9139] openvswitch: netlink: Flow actions attr not present in new flow.
[  190.571404][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'.
[  191.365396][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'.
[  191.384103][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'.
[  191.479175][ T9173] netlink: 56 bytes leftover after parsing attributes in process `syz.3.823'.
[  191.809453][ T9189] netlink: 'syz.3.828': attribute type 10 has an invalid length.
[  191.861964][ T9193] netlink: 'syz.3.828': attribute type 10 has an invalid length.
[  191.879685][ T9184] bond3: Removing last ns target with arp_interval on
[  191.944441][ T9189] team0: Device dummy0 failed to register rx_handler
[  192.038801][ T9199] netlink: 56 bytes leftover after parsing attributes in process `syz.4.832'.
[  192.227994][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'.
[  192.952994][ T9228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.841'.
[  193.402662][ T9238] Can't find ip_set type hash:ip$mec
[  193.665780][ T9252] bridge3: entered allmulticast mode
[  193.729640][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'.
[  194.044513][ T9275] bridge: RTM_NEWNEIGH with invalid ether address
[  194.058748][ T9277] netlink: 156 bytes leftover after parsing attributes in process `syz.4.855'.
[  194.107786][ T9281] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  194.354573][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.492057][ T9297] FAULT_INJECTION: forcing a failure.
[  194.492057][ T9297] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  194.506288][ T9297] CPU: 0 UID: 0 PID: 9297 Comm: syz.4.861 Not tainted syzkaller #0 PREEMPT(full) 
[  194.506315][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  194.506336][ T9297] Call Trace:
[  194.506344][ T9297]  <TASK>
[  194.506352][ T9297]  dump_stack_lvl+0x189/0x250
[  194.506397][ T9297]  ? __pfx____ratelimit+0x10/0x10
[  194.506428][ T9297]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.506455][ T9297]  ? __pfx__printk+0x10/0x10
[  194.506475][ T9297]  ? __might_fault+0xb0/0x130
[  194.506515][ T9297]  should_fail_ex+0x414/0x560
[  194.506549][ T9297]  _copy_from_user+0x2d/0xb0
[  194.506576][ T9297]  __sys_bpf+0x1e3/0x860
[  194.506599][ T9297]  ? __pfx___sys_bpf+0x10/0x10
[  194.506636][ T9297]  ? ksys_write+0x22a/0x250
[  194.506667][ T9297]  ? __pfx_ksys_write+0x10/0x10
[  194.506702][ T9297]  __x64_sys_bpf+0x7c/0x90
[  194.506732][ T9297]  do_syscall_64+0xfa/0xfa0
[  194.506751][ T9297]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.506770][ T9297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.506790][ T9297]  ? clear_bhb_loop+0x60/0xb0
[  194.506814][ T9297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.506833][ T9297] RIP: 0033:0x7f13eed8f6c9
[  194.506860][ T9297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  194.506876][ T9297] RSP: 002b:00007f13efcbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  194.506904][ T9297] RAX: ffffffffffffffda RBX: 00007f13eefe5fa0 RCX: 00007f13eed8f6c9
[  194.506918][ T9297] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0100000000000000
[  194.506931][ T9297] RBP: 00007f13efcbb090 R08: 0000000000000000 R09: 0000000000000000
[  194.506943][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.506954][ T9297] R13: 00007f13eefe6038 R14: 00007f13eefe5fa0 R15: 00007ffd8f028858
[  194.506991][ T9297]  </TASK>
[  195.154169][ T9311] netlink: 'syz.2.865': attribute type 23 has an invalid length.
[  195.218033][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'.
[  195.305303][ T9315] --map-set only usable from mangle table
[  195.344850][ T9315] netlink: 'syz.0.866': attribute type 2 has an invalid length.
[  195.367809][ T9315] netlink: 'syz.0.866': attribute type 1 has an invalid length.
[  195.667573][ T9318] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  195.786431][ T9317] delete_channel: no stack
[  196.123682][ T9338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.873'.
[  196.145165][ T9340] FAULT_INJECTION: forcing a failure.
[  196.145165][ T9340] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.173112][ T9340] CPU: 1 UID: 0 PID: 9340 Comm: syz.0.874 Not tainted syzkaller #0 PREEMPT(full) 
[  196.173138][ T9340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  196.173150][ T9340] Call Trace:
[  196.173158][ T9340]  <TASK>
[  196.173168][ T9340]  dump_stack_lvl+0x189/0x250
[  196.173201][ T9340]  ? __pfx____ratelimit+0x10/0x10
[  196.173232][ T9340]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.173259][ T9340]  ? __pfx__printk+0x10/0x10
[  196.173294][ T9340]  should_fail_ex+0x414/0x560
[  196.173338][ T9340]  _copy_to_user+0x31/0xb0
[  196.173368][ T9340]  simple_read_from_buffer+0xe1/0x170
[  196.173406][ T9340]  proc_fail_nth_read+0x1b3/0x220
[  196.173437][ T9340]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  196.173467][ T9340]  ? rw_verify_area+0x2a6/0x4d0
[  196.173494][ T9340]  ? __lock_acquire+0xab9/0xd20
[  196.173513][ T9340]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  196.173541][ T9340]  vfs_read+0x200/0xa30
[  196.173568][ T9340]  ? fdget_pos+0x247/0x320
[  196.173593][ T9340]  ? __pfx___mutex_lock+0x10/0x10
[  196.173617][ T9340]  ? __pfx_vfs_read+0x10/0x10
[  196.173647][ T9340]  ? __fget_files+0x2a/0x420
[  196.173671][ T9340]  ? __fget_files+0x3a0/0x420
[  196.173689][ T9340]  ? __fget_files+0x2a/0x420
[  196.173718][ T9340]  ksys_read+0x145/0x250
[  196.173751][ T9340]  ? __pfx_ksys_read+0x10/0x10
[  196.173783][ T9340]  ? do_syscall_64+0xbe/0xfa0
[  196.173808][ T9340]  do_syscall_64+0xfa/0xfa0
[  196.173826][ T9340]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.173846][ T9340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.173866][ T9340]  ? clear_bhb_loop+0x60/0xb0
[  196.173891][ T9340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.173911][ T9340] RIP: 0033:0x7fc77118e0dc
[  196.173929][ T9340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  196.173946][ T9340] RSP: 002b:00007fc771fea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  196.173967][ T9340] RAX: ffffffffffffffda RBX: 00007fc7713e5fa0 RCX: 00007fc77118e0dc
[  196.173982][ T9340] RDX: 000000000000000f RSI: 00007fc771fea0a0 RDI: 0000000000000004
[  196.173993][ T9340] RBP: 00007fc771fea090 R08: 0000000000000000 R09: 0000000000000000
[  196.174006][ T9340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.174017][ T9340] R13: 00007fc7713e6038 R14: 00007fc7713e5fa0 R15: 00007ffc362f6c88
[  196.174053][ T9340]  </TASK>
[  196.440935][ T9344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.461336][ T9342] syzkaller0: entered promiscuous mode
[  196.467150][ T9342] syzkaller0: entered allmulticast mode
[  196.564327][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'.
[  196.626160][ T9342] tipc: Resetting bearer <eth:syzkaller0>
[  196.723478][ T9342] tipc: Disabling bearer <eth:syzkaller0>
[  197.115799][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'.
[  197.350559][ T9369] nbd: must specify a device to reconfigure
[  197.380544][ T9368] netlink: 'syz.2.882': attribute type 1 has an invalid length.
[  197.459550][ T9368] 8021q: adding VLAN 0 to HW filter on device bond6
[  197.493715][ T9369] bond6: (slave geneve3): making interface the new active one
[  197.502881][ T9369] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  198.303494][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'.
[  198.528786][ T9407] team0: Device gtp0 is up. Set it down before adding it as a team port
[  198.811821][ T9428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'.
[  199.202231][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'.
[  199.306844][ T9444] netlink: 'syz.0.898': attribute type 2 has an invalid length.
[  199.320432][ T9444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.898'.
[  199.762862][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'.
[  199.959411][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'.
[  201.124029][ T9471] bridge0: entered allmulticast mode
[  201.351251][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'.
[  201.518040][ T9503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.911'.
[  201.640590][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.911'.
[  201.785504][ T9513] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  201.797568][ T9513] bond3: (slave ip6tnl1): Error -95 calling set_mac_address
[  202.173217][ T9549] x_tables: duplicate underflow at hook 2
[  202.318264][ T9558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.716949][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'.
[  202.911830][ T9589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.929'.
[  203.669792][ T9619] netlink: 'syz.3.936': attribute type 8 has an invalid length.
[  203.691977][ T9619] netlink: 'syz.3.936': attribute type 9 has an invalid length.
[  203.709700][ T9619] netlink: 'syz.3.936': attribute type 10 has an invalid length.
[  203.749562][ T9619] netlink: 'syz.3.936': attribute type 11 has an invalid length.
[  203.781484][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'.
[  203.889513][ T9619] netlink: 40 bytes leftover after parsing attributes in process `syz.3.936'.
[  204.447306][ T9633] vlan2: entered allmulticast mode
[  204.483728][ T9633] bridge_slave_0: entered allmulticast mode
[  204.553954][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'.
[  204.563274][ T9640] netlink: 52 bytes leftover after parsing attributes in process `syz.4.939'.
[  204.578695][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'.
[  204.589126][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'.
[  204.658535][ T9638] netlink: 100 bytes leftover after parsing attributes in process `syz.2.940'.
[  205.217782][ T1120] nci: nci_rsp_packet: unsupported rsp opcode 0xf06
[  205.291573][ T9668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  205.396610][ T9679] syzkaller1: entered promiscuous mode
[  205.420930][ T9679] syzkaller1: entered allmulticast mode
[  206.468827][ T9748] sch_fq: defrate 4294967295 ignored.
[  208.255377][ T9814] __nla_validate_parse: 4 callbacks suppressed
[  208.255396][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'.
[  208.309925][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'.
[  209.213242][ T9854] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1025'.
[  210.284513][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  210.406199][ T9909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'.
[  210.439467][ T9909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1051'.
[  210.481865][ T9909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1051'.
[  210.877341][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'.
[  211.145205][ T9947] netlink: 'syz.1.1068': attribute type 12 has an invalid length.
[  211.792086][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  211.792915][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  211.798391][ T5834] Bluetooth: hci2: command 0x0406 tx timeout
[  212.091552][ T9992] netlink: 'syz.3.1089': attribute type 12 has an invalid length.
[  212.343440][T10006] netlink: 'syz.1.1096': attribute type 1 has an invalid length.
[  212.821646][T10024] netlink: 'syz.4.1104': attribute type 12 has an invalid length.
[  213.654716][T10055] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1118'.
[  213.806426][T10061] netlink: 'syz.1.1121': attribute type 12 has an invalid length.
[  214.317786][T10087] raw_sendmsg: syz.0.1134 forgot to set AF_INET. Fix it!
[  214.409364][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'.
[  214.681476][T10106] tipc: Failed to remove unknown binding: 66,1,1/1126966497:1843166984/1843166986
[  214.718255][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'.
[  214.721724][T10106] tipc: Failed to remove unknown binding: 66,1,1/1126966497:1843166984/1843166986
[  214.753221][T10113] veth0: entered promiscuous mode
[  214.763276][T10113] veth0: left promiscuous mode
[  215.209264][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'.
[  215.815957][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'.
[  215.872723][T10170] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1173'.
[  217.137711][T10217] netlink: 'syz.2.1196': attribute type 10 has an invalid length.
[  217.165274][T10217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.565239][T10231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1202'.
[  217.932673][T10244] xt_bpf: check failed: parse error
[  218.292345][T10258] x_tables: duplicate underflow at hook 3
[  218.872476][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1230'.
[  218.891575][T10290] netlink: 'syz.2.1233': attribute type 1 has an invalid length.
[  218.899611][T10286] netlink: 'syz.3.1230': attribute type 1 has an invalid length.
[  218.954513][T10297] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1231'.
[  218.977822][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1230'.
[  219.015881][T10305] netlink: 'syz.4.1234': attribute type 6 has an invalid length.
[  219.025301][T10305] netlink: 'syz.4.1234': attribute type 7 has an invalid length.
[  219.084480][T10305] netlink: 'syz.4.1234': attribute type 8 has an invalid length.
[  219.128270][T10303] bond3 (unregistering): Released all slaves
[  219.215564][T10312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1236'.
[  219.240457][T10312] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1236'.
[  219.399016][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'.
[  219.414983][T10329] netlink: 'syz.4.1239': attribute type 13 has an invalid length.
[  219.431214][T10329] netlink: 'syz.4.1239': attribute type 17 has an invalid length.
[  219.433335][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'.
[  219.516092][T10329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  219.539015][T10331] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  219.761993][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.953235][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  220.113317][T10398] sctp: [Deprecated]: syz.3.1246 (pid 10398) Use of int in maxseg socket option.
[  220.113317][T10398] Use struct sctp_assoc_value instead
[  220.139203][T10398] sctp: [Deprecated]: syz.3.1246 (pid 10398) Use of int in max_burst socket option.
[  220.139203][T10398] Use struct sctp_assoc_value instead
[  220.287913][T10399] delete_channel: no stack
[  220.302981][T10405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1250'.
[  221.371543][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'.
[  221.435422][T10463] lo: entered promiscuous mode
[  221.445764][T10463] tunl0: entered promiscuous mode
[  221.452054][T10463] gre0: entered promiscuous mode
[  221.468072][T10463] gretap0: entered promiscuous mode
[  221.501314][T10463] erspan0: entered promiscuous mode
[  221.507429][T10463] ip_vti0: entered promiscuous mode
[  221.519355][T10463] ip6_vti0: entered promiscuous mode
[  221.525948][T10463] sit0: entered promiscuous mode
[  221.535229][T10463] ip6tnl0: entered promiscuous mode
[  221.568182][T10463] ip6gre0: entered promiscuous mode
[  221.591118][T10463] ip6gretap0: entered promiscuous mode
[  221.607579][T10463] bond0: entered promiscuous mode
[  221.638216][T10463] team0: entered promiscuous mode
[  221.648510][T10463] dummy0: entered promiscuous mode
[  221.666025][T10463] nlmon0: entered promiscuous mode
[  221.674290][T10463] caif0: entered promiscuous mode
[  221.692651][T10463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.802892][T10471] bond4: option arp_all_targets: invalid value (3)
[  221.843061][T10471] bond4 (unregistering): Released all slaves
[  221.897041][T10487] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  221.926039][T10489] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  221.992894][T10490] gtp0: entered promiscuous mode
[  221.998104][T10490] gtp0: entered allmulticast mode
[  222.078308][T10497] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1276'.
[  222.548540][T10514] team0: Device gtp0 is of different type
[  223.508537][T10561] netlink: 'syz.3.1294': attribute type 3 has an invalid length.
[  223.526216][T10561] netlink: 'syz.3.1294': attribute type 1 has an invalid length.
[  224.468035][T10615] batadv_slave_0: entered promiscuous mode
[  224.530539][T10614] batadv_slave_0: left promiscuous mode
[  225.332504][T10670] __nla_validate_parse: 8 callbacks suppressed
[  225.332524][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'.
[  225.668651][T10679] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1314'.
[  225.684083][T10681] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1315'.
[  226.021365][T10696] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.097707][T10703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1318'.
[  226.313158][T10703] netlink: 'syz.2.1318': attribute type 3 has an invalid length.
[  226.321608][T10715] C: renamed from lo (while UP)
[  226.364692][T10715] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  226.373015][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'.
[  227.069754][T10745] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1329'.
[  227.504415][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'.
[  227.659278][T10767] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1337'.
[  228.013590][T10775] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  228.027201][T10778] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1341'.
[  228.379124][T10800] C: renamed from lo
[  228.394982][T10800] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  228.802809][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'.
[  230.095965][T10857] lo: left promiscuous mode
[  230.364510][T10878] __nla_validate_parse: 2 callbacks suppressed
[  230.364528][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1368'.
[  230.397512][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1368'.
[  231.398328][T10952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'.
[  231.476831][T10955] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  231.687685][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'.
[  231.723011][T10967] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1391'.
[  232.005548][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1396'.
[  232.147332][T10992] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  232.518190][T11006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'.
[  232.689213][T11006] vlan3: entered promiscuous mode
[  232.770394][T11006] bond0: entered promiscuous mode
[  232.775960][T11006] bond_slave_0: entered promiscuous mode
[  232.782533][T11006] bond_slave_1: entered promiscuous mode
[  233.131819][T11023] netlink: 'syz.4.1406': attribute type 1 has an invalid length.
[  233.332501][T11034] team0: Mode changed to "broadcast"
[  233.466686][T11042] netlink: 'syz.0.1411': attribute type 15 has an invalid length.
[  233.569845][T11049] IPv6: sit1: Disabled Multicast RS
[  234.359774][T11056] netlink: 'syz.0.1413': attribute type 4 has an invalid length.
[  234.540593][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'.
[  236.718776][T11081] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1418'.
[  236.769909][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'.
[  236.832949][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1421'.
[  236.879867][T11081] IPVS: Scheduler module ip_vs_sip not found
[  236.996389][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'.
[  237.037145][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1423'.
[  237.059422][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1423'.
[  237.069486][T11098] netlink: 'syz.3.1423': attribute type 6 has an invalid length.
[  237.085958][T11098] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1423'.
[  237.108454][T11102] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  237.202278][T11106] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1426'.
[  237.237182][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'.
[  237.532619][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'.
[  237.771271][T11126] veth1_macvtap: left promiscuous mode
[  237.855103][T11126] veth0_virt_wifi: renamed from macsec0
[  238.284107][T11147] netlink: 'syz.2.1437': attribute type 5 has an invalid length.
[  239.442593][T11199] veth1_vlan: left promiscuous mode
[  239.538405][T11204] Bluetooth: MGMT ver 1.23
[  240.778780][T11260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  240.892635][T11269] caif0: left promiscuous mode
[  241.417120][T11299] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  241.424473][T11299] IPv6: NLM_F_CREATE should be set when creating new route
[  241.431805][T11299] IPv6: NLM_F_CREATE should be set when creating new route
[  241.439050][T11299] IPv6: NLM_F_CREATE should be set when creating new route
[  241.449389][T11295] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.471197][T11295] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.551543][T11295] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.586269][T11295] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.685223][T11295] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.695431][T11295] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.721273][T11317] netlink: 'syz.4.1477': attribute type 4 has an invalid length.
[  241.793910][T11295] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.806929][T11295] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.830436][T11311] netlink: 'syz.0.1476': attribute type 33 has an invalid length.
[  241.838521][T11311] __nla_validate_parse: 7 callbacks suppressed
[  241.838539][T11311] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1476'.
[  241.938659][T10386] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  241.948100][T10386] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.994151][T10386] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  242.006919][T10386] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.041335][T10386] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  242.060357][T10386] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.077421][T10386] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  242.105915][T10386] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.195205][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'.
[  242.419710][T11346] dummy0: default FDB implementation only supports local addresses
[  242.478946][T11312] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  242.493720][T11354] syz_tun: entered allmulticast mode
[  242.503270][T11354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1486'.
[  242.586651][T11357] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1490'.
[  242.597968][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1490'.
[  243.073330][T11386] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1498'.
[  243.258034][T11344] syz_tun: left allmulticast mode
[  243.506131][T11409] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1504'.
[  243.515858][T11409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1504'.
[  243.537306][T11404] tipc: Started in network mode
[  243.542601][T11404] tipc: Node identity 1e8102c962a5, cluster identity 4711
[  243.556334][T11404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.573939][T11404] syzkaller0: entered promiscuous mode
[  243.588425][T11404] syzkaller0: entered allmulticast mode
[  243.663902][T11404] tipc: Resetting bearer <eth:syzkaller0>
[  243.712695][T11410] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.837756][T11404] tipc: Resetting bearer <eth:syzkaller0>
[  243.927699][T11404] tipc: Disabling bearer <eth:syzkaller0>
[  244.459462][T11459] netlink: 'syz.4.1519': attribute type 39 has an invalid length.
[  244.491810][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'.
[  244.548561][T11459] hsr_slave_1 (unregistering): left promiscuous mode
[  244.683262][T11472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  244.987403][T11481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1525'.
[  245.662503][T11497] dummy0: entered promiscuous mode
[  245.675648][T11497] bond0: entered promiscuous mode
[  245.683649][T11497] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  245.696323][T11497] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  245.708465][T11497] hsr1: entered allmulticast mode
[  245.730476][T11497] dummy0: entered allmulticast mode
[  245.736168][T11497] bond0: entered allmulticast mode
[  245.773636][T10386] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.800770][T10386] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.828016][T10386] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.860222][T10386] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.106578][T11527] bridge: RTM_NEWNEIGH with invalid ether address
[  246.231124][T11530] netlink: 'syz.3.1536': attribute type 4 has an invalid length.
[  246.529393][T11546] netlink: 'syz.3.1542': attribute type 30 has an invalid length.
[  247.025255][T11568] bridge_slave_1: entered promiscuous mode
[  247.056000][T11573] __nla_validate_parse: 4 callbacks suppressed
[  247.056021][T11573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1552'.
[  247.282191][T11581] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  247.297444][T11581] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  247.646560][T11599] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  248.863089][T11611] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1560'.
[  248.882817][T11611] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1560'.
[  248.915443][T11611] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  249.183749][T11629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1564'.
[  249.956287][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'.
[  250.355960][T11676] batman_adv: batadv0: Adding interface: vlan3
[  250.366287][T11676] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  250.392271][T11676] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  250.827887][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'.
[  250.904323][T11694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.928151][T11694] syzkaller0: entered promiscuous mode
[  250.935433][T11694] syzkaller0: entered allmulticast mode
[  251.031156][T11700] tipc: Resetting bearer <eth:syzkaller0>
[  251.084916][ T5924] hid-generic 0005:16C0:0200.0002: item fetching failed at offset 0/1
[  251.108402][ T5924] hid-generic 0005:16C0:0200.0002: probe with driver hid-generic failed with error -22
[  251.135730][T11705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.140419][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'.
[  251.213105][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'.
[  251.246262][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  251.247340][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'.
[  251.256686][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  251.272714][ T5924] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  251.388157][T11721] netlink: 'syz.2.1587': attribute type 2 has an invalid length.
[  251.426332][T11721] : entered promiscuous mode
[  251.445224][T11721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1587'.
[  251.620182][ T5924] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  251.737383][T11693] tipc: Resetting bearer <eth:syzkaller0>
[  251.799529][T11693] tipc: Disabling bearer <eth:syzkaller0>
[  252.102872][T11750] __nla_validate_parse: 2 callbacks suppressed
[  252.102891][T11750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1593'.
[  252.231115][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'.
[  252.265217][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'.
[  252.274628][ T5916] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  252.286074][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'.
[  252.326703][T11758] bridge0 (unregistering): left allmulticast mode
[  252.426368][T11762] vlan3: entered promiscuous mode
[  252.470654][T11754] netlink: 'syz.1.1595': attribute type 14 has an invalid length.
[  252.490607][T11766] netlink: 'syz.0.1597': attribute type 2 has an invalid length.
[  252.663335][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'.
[  252.690749][T11778] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  252.733422][T11784] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1602'.
[  252.753384][T11784] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1602'.
[  253.473352][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1613'.
[  253.492925][T11832] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1614'.
[  253.510138][T11830] netlink: 'syz.4.1613': attribute type 1 has an invalid length.
[  253.535335][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'.
[  253.690597][ T5829] Bluetooth: hci4: link tx timeout
[  253.697173][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  253.709153][ T5832] Bluetooth: hci4: link tx timeout
[  253.717120][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  254.246976][T11869] hsr_slave_0: left promiscuous mode
[  254.262737][T11869] hsr_slave_1: left promiscuous mode
[  254.351097][T11876] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  254.431107][T11878] syzkaller0: entered promiscuous mode
[  254.450415][T11878] syzkaller0: entered allmulticast mode
[  255.283403][T11919] netlink: 'syz.0.1633': attribute type 1 has an invalid length.
[  255.301503][T11905] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  255.311525][T11919] netlink: 'syz.0.1633': attribute type 2 has an invalid length.
[  255.320153][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  255.323819][T11905] bond1 (unregistering): Released all slaves
[  255.723312][T11943] bridge0: entered allmulticast mode
[  255.780281][T11941] syzkaller0: entered promiscuous mode
[  255.795704][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  255.802079][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  255.808203][T11941] syzkaller0: entered allmulticast mode
[  256.402394][T11971] netlink: 'syz.3.1648': attribute type 15 has an invalid length.
[  256.472050][T11973] netlink: 'syz.4.1649': attribute type 8 has an invalid length.
[  256.691909][T11987] netlink: 'syz.2.1651': attribute type 13 has an invalid length.
[  256.770882][ T3098] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  256.875754][T11984] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  256.885479][T11984] syzkaller0: entered promiscuous mode
[  256.891149][T11984] syzkaller0: entered allmulticast mode
[  257.102074][ T3098] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  257.394329][T12012] __nla_validate_parse: 24 callbacks suppressed
[  257.394357][T12012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1656'.
[  257.564240][T12022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1658'.
[  257.608276][T12024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.756296][T12033] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  257.864632][T12041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1660'.
[  258.201567][T12065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1669'.
[  258.251138][T12068] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1670'.
[  258.387198][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'.
[  258.764632][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'.
[  258.774686][T12093] veth0: entered promiscuous mode
[  258.802531][T12096] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1676'.
[  259.154805][T12105] gtp0: entered promiscuous mode
[  259.191460][T12092] veth0: left promiscuous mode
[  259.480971][T12122] x_tables: duplicate underflow at hook 3
[  259.598594][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1685'.
[  259.773948][T12135] bond0: (slave bond_slave_0): Releasing backup interface
[  259.803812][T12135] bond_slave_0: left promiscuous mode
[  259.825396][T12135] bond0: (slave bond_slave_1): Releasing backup interface
[  259.829723][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'.
[  259.845993][T12135] bond_slave_1: left promiscuous mode
[  259.873559][T12135] team0: Port device team_slave_0 removed
[  259.892460][T12135] team0: Port device team_slave_1 removed
[  259.906092][T12135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.914274][T12135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.925300][T12135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  259.967181][T12141] team0: Mode changed to "activebackup"
[  260.688671][T12161] netlink: 'syz.1.1694': attribute type 9 has an invalid length.
[  260.777169][T12163] netlink: 'syz.0.1695': attribute type 9 has an invalid length.
[  260.875709][T12172] Cannot find add_set index 4 as target
[  261.576448][T12207] sctp: [Deprecated]: syz.1.1705 (pid 12207) Use of int in max_burst socket option.
[  261.576448][T12207] Use struct sctp_assoc_value instead
[  261.818089][T12213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.854954][T12213] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  261.886953][T12219] ip6_vti0: left promiscuous mode
[  261.891999][T12215] netlink: 'syz.0.1709': attribute type 4 has an invalid length.
[  261.902625][T12222] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0
[  261.978664][T12213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.989811][T12213] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  262.117453][T12213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.128514][T12213] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  262.222268][T12213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.240165][T12213] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  262.387836][T12237] tunl0: left promiscuous mode
[  262.399058][T12237] gre0: left promiscuous mode
[  262.407984][T12237] gretap0: left promiscuous mode
[  262.413268][T12237] erspan0: left promiscuous mode
[  262.418615][T12237] ip_vti0: left promiscuous mode
[  262.433254][T12237] sit0: left promiscuous mode
[  262.444135][T12237] ip6tnl0: left promiscuous mode
[  262.449438][T12237] ip6gre0: left promiscuous mode
[  262.455201][T12237] ip6gretap0: left promiscuous mode
[  262.460900][T12237] team0: left promiscuous mode
[  262.466247][T12237] dummy0: left promiscuous mode
[  262.471598][T12237] nlmon0: left promiscuous mode
[  262.487120][T12237] bond1: left promiscuous mode
[  262.492335][T12237] bond1: left allmulticast mode
[  262.504750][T12237] bond2: left promiscuous mode
[  262.516719][T12237] bridge1: left promiscuous mode
[  262.539306][T12241] netlink: 'syz.0.1716': attribute type 1 has an invalid length.
[  262.552919][T12237] gtp0: left promiscuous mode
[  262.555819][T12241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  262.660272][ T1120] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  262.675898][ T1120] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  262.733458][ T1120] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  262.747508][ T1120] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  262.825340][T10373] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  262.841529][T10373] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  262.865623][T12252] __nla_validate_parse: 14 callbacks suppressed
[  262.865642][T12252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1718'.
[  262.904374][T10375] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  262.919614][T10375] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  263.029812][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1718'.
[  263.044756][T12253] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1718'.
[  263.442796][T12271] netlink: 'syz.1.1724': attribute type 1 has an invalid length.
[  263.451364][T12271] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1724'.
[  263.647836][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'.
[  263.688291][T12273] netlink: 'syz.1.1726': attribute type 3 has an invalid length.
[  263.782650][T12285] Bluetooth: MGMT ver 1.23
[  263.956612][T12294] 8021q: adding VLAN 0 to HW filter on device bond1
[  264.025178][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'.
[  264.060678][T12297] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  264.319176][T12313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1733'.
[  264.573341][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1733'.
[  264.635595][T12314] nbd: device at index 64 is going down
[  264.891846][ T6572] udevd[6572]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  265.407123][   T30] audit: type=1107 audit(1763325788.940:3): pid=12358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  265.682897][T12376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'.
[  265.794970][T12356] netlink: 'syz.3.1743': attribute type 6 has an invalid length.
[  265.845109][T12368] netlink: 'syz.3.1743': attribute type 6 has an invalid length.
[  265.876935][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  265.883640][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  266.028882][T12394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.037695][T12394] syzkaller0: entered promiscuous mode
[  266.043761][T12394] syzkaller0: entered allmulticast mode
[  266.151042][T12395] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1752'.
[  266.240898][T12394] tipc: Resetting bearer <eth:syzkaller0>
[  266.309319][T12393] tipc: Resetting bearer <eth:syzkaller0>
[  266.368561][T12393] tipc: Disabling bearer <eth:syzkaller0>
[  266.811220][T12425] netlink: 'syz.1.1761': attribute type 3 has an invalid length.
[  267.072931][T12425] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  267.095291][T12425] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  267.477630][T12449] netdevsim netdevsim0: Direct firmware load for � failed with error -2
[  267.514993][T12449] netdevsim netdevsim0: Falling back to sysfs fallback for: �
[  267.522947][T12450] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  268.047887][T12464] netlink: 'syz.2.1770': attribute type 15 has an invalid length.
[  268.065914][T12464] __nla_validate_parse: 1 callbacks suppressed
[  268.065933][T12464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1770'.
[  268.502279][T12479] bond8 (unregistering): Released all slaves
[  268.805297][T12501] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1780'.
[  268.814806][T12501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1780'.
[  269.298228][T12517] sch_fq: defrate 4294967293 ignored.
[  269.554067][T12526] netlink: 'syz.4.1788': attribute type 10 has an invalid length.
[  269.623480][T12526] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  269.802379][T12543] veth0_macvtap: entered allmulticast mode
[  269.885730][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'.
[  270.017879][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'.
[  270.438122][T12573] dvmrp0: entered allmulticast mode
[  270.752016][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  270.842975][T12583] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1802'.
[  270.853403][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'.
[  270.897405][T12586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1804'.
[  270.940992][T12587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1804'.
[  271.990824][T12628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1813'.
[  272.359076][T12637] netlink: 'syz.2.1815': attribute type 1 has an invalid length.
[  272.512062][T12651] dvmrp12: entered allmulticast mode
[  272.547134][T12652] gretap2: entered allmulticast mode
[  272.559768][T12652] bond8: (slave gretap2): making interface the new active one
[  272.576552][T12652] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  272.589887][T12648] dvmrp12: left allmulticast mode
[  272.986433][T12663] vlan5: entered allmulticast mode
[  272.992072][T12663] bridge0: entered allmulticast mode
[  272.997984][T12663] bridge2: port 1(vlan5) entered blocking state
[  273.006250][T12663] bridge2: port 1(vlan5) entered disabled state
[  273.015702][T12663] vlan5: entered promiscuous mode
[  273.021183][T12663] bridge0: entered promiscuous mode
[  273.256536][T12679] xt_ecn: cannot match TCP bits for non-tcp packets
[  274.446930][T12682] __nla_validate_parse: 3 callbacks suppressed
[  274.446949][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  274.501605][T12684] IPVS: stopping backup sync thread 12222 ...
[  274.573104][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  275.349286][T10356] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  275.383054][T10356] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  275.421282][T10356] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  275.429800][T10356] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  275.507684][T10356] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  275.531925][T10356] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  275.570045][T10356] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  275.587207][T10356] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  275.602210][T12726] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1832'.
[  275.648521][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1833'.
[  275.749807][T12727] batadv0: entered allmulticast mode
[  275.823707][T12735] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.905453][T12740] syzkaller0: entered promiscuous mode
[  275.911940][T12740] syzkaller0: entered allmulticast mode
[  276.066844][T12731] tipc: Resetting bearer <eth:syzkaller0>
[  276.114243][T12731] tipc: Disabling bearer <eth:syzkaller0>
[  276.380662][T12768] netlink: 'syz.3.1844': attribute type 16 has an invalid length.
[  276.388687][T12768] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1844'.
[  276.539215][T12778] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1845'.
[  277.091969][T12800] xt_CT: No such helper "snmp"
[  277.186945][T12807] netlink: 'syz.0.1852': attribute type 16 has an invalid length.
[  277.199069][T12807] netlink: 'syz.0.1852': attribute type 17 has an invalid length.
[  277.324809][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'.
[  277.410394][T12818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1854'.
[  277.649590][T10383] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.672626][T10383] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.695556][T12823] bond0: entered promiscuous mode
[  277.702437][T12823] batadv0: entered promiscuous mode
[  277.708671][T12823] debugfs: 'hsr1' already exists in 'hsr'
[  277.715029][T12823] Cannot create hsr debugfs directory
[  277.723099][T12823] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  277.733885][T12823] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  277.745887][T12823] 8021q: adding VLAN 0 to HW filter on device hsr1
[  277.754518][T12823] bond0: left promiscuous mode
[  277.760849][T12823] batadv0: left promiscuous mode
[  277.819615][T10383] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  277.831384][T10383] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.140551][T12838] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1860'.
[  278.436646][T12862] netlink: 'syz.1.1865': attribute type 5 has an invalid length.
[  278.577361][T12860] 8021q: adding VLAN 0 to HW filter on device bond4
[  279.031456][T12897] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1873'.
[  279.503261][T12923] Cannot find del_set index 1 as target
[  279.537148][T12924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1881'.
[  279.591669][T12929] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1881'.
[  279.657540][T12932] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1884'.
[  279.666725][T12932] nbd: illegal input index 65508
[  280.092022][T12945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.098961][T12940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1884'.
[  280.119516][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1884'.
[  280.150276][T12939] team0: Caught tx_queue_len zero misconfig
[  280.206856][T12945] tipc: Disabling bearer <eth:syzkaller0>
[  280.257990][T12956] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1888'.
[  280.658257][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1893'.
[  280.972362][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1898'.
[  281.010763][T13005] syzkaller0: entered promiscuous mode
[  281.016496][T13005] syzkaller0: entered allmulticast mode
[  281.513947][T13034] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1904'.
[  281.616118][T13042] veth1_to_bond: entered allmulticast mode
[  281.899186][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'.
[  283.106484][T13036] veth1_to_bond: left allmulticast mode
[  283.113129][T13047] hsr0: entered allmulticast mode
[  283.118231][T13047] hsr_slave_0: entered allmulticast mode
[  283.124822][T13047] hsr_slave_1: entered allmulticast mode
[  283.142344][T13051] hsr_slave_0: left promiscuous mode
[  283.148818][T13051] hsr_slave_1: left promiscuous mode
[  283.182599][T13051] hsr0 (unregistering): left allmulticast mode
[  283.915768][T13099] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  284.018141][T13106] siw: device registration error -23
[  284.046039][T13105] bond2: (slave ip6gretap1): Releasing active interface
[  284.135594][T13105] bond6: (slave geneve3): Releasing active interface
[  284.201093][T13105] batman_adv: batadv0: Removing interface: vlan3
[  284.246351][T13105] bond8: (slave gretap2): Releasing active interface
[  284.707888][ T5198] udevd[5198]: worker [6572] terminated by signal 33 (Unknown signal 33)
[  284.740553][ T5198] udevd[5198]: worker [6572] failed while handling '/devices/virtual/block/loop2'
[  284.781313][T13130] __nla_validate_parse: 7 callbacks suppressed
[  284.781333][T13130] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1930'.
[  285.032631][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1931'.
[  285.110517][T13145] FAULT_INJECTION: forcing a failure.
[  285.110517][T13145] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  285.136972][T13145] CPU: 0 UID: 0 PID: 13145 Comm: syz.2.1933 Not tainted syzkaller #0 PREEMPT(full) 
[  285.136997][T13145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  285.137007][T13145] Call Trace:
[  285.137014][T13145]  <TASK>
[  285.137025][T13145]  dump_stack_lvl+0x189/0x250
[  285.137053][T13145]  ? __pfx____ratelimit+0x10/0x10
[  285.137081][T13145]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.137103][T13145]  ? __pfx__printk+0x10/0x10
[  285.137119][T13145]  ? __might_fault+0xb0/0x130
[  285.137151][T13145]  should_fail_ex+0x414/0x560
[  285.137182][T13145]  _copy_from_user+0x2d/0xb0
[  285.137203][T13145]  ___sys_sendmsg+0x158/0x2a0
[  285.137226][T13145]  ? __pfx____sys_sendmsg+0x10/0x10
[  285.137296][T13145]  ? __fget_files+0x2a/0x420
[  285.137314][T13145]  ? __fget_files+0x3a0/0x420
[  285.137341][T13145]  __x64_sys_sendmsg+0x19b/0x260
[  285.137362][T13145]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  285.137391][T13145]  ? __pfx_ksys_write+0x10/0x10
[  285.137418][T13145]  ? do_syscall_64+0xbe/0xfa0
[  285.137437][T13145]  do_syscall_64+0xfa/0xfa0
[  285.137452][T13145]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.137470][T13145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.137489][T13145]  ? clear_bhb_loop+0x60/0xb0
[  285.137508][T13145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.137525][T13145] RIP: 0033:0x7f513b18f6c9
[  285.137542][T13145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.137558][T13145] RSP: 002b:00007f513bfc1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  285.137575][T13145] RAX: ffffffffffffffda RBX: 00007f513b3e5fa0 RCX: 00007f513b18f6c9
[  285.137589][T13145] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  285.137600][T13145] RBP: 00007f513bfc1090 R08: 0000000000000000 R09: 0000000000000000
[  285.137610][T13145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.137621][T13145] R13: 00007f513b3e6038 R14: 00007f513b3e5fa0 R15: 00007ffc7eedb188
[  285.137653][T13145]  </TASK>
[  285.361415][T13139] svc: failed to register nfsdv3 RPC service (errno 111).
[  285.402013][T13139] svc: failed to register nfsaclv3 RPC service (errno 111).
[  285.902604][T13166] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1941'.
[  285.938833][T13168] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  285.958547][T13168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1942'.
[  286.106666][T13165] bond9: option tlb_dynamic_lb: invalid value (5)
[  286.125861][T13165] bond9 (unregistering): Released all slaves
[  286.348330][T13176] FAULT_INJECTION: forcing a failure.
[  286.348330][T13176] name failslab, interval 1, probability 0, space 0, times 1
[  286.376578][T13176] CPU: 1 UID: 0 PID: 13176 Comm: syz.0.1944 Not tainted syzkaller #0 PREEMPT(full) 
[  286.376614][T13176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  286.376626][T13176] Call Trace:
[  286.376634][T13176]  <TASK>
[  286.376643][T13176]  dump_stack_lvl+0x189/0x250
[  286.376676][T13176]  ? __pfx____ratelimit+0x10/0x10
[  286.376707][T13176]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.376735][T13176]  ? __pfx__printk+0x10/0x10
[  286.376762][T13176]  ? __pfx___might_resched+0x10/0x10
[  286.376784][T13176]  ? fs_reclaim_acquire+0x7d/0x100
[  286.376807][T13176]  should_fail_ex+0x414/0x560
[  286.376842][T13176]  should_failslab+0xa8/0x100
[  286.376865][T13176]  kmem_cache_alloc_node_noprof+0x77/0x710
[  286.376892][T13176]  ? __alloc_skb+0x112/0x2d0
[  286.376909][T13176]  ? netlink_autobind+0xdb/0x300
[  286.376936][T13176]  __alloc_skb+0x112/0x2d0
[  286.376959][T13176]  netlink_sendmsg+0x5c6/0xb30
[  286.376991][T13176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.377017][T13176]  ? aa_sock_msg_perm+0xf1/0x1d0
[  286.377049][T13176]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  286.377066][T13176]  ? __pfx_netlink_sendmsg+0x10/0x10
[  286.377088][T13176]  __sock_sendmsg+0x21c/0x270
[  286.377119][T13176]  ____sys_sendmsg+0x505/0x830
[  286.377148][T13176]  ? __pfx_____sys_sendmsg+0x10/0x10
[  286.377181][T13176]  ? import_iovec+0x74/0xa0
[  286.377209][T13176]  ___sys_sendmsg+0x21f/0x2a0
[  286.377235][T13176]  ? __pfx____sys_sendmsg+0x10/0x10
[  286.377296][T13176]  ? __fget_files+0x2a/0x420
[  286.377315][T13176]  ? __fget_files+0x3a0/0x420
[  286.377344][T13176]  __x64_sys_sendmsg+0x19b/0x260
[  286.377370][T13176]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  286.377403][T13176]  ? __pfx_ksys_write+0x10/0x10
[  286.377451][T13176]  ? do_syscall_64+0xbe/0xfa0
[  286.377473][T13176]  do_syscall_64+0xfa/0xfa0
[  286.377491][T13176]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.377512][T13176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.377533][T13176]  ? clear_bhb_loop+0x60/0xb0
[  286.377558][T13176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.377577][T13176] RIP: 0033:0x7fc77118f6c9
[  286.377596][T13176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.377621][T13176] RSP: 002b:00007fc771fea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  286.377643][T13176] RAX: ffffffffffffffda RBX: 00007fc7713e5fa0 RCX: 00007fc77118f6c9
[  286.377659][T13176] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  286.377672][T13176] RBP: 00007fc771fea090 R08: 0000000000000000 R09: 0000000000000000
[  286.377685][T13176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  286.377697][T13176] R13: 00007fc7713e6038 R14: 00007fc7713e5fa0 R15: 00007ffc362f6c88
[  286.377732][T13176]  </TASK>
[  286.710481][T13193] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1946'.
[  287.443831][T13221] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1953'.
[  287.614021][T13235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1958'.
[  287.997586][T13253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1962'.
[  288.031914][T13258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1962'.
[  288.098735][T13260] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .���	���΁����*���]���������
[  288.223445][T13256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1963'.
[  288.546899][T13282] bond0: Caught tx_queue_len zero misconfig
[  288.942336][T13295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  289.563451][T13311] netlink: 'syz.4.1978': attribute type 12 has an invalid length.
[  289.604385][T13311] bond0: option primary_reselect: invalid value (8)
[  289.872563][T13322] __nla_validate_parse: 13 callbacks suppressed
[  289.872582][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'.
[  290.578896][T13345] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1986'.
[  290.590700][T13346] netlink: 'syz.2.1987': attribute type 1 has an invalid length.
[  290.627153][T13346] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1987'.
[  290.655697][T13351] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0
[  290.676201][T13351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.876404][T13369] netlink: 'syz.0.1992': attribute type 4 has an invalid length.
[  291.047232][T13380] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1994'.
[  291.075957][T13380] 8021q: VLANs not supported on ip_vti0
[  291.088304][T13384] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1994'.
[  291.099062][T13384] 8021q: VLANs not supported on ip_vti0
[  291.434134][T13401] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  291.464138][T13401] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  291.491679][T13401] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  291.688051][T13413] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2000'.
[  291.936376][T13424] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2003'.
[  292.041223][T13424] macvtap1: entered promiscuous mode
[  292.068063][T13424] batadv0: entered promiscuous mode
[  292.100544][T13424] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  292.127493][T13424] batadv0: left promiscuous mode
[  292.596159][T13458] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2009'.
[  292.613074][T13458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  292.901205][T13477] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2015'.
[  292.966227][T13481] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  293.090976][T13485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.119026][T13485] syzkaller0: entered promiscuous mode
[  293.125409][T13485] syzkaller0: entered allmulticast mode
[  293.149010][T13485] tipc: Resetting bearer <eth:syzkaller0>
[  293.159753][T13484] tipc: Resetting bearer <eth:syzkaller0>
[  293.216245][T13484] tipc: Disabling bearer <eth:syzkaller0>
[  293.241205][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2019'.
[  293.533136][T13511] netlink: 'syz.0.2025': attribute type 2 has an invalid length.
[  293.608060][T13511] !: entered promiscuous mode
[  293.750330][T13520] dvmrp0: entered allmulticast mode
[  293.925224][T13527] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  294.888565][T13574] nbd: must specify at least one socket
[  295.100000][T13586] __nla_validate_parse: 6 callbacks suppressed
[  295.100019][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'.
[  295.166406][T13585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2042'.
[  295.388629][T13602] syzkaller0: entered promiscuous mode
[  295.411112][T13603] netlink: 'syz.4.2044': attribute type 23 has an invalid length.
[  295.417173][T13602] syzkaller0: entered allmulticast mode
[  295.460856][T13605] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2046'.
[  295.585636][T13613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2048'.
[  295.646968][T13613] syzkaller0: entered promiscuous mode
[  295.652977][T13613] syzkaller0: entered allmulticast mode
[  296.255937][T13657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2059'.
[  296.300871][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2062'.
[  296.324658][T13667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2063'.
[  296.357116][T13664] 8021q: adding VLAN 0 to HW filter on device bond9
[  296.500795][T13681] netlink: 508 bytes leftover after parsing attributes in process `syz.4.2066'.
[  296.631193][T13664] bond9 (unregistering): Released all slaves
[  296.795805][T13692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'.
[  296.930510][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'.
[  296.964820][T13699] team1: entered promiscuous mode
[  296.970298][T13699] team1: entered allmulticast mode
[  297.071500][T13701] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002
[  297.303581][T13707] netlink: 'syz.4.2071': attribute type 11 has an invalid length.
[  297.315832][T13707] netlink: 'syz.4.2071': attribute type 11 has an invalid length.
[  297.587666][T13703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.514733][T13773] netlink: 'syz.1.2087': attribute type 23 has an invalid length.
[  299.166877][T13797] netlink: 'syz.4.2095': attribute type 1 has an invalid length.
[  299.215944][T13797] 8021q: adding VLAN 0 to HW filter on device bond5
[  299.259343][T13797] bond0: (slave dummy0): Releasing backup interface
[  299.289450][T13797] bond5: (slave dummy0): making interface the new active one
[  299.308424][T13797] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  299.321224][T13807] netlink: 'syz.0.2097': attribute type 1 has an invalid length.
[  299.361414][T13807] 8021q: adding VLAN 0 to HW filter on device bond2
[  299.584019][T13817] netlink: 'syz.4.2102': attribute type 1 has an invalid length.
[  299.668069][T13817] 8021q: adding VLAN 0 to HW filter on device bond6
[  299.748031][T13821] bond6: (slave geneve2): making interface the new active one
[  299.757484][T13821] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  299.786481][T13817] bond6: entered promiscuous mode
[  299.811131][T13817] geneve2: entered promiscuous mode
[  299.812235][T13828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  299.908823][T13831] pimreg: entered allmulticast mode
[  299.981754][ T5916] IPVS: starting estimator thread 0...
[  300.073673][T13841] IPVS: using max 27 ests per chain, 64800 per kthread
[  300.203006][T13849] __nla_validate_parse: 15 callbacks suppressed
[  300.203026][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2109'.
[  300.241230][T13852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2111'.
[  300.247393][T13849] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2109'.
[  300.515839][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'.
[  300.562206][T13866] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2114'.
[  300.585134][T13855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  300.595921][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'.
[  301.476674][T13906] netlink: 'syz.2.2125': attribute type 10 has an invalid length.
[  301.655319][T13917] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2128'.
[  301.668486][T13917] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2128'.
[  301.701104][T13886] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  301.799869][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'.
[  301.837401][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2131'.
[  302.002581][T13929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.031637][T13929] syzkaller0: entered promiscuous mode
[  302.037375][T13929] syzkaller0: entered allmulticast mode
[  302.050161][T13929] tipc: Resetting bearer <eth:syzkaller0>
[  302.077236][T13929] tipc: Disabling bearer <eth:syzkaller0>
[  303.099539][T13982] Cannot find add_set index 0 as target
[  305.512555][T14032] netlink: 'syz.0.2156': attribute type 13 has an invalid length.
[  305.616410][T14042] __nla_validate_parse: 11 callbacks suppressed
[  305.616427][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2158'.
[  305.712013][T14040] bridge0: entered promiscuous mode
[  305.845308][T14048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2159'.
[  306.000253][T14054] netlink: 'syz.0.2163': attribute type 1 has an invalid length.
[  306.155541][T14060] netlink: 'syz.3.2166': attribute type 2 has an invalid length.
[  306.176104][T14060] !: entered promiscuous mode
[  306.255046][T14065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2165'.
[  306.266074][T14065] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2165'.
[  306.280896][T14068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2168'.
[  306.330073][T14068] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  306.705366][T14076] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2170'.
[  306.715295][T14076] openvswitch: netlink: Missing key (keys=40, expected=100)
[  306.775015][T14076] netlink: 'syz.0.2170': attribute type 4 has an invalid length.
[  306.795605][T14076] netlink: 'syz.0.2170': attribute type 4 has an invalid length.
[  307.076166][T14087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2172'.
[  307.246035][T14100] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2174'.
[  307.440412][T14105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2176'.
[  307.569672][T14111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.611608][T14112] netlink: 'syz.0.2179': attribute type 1 has an invalid length.
[  307.816015][T14112] 8021q: adding VLAN 0 to HW filter on device bond3
[  307.854247][T14113] bond3: (slave veth9): Enslaving as an active interface with a down link
[  307.865523][T14125] netlink: 'syz.4.2182': attribute type 2 has an invalid length.
[  307.913757][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'.
[  308.406346][T14145] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  309.473720][T14199] netlink: 'syz.3.2203': attribute type 29 has an invalid length.
[  309.488489][T14201] netlink: 'syz.2.2204': attribute type 1 has an invalid length.
[  309.496490][T14199] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  309.843561][T14218] 8021q: adding VLAN 0 to HW filter on device bond7
[  310.093634][T14248] netlink: 'syz.2.2213': attribute type 27 has an invalid length.
[  310.173552][T14248] ip6gretap1: left allmulticast mode
[  310.258827][T14248] geneve2: left promiscuous mode
[  310.297548][T14248] bond5: left promiscuous mode
[  310.305992][T14248] gtp0: left promiscuous mode
[  310.319145][T14248] gtp0: left allmulticast mode
[  310.326413][T14248] gretap2: left allmulticast mode
[  310.452085][T14253] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.462364][T14253] 8021q: adding VLAN 0 to HW filter on device team0
[  310.475986][T12714] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  310.484796][T14253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.571561][T14270] netlink: 'syz.4.2217': attribute type 1 has an invalid length.
[  310.732761][T14276] batadv1: entered promiscuous mode
[  310.739358][T14266] syz.0.2216: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  310.758674][T14266] CPU: 0 UID: 0 PID: 14266 Comm: syz.0.2216 Not tainted syzkaller #0 PREEMPT(full) 
[  310.758701][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  310.758725][T14266] Call Trace:
[  310.758733][T14266]  <TASK>
[  310.758741][T14266]  dump_stack_lvl+0x189/0x250
[  310.758778][T14266]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.758805][T14266]  ? __pfx__printk+0x10/0x10
[  310.758825][T14266]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  310.758852][T14266]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  310.758882][T14266]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  310.758914][T14266]  warn_alloc+0x214/0x310
[  310.758952][T14266]  ? __pfx_warn_alloc+0x10/0x10
[  310.758993][T14266]  ? __get_vm_area_node+0x28f/0x300
[  310.759023][T14266]  ? xskq_create+0xbf/0x170
[  310.759057][T14266]  __vmalloc_node_range_noprof+0x690/0x12d0
[  310.759120][T14266]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  310.759154][T14266]  ? __kasan_kmalloc+0x93/0xb0
[  310.759176][T14266]  vmalloc_user_noprof+0xad/0xf0
[  310.759201][T14266]  ? xskq_create+0xbf/0x170
[  310.759226][T14266]  xskq_create+0xbf/0x170
[  310.759255][T14266]  xsk_init_queue+0xb0/0x110
[  310.759286][T14266]  xsk_setsockopt+0x57b/0x8d0
[  310.759316][T14266]  ? __pfx_xsk_setsockopt+0x10/0x10
[  310.759349][T14266]  ? __pfx_aa_sk_perm+0x10/0x10
[  310.759380][T14266]  ? aa_sock_opt_perm+0xff/0x1b0
[  310.759412][T14266]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  310.759432][T14266]  ? __pfx_xsk_setsockopt+0x10/0x10
[  310.759463][T14266]  do_sock_setsockopt+0x17c/0x1b0
[  310.759492][T14266]  __x64_sys_setsockopt+0x13f/0x1b0
[  310.759521][T14266]  do_syscall_64+0xfa/0xfa0
[  310.759541][T14266]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.759561][T14266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.759582][T14266]  ? clear_bhb_loop+0x60/0xb0
[  310.759608][T14266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.759634][T14266] RIP: 0033:0x7fc77118f6c9
[  310.759654][T14266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.759672][T14266] RSP: 002b:00007fc771fa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  310.759694][T14266] RAX: ffffffffffffffda RBX: 00007fc7713e6180 RCX: 00007fc77118f6c9
[  310.759709][T14266] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009
[  310.759722][T14266] RBP: 00007fc771211f91 R08: 0000000000000004 R09: 0000000000000000
[  310.759734][T14266] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  310.759748][T14266] R13: 00007fc7713e6218 R14: 00007fc7713e6180 R15: 00007ffc362f6c88
[  310.759784][T14266]  </TASK>
[  310.759800][T14266] Mem-Info:
[  311.031880][T10363] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  311.050771][T14266] active_anon:3890 inactive_anon:0 isolated_anon:0
[  311.050771][T14266]  active_file:3270 inactive_file:39972 isolated_file:0
[  311.050771][T14266]  unevictable:768 dirty:80 writeback:0
[  311.050771][T14266]  slab_reclaimable:12132 slab_unreclaimable:159397
[  311.050771][T14266]  mapped:30057 shmem:1354 pagetables:1052
[  311.050771][T14266]  sec_pagetables:0 bounce:0
[  311.050771][T14266]  kernel_misc_reclaimable:0
[  311.050771][T14266]  free:1265571 free_pcp:14777 free_cma:0
[  311.098682][T12714] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  311.124728][T14287] __nla_validate_parse: 17 callbacks suppressed
[  311.124749][T14287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2224'.
[  311.175030][T14266] Node 0 active_anon:15660kB inactive_anon:0kB active_file:13080kB inactive_file:159684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120328kB dirty:316kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13932kB pagetables:3772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  311.255214][T14266] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  311.358032][T14266] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  311.391428][T14300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'.
[  311.401214][T14266] lowmem_reserve[]: 0 2504 2505 2505 2505
[  311.420101][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2225'.
[  311.429333][T14266] Node 0 DMA32 free:1144528kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15560kB inactive_anon:0kB active_file:13080kB inactive_file:159684kB unevictable:1536kB writepending:316kB zspages:0kB present:3129332kB managed:2565108kB mlocked:0kB bounce:0kB free_pcp:45028kB local_pcp:24928kB free_cma:0kB
[  311.591942][T14266] lowmem_reserve[]: 0 0 0 0 0
[  311.596730][T14266] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  311.673178][T14266] lowmem_reserve[]: 0 0 0 0 0
[  311.688103][T14266] Node 1 Normal free:3902132kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13792kB local_pcp:7680kB free_cma:0kB
[  311.722071][T14266] lowmem_reserve[]: 0 0 0 0 0
[  311.727083][T14266] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  311.741250][T14266] Node 0 DMA32: 799*4kB (M) 355*8kB (ME) 223*16kB (UME) 809*32kB (UME) 245*64kB (UM) 76*128kB (UME) 48*256kB (UME) 11*512kB (UME) 16*1024kB (UM) 8*2048kB (UME) 252*4096kB (M) = 1143780kB
[  311.770526][T14266] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  311.791841][T14266] Node 1 Normal: 187*4kB (UM) 61*8kB (UME) 46*16kB (UME) 140*32kB (UME) 36*64kB (UME) 13*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3902132kB
[  311.811122][T14266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.821557][T14266] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.831916][T14266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.842271][T14266] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.884642][T14266] 44593 total pagecache pages
[  311.889545][T14266] 0 pages in swap cache
[  311.894587][T14266] Free swap  = 124996kB
[  311.898986][T14266] Total swap = 124996kB
[  311.903662][T14266] 2097051 pages RAM
[  311.908040][T14266] 0 pages HighMem/MovableOnly
[  311.920709][T14266] 424132 pages reserved
[  311.925178][T14266] 0 pages cma reserved
[  312.124661][ T1142] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.136448][ T1142] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.350766][T12714] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  312.800234][T14337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2236'.
[  312.816335][T14337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2236'.
[  313.164657][T14347] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2238'.
[  313.219327][T14348] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2240'.
[  313.638038][T14372] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2245'.
[  313.674791][T14372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2245'.
[  313.723334][T14374] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2246'.
[  313.733047][T14377] sctp: [Deprecated]: syz.3.2247 (pid 14377) Use of struct sctp_assoc_value in delayed_ack socket option.
[  313.733047][T14377] Use struct sctp_sack_info instead
[  314.132072][T14403] netlink: 'syz.1.2251': attribute type 1 has an invalid length.
[  314.397454][T14403] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  314.454192][ T1120] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  314.475076][ T1120] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.493579][ T1120] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  314.502865][ T1120] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.543595][ T1120] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  314.581630][ T1120] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.608350][ T1120] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  314.636155][ T1120] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.957230][T14442] 8021q: adding VLAN 0 to HW filter on device bond9
[  314.984731][T14452] netlink: 'syz.4.2264': attribute type 8 has an invalid length.
[  315.149797][T14464] netlink: 'syz.3.2269': attribute type 3 has an invalid length.
[  315.221218][T14467] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  315.371416][T14483] netlink: 'syz.1.2274': attribute type 16 has an invalid length.
[  315.457859][T14490] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  315.540715][T14496] netlink: 'syz.1.2278': attribute type 6 has an invalid length.
[  315.549321][T14496] netlink: 'syz.1.2278': attribute type 6 has an invalid length.
[  316.159801][T14533] bond0: Device is already in use.
[  316.190176][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  316.444077][T14544] __nla_validate_parse: 10 callbacks suppressed
[  316.444097][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2290'.
[  316.588376][T14546] netlink: 'syz.0.2291': attribute type 12 has an invalid length.
[  316.959487][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'.
[  317.009850][T14559] bridge0: port 1(gretap0) entered blocking state
[  317.024594][T14559] bridge0: port 1(gretap0) entered disabled state
[  317.037022][T14559] gretap0: entered allmulticast mode
[  317.103490][T14559] gretap0: entered promiscuous mode
[  317.234990][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  317.425448][T14580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.435019][T14580] syzkaller0: entered promiscuous mode
[  317.440872][T14580] syzkaller0: entered allmulticast mode
[  317.560443][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.671883][T14580] tipc: Resetting bearer <eth:syzkaller0>
[  317.680196][T14580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.711272][T14579] tipc: Resetting bearer <eth:syzkaller0>
[  317.756149][T14579] tipc: Disabling bearer <eth:syzkaller0>
[  317.867438][T14611] xt_TCPMSS: Only works on TCP SYN packets
[  318.068768][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'.
[  318.311786][T14634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2313'.
[  318.371625][T14634] netlink: 'syz.0.2313': attribute type 13 has an invalid length.
[  318.371848][T14636] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2314'.
[  318.389778][T14634] netlink: 'syz.0.2313': attribute type 17 has an invalid length.
[  318.425071][T14637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2313'.
[  318.607098][T14634] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.676115][T14634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  319.111922][T14660] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2320'.
[  319.160500][T14660] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2320'.
[  319.202879][T14660] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2320'.
[  319.271115][T14669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2322'.
[  319.989237][T14693] netlink: 'syz.4.2331': attribute type 2 has an invalid length.
[  320.021647][T14695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.029490][T14695] syzkaller0: entered promiscuous mode
[  320.035367][T14695] syzkaller0: entered allmulticast mode
[  320.110658][T14698] tipc: Failed to remove unknown binding: 66,1,1/0:3810708020/3810708022
[  320.123203][T14698] tipc: Failed to remove unknown binding: 66,1,1/0:3810708020/3810708022
[  320.139980][T14698] tipc: Failed to remove unknown binding: 66,1,1/0:3810708020/3810708022
[  320.164672][T14704] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002
[  320.261659][T14694] tipc: Resetting bearer <eth:syzkaller0>
[  320.291517][T14694] tipc: Disabling bearer <eth:syzkaller0>
[  320.961316][T14741] netlink: 'syz.3.2343': attribute type 23 has an invalid length.
[  321.135998][T14745] bond5: (slave dummy0): Releasing active interface
[  321.185276][T14745] bond0: (slave bond_slave_0): Releasing backup interface
[  321.218894][T14745] bond0: (slave bond_slave_1): Releasing backup interface
[  321.278187][T14745] team0: Port device team_slave_0 removed
[  321.301090][T14745] team0: Port device team_slave_1 removed
[  321.318382][T14745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  321.337532][T14745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.349755][T14745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.378740][T14745] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  321.550102][T14763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.574934][T14763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.602862][T14764] __nla_validate_parse: 13 callbacks suppressed
[  321.602881][T14764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2349'.
[  321.648371][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'.
[  321.661329][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'.
[  321.698670][T14767] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  322.144450][T14785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  322.459151][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'.
[  322.468263][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2358'.
[  322.577093][T14799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2360'.
[  322.677470][T14805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2362'.
[  322.686709][T14805] netlink: 'syz.0.2362': attribute type 7 has an invalid length.
[  322.695249][T14805] netlink: 'syz.0.2362': attribute type 8 has an invalid length.
[  322.704103][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2362'.
[  322.881117][T14822] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.2367'.
[  323.104712][T14835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.210696][T14838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  323.221902][T14840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  323.233662][T14838] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  323.243946][T14838] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  323.257026][T14838] tipc: Resetting bearer <eth:syzkaller0>
[  324.270239][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  324.305607][ T5916] tipc: Node number set to 3610324090
[  325.015258][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'.
[  325.038489][T10373] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.058726][T10373] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.102602][T14897] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001
[  325.140251][T14896] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001
[  325.267392][T10373] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.286267][T10373] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.194578][T14940] xt_hashlimit: max too large, truncated to 1048576
[  326.235210][T14940] xt_ecn: cannot match TCP bits for non-tcp packets
[  326.642407][T14963] netlink: 'syz.2.2402': attribute type 1 has an invalid length.
[  326.758621][T14968] __nla_validate_parse: 5 callbacks suppressed
[  326.758641][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2402'.
[  326.785854][T14963] bond10: entered promiscuous mode
[  326.800737][T14963] 8021q: adding VLAN 0 to HW filter on device bond10
[  326.819357][T14968] bond10: entered allmulticast mode
[  326.996185][T14963] bond10: (slave bridge4): making interface the new active one
[  327.007052][T14963] bridge4: entered promiscuous mode
[  327.013192][T14963] bridge4: entered allmulticast mode
[  327.036457][T14963] bond10: (slave bridge4): Enslaving as an active interface with an up link
[  327.091261][T14971] netlink: 'syz.1.2403': attribute type 39 has an invalid length.
[  327.605936][T14991] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  327.613552][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'.
[  327.692115][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'.
[  327.708423][T15000] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  327.780954][T15000] bond1: (slave macvlan1): Enslaving as a backup interface with a down link
[  327.937165][T15012] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.2414'.
[  327.999145][T15012] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.2414'.
[  328.244948][T15021] netlink: 'syz.2.2416': attribute type 11 has an invalid length.
[  328.252916][T15021] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.2416'.
[  328.460297][T15045] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2424'.
[  328.505377][T15045] ip6_vti0 speed is unknown, defaulting to 1000
[  328.532887][T15045] ip6_vti0 speed is unknown, defaulting to 1000
[  328.554411][T15045] ip6_vti0 speed is unknown, defaulting to 1000
[  328.663857][T15044] sctp: [Deprecated]: syz.4.2420 (pid 15044) Use of int in max_burst socket option.
[  328.663857][T15044] Use struct sctp_assoc_value instead
[  328.670584][T15054] syz.2.2427 (15054) used obsolete PPPIOCDETACH ioctl
[  328.766757][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'.
[  328.959696][T15045] infiniband syz2: set down
[  328.964712][   T24] ip6_vti0 speed is unknown, defaulting to 1000
[  328.984411][T15045] infiniband syz2: added ip6_vti0
[  329.035853][T15045] RDS/IB: syz2: added
[  329.040167][T15045] smc: adding ib device syz2 with port count 1
[  329.048098][T15045] smc:    ib device syz2 port 1 has pnetid S (user defined)
[  329.056043][   T24] ip6_vti0 speed is unknown, defaulting to 1000
[  329.064440][T15045] ip6_vti0 speed is unknown, defaulting to 1000
[  329.347073][T15045] ip6_vti0 speed is unknown, defaulting to 1000
[  329.900282][T15045] ip6_vti0 speed is unknown, defaulting to 1000
[  330.112474][T15095] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2438'.
[  330.357670][T15081] ip6_vti0 speed is unknown, defaulting to 1000
[  330.624253][T15045] ip6_vti0 speed is unknown, defaulting to 1000
[  331.074328][T15045] ip6_vti0 speed is unknown, defaulting to 1000
[  331.269499][T15080] ip6_vti0 speed is unknown, defaulting to 1000
[  331.426913][T15045] ip6_vti0 speed is unknown, defaulting to 1000
[  331.968573][T15120] syzkaller0: entered promiscuous mode
[  331.974341][T15120] syzkaller0: entered allmulticast mode
[  333.872046][T15127] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  333.917102][T15148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.991016][T15149] syzkaller0: entered promiscuous mode
[  334.008420][T15149] syzkaller0: entered allmulticast mode
[  334.153569][T15149] tipc: Resetting bearer <eth:syzkaller0>
[  334.219463][T15149] tipc: Disabling bearer <eth:syzkaller0>
[  334.336288][T15179] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2456'.
[  334.615475][T15190] ip6gre1: entered allmulticast mode
[  335.196895][T15198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.222285][T15198] syzkaller0: entered promiscuous mode
[  335.222834][T15202] netlink: zone id is out of range
[  335.234766][T15202] netlink: zone id is out of range
[  335.236006][T15198] syzkaller0: entered allmulticast mode
[  335.250163][T15202] netlink: zone id is out of range
[  335.255340][T15202] netlink: zone id is out of range
[  335.270546][T15202] netlink: zone id is out of range
[  335.276704][T15202] netlink: zone id is out of range
[  335.290490][T15202] netlink: zone id is out of range
[  335.332781][T15206] ipt_REJECT: TCP_RESET invalid for non-tcp
[  335.405197][T15204] tipc: Resetting bearer <eth:syzkaller0>
[  335.425169][T15209] dvmrp0: left allmulticast mode
[  335.457402][T15213] netlink: 'syz.4.2468': attribute type 1 has an invalid length.
[  335.530528][T15197] tipc: Resetting bearer <eth:syzkaller0>
[  335.602446][T15197] tipc: Disabling bearer <eth:syzkaller0>
[  335.667291][T15228] nftables ruleset with unbound set
[  335.866983][T15241] 
: renamed from bond_slave_0
[  336.016317][T15250] netlink: 'syz.4.2477': attribute type 21 has an invalid length.
[  336.043119][T15250] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2477'.
[  336.343828][T15258] "syz.4.2480" (15258) uses obsolete ecb(arc4) skcipher
[  337.238826][T15317] netlink: 'syz.1.2493': attribute type 10 has an invalid length.
[  337.377807][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'.
[  337.446481][T15321] syz_tun: entered promiscuous mode
[  337.471320][T15321] syz_tun: left promiscuous mode
[  337.811603][T15346] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  338.035366][T15344] 8021q: VLANs not supported on team0
[  338.172523][T15369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2506'.
[  338.568454][T15357] ip6_vti0 speed is unknown, defaulting to 1000
[  338.576848][T15388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2511'.
[  338.802648][T15398] netlink: 'syz.1.2515': attribute type 1 has an invalid length.
[  338.822622][T15398] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2515'.
[  339.606397][T15398] ip6_vti0 speed is unknown, defaulting to 1000
[  339.708915][T15428] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  339.732037][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2523'.
[  339.763368][T15428] netlink: 'syz.4.2524': attribute type 3 has an invalid length.
[  339.880018][T15428] nbd1: detected capacity change from 0 to 127
[  339.903407][ T5829] block nbd1: Receive control failed (result -32)
[  340.587679][T15450] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2528'.
[  340.601868][T15451] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2528'.
[  340.614458][T15450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2528'.
[  340.623783][T15450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2528'.
[  340.912285][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  341.058814][T15452] ip6_vti0 speed is unknown, defaulting to 1000
[  341.181881][T15462] xt_connbytes: Forcing CT accounting to be enabled
[  341.368193][T15465] netlink: 'syz.0.2532': attribute type 11 has an invalid length.
[  341.378358][T15465] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2532'.
[  341.633929][T15482] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2535'.
[  341.673827][T15481] lo: Caught tx_queue_len zero misconfig
[  342.088778][T15496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2540'.
[  342.108156][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'.
[  342.267462][T15500] netlink: 'syz.2.2542': attribute type 1 has an invalid length.
[  342.322899][T15486] ip6_vti0 speed is unknown, defaulting to 1000
[  342.849061][T15519] netlink: 'syz.0.2547': attribute type 32 has an invalid length.
[  342.857463][T15517] netlink: 'syz.0.2547': attribute type 32 has an invalid length.
[  342.946683][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'.
[  342.965469][T15521] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  343.332436][T15545] netlink: 'syz.1.2550': attribute type 11 has an invalid length.
[  343.439177][T15482] ip6_vti0 speed is unknown, defaulting to 1000
[  344.089831][T15570] can: request_module (can-proto-4) failed.
[  344.200676][T12709] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  344.466947][T15591] netlink: 'syz.2.2564': attribute type 29 has an invalid length.
[  344.476636][T15591] netlink: 'syz.2.2564': attribute type 29 has an invalid length.
[  344.530877][T12709] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  344.634524][T15593] nft_compat: unsupported protocol 0
[  345.074165][T10373] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  345.786633][T15609] macsec2: entered promiscuous mode
[  345.831864][T15609] hsr0: entered promiscuous mode
[  345.852615][T15609] macsec2: entered allmulticast mode
[  345.857974][T15609] hsr0: entered allmulticast mode
[  345.905476][T15609] hsr_slave_0: entered allmulticast mode
[  345.917953][T15609] hsr0: left allmulticast mode
[  345.933030][T15609] hsr_slave_0: left allmulticast mode
[  345.943343][T15609] hsr0: left promiscuous mode
[  345.994007][T15617] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.058685][T15610] tipc: Resetting bearer <eth:syzkaller0>
[  346.122926][T10356] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  346.138421][T10356] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  346.181934][T15621] syzkaller0: entered promiscuous mode
[  346.187632][T15621] syzkaller0: entered allmulticast mode
[  346.206525][T15607] tipc: Resetting bearer <eth:syzkaller0>
[  346.268698][T15607] tipc: Disabling bearer <eth:syzkaller0>
[  346.468978][T15654] __nla_validate_parse: 9 callbacks suppressed
[  346.468996][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'.
[  346.474703][T12714] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  346.514197][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'.
[  346.547816][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2580'.
[  346.561752][T15654] netlink: 'syz.2.2580': attribute type 14 has an invalid length.
[  346.829506][T15681] netlink: 'syz.2.2585': attribute type 2 has an invalid length.
[  346.843898][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'.
[  347.594856][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2593'.
[  347.766827][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2593'.
[  347.990479][T15717] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2595'.
[  348.173966][T15724] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2596'.
[  348.577053][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'.
[  348.689803][T15721] ip6_vti0 speed is unknown, defaulting to 1000
[  349.050978][T15750] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2606'.
[  349.390246][T15767] netlink: 'syz.1.2611': attribute type 1 has an invalid length.
[  349.639703][T15775] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  349.811232][T15781] sit0: entered promiscuous mode
[  349.848431][T15782] netlink: 'syz.1.2614': attribute type 1 has an invalid length.
[  349.987817][T10356] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  350.010503][T10356] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  350.024443][T10356] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  350.034998][T10356] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  350.055522][T15749] ip6_vti0 speed is unknown, defaulting to 1000
[  350.190300][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  351.204628][T15837] tipc: Invalid UDP bearer configuration
[  351.204685][T15837] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  351.996648][T15865] __nla_validate_parse: 7 callbacks suppressed
[  351.996668][T15865] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2636'.
[  352.146903][T15872] bond0: (slave rose0): Error: Device can not be enslaved while up
[  352.277065][T15880] sch_fq: defrate 4294967293 ignored.
[  352.324029][T15886] netlink: 'syz.3.2639': attribute type 7 has an invalid length.
[  352.902297][T15911] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2648'.
[  353.273333][T15919] bond0: option miimon: invalid value (18446744073072017407)
[  353.297238][T15919] bond0: option miimon: allowed values 0 - 2147483647
[  353.393592][T15923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2654'.
[  353.498490][T15929] x_tables: duplicate underflow at hook 1
[  354.267106][T15951] netlink: 'syz.3.2662': attribute type 2 has an invalid length.
[  354.306764][T15951] geneve4: entered promiscuous mode
[  354.333429][T15951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2662'.
[  354.355145][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'.
[  354.382536][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2662'.
[  354.395383][T15953] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  354.508445][T15957] netlink: 'syz.0.2664': attribute type 16 has an invalid length.
[  354.526109][T15957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2664'.
[  355.628934][T16008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2675'.
[  356.156617][T16028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2683'.
[  356.171391][T16028] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2683'.
[  356.451369][T16040] netlink: 'syz.0.2686': attribute type 2 has an invalid length.
[  356.561974][T16045] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.591637][T16040] netlink: 'syz.0.2686': attribute type 2 has an invalid length.
[  356.599647][T16040] !: left promiscuous mode
[  356.922641][T16056] netlink: 'syz.4.2690': attribute type 21 has an invalid length.
[  356.931471][T16056] netlink: 'syz.4.2690': attribute type 6 has an invalid length.
[  357.016603][T16058] 8021q: VLANs not supported on nlmon0
[  357.042942][T16056] bridge6: entered allmulticast mode
[  357.357723][T16070] __nla_validate_parse: 2 callbacks suppressed
[  357.357761][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'.
[  357.908146][T16090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2702'.
[  357.976530][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2702'.
[  358.196398][T16087] ip6_vti0 speed is unknown, defaulting to 1000
[  358.830151][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  358.882658][T16103] ip6_vti0 speed is unknown, defaulting to 1000
[  359.341794][T16122] syzkaller1: entered promiscuous mode
[  359.347580][T16122] syzkaller1: entered allmulticast mode
[  359.380486][T16122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2710'.
[  359.389832][T16122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2710'.
[  359.881783][T16130] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  359.918272][T16133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2713'.
[  360.178960][T16124] ip6_vti0 speed is unknown, defaulting to 1000
[  360.359057][T16145] veth0: entered promiscuous mode
[  360.370858][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'.
[  360.416147][ T5829] Bluetooth: hci4: link tx timeout
[  360.418487][T16147] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  360.470900][ T5829] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  360.632860][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'.
[  360.642027][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'.
[  360.653066][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'.
[  361.102231][T16125] ip6_vti0 speed is unknown, defaulting to 1000
[  361.115746][T16174] sctp: [Deprecated]: syz.4.2724 (pid 16174) Use of int in max_burst socket option.
[  361.115746][T16174] Use struct sctp_assoc_value instead
[  361.449859][T16182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  361.612812][T16198] ieee802154 phy1 wpan1: encryption failed: -22
[  361.715949][T16153] ip6_vti0 speed is unknown, defaulting to 1000
[  362.147295][T16214] sctp: [Deprecated]: syz.1.2732 (pid 16214) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.147295][T16214] Use struct sctp_sack_info instead
[  362.733342][T16227] __nla_validate_parse: 1 callbacks suppressed
[  362.733361][T16227] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2733'.
[  362.820836][T16230] netlink: 'syz.1.2734': attribute type 2 has an invalid length.
[  362.833268][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  362.844639][T16226] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2733'.
[  362.858349][T16230] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2734'.
[  362.940207][T16230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  363.126269][T16237] bond0: (slave rose0): Error: Device can not be enslaved while up
[  363.323590][T16053] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  363.335531][T16053] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  363.343969][T16053] CPU: 0 UID: 0 PID: 16053 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) 
[  363.353528][T16053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  363.363593][T16053] RIP: 0010:klist_del+0x49/0x110
[  363.368539][T16053] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 19 1a e8 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 fb 19 e8 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8
[  363.388158][T16053] RSP: 0018:ffffc9000b38f748 EFLAGS: 00010202
[  363.394236][T16053] RAX: 000000000000000b RBX: ffff88804c3a0460 RCX: ffff888029d89e40
[  363.402229][T16053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  363.410210][T16053] RBP: ffffc9000b38f870 R08: ffff8880496471e3 R09: 1ffff110092c8e3c
[  363.418207][T16053] R10: dffffc0000000000 R11: ffffed10092c8e3d R12: dffffc0000000000
[  363.426180][T16053] R13: 1ffff1100987408c R14: 0000000000000000 R15: ffff88807f8fc758
[  363.434161][T16053] FS:  0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000
[  363.443096][T16053] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  363.449677][T16053] CR2: 0000001b3100fff8 CR3: 0000000046588000 CR4: 00000000003526f0
[  363.457740][T16053] Call Trace:
[  363.461022][T16053]  <TASK>
[  363.463958][T16053]  device_del+0x280/0x8e0
[  363.468300][T16053]  ? _raw_spin_unlock_irq+0x2e/0x50
[  363.473506][T16053]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  363.479615][T16053]  ? __pfx_device_del+0x10/0x10
[  363.484470][T16053]  ? netdev_unregister_kobject+0x344/0x450
[  363.490292][T16053]  unregister_netdevice_many_notify+0x1df2/0x2390
[  363.496723][T16053]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  363.503495][T16053]  ? rtnl_net_dev_lock+0x257/0x2f0
[  363.508617][T16053]  unregister_netdevice_queue+0x33c/0x380
[  363.514373][T16053]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  363.520624][T16053]  ? rtnl_net_dev_lock+0x36/0x2f0
[  363.525673][T16053]  ? rtnl_net_dev_lock+0x2de/0x2f0
[  363.530804][T16053]  unregister_netdev+0x1f/0x60
[  363.535584][T16053]  bnep_session+0x294d/0x2b40
[  363.540271][T16053]  ? rcu_is_watching+0x15/0xb0
[  363.545044][T16053]  ? trace_sched_exit_tp+0x36/0x110
[  363.550253][T16053]  ? __lock_acquire+0xab9/0xd20
[  363.555120][T16053]  ? __pfx_bnep_session+0x10/0x10
[  363.560157][T16053]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  363.566067][T16053]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  363.572401][T16053]  ? __pfx_woken_wake_function+0x10/0x10
[  363.578041][T16053]  ? __kthread_parkme+0x7b/0x200
[  363.582979][T16053]  ? __kthread_parkme+0x1a1/0x200
[  363.588003][T16053]  kthread+0x711/0x8a0
[  363.592075][T16053]  ? __pfx_bnep_session+0x10/0x10
[  363.597100][T16053]  ? __pfx_kthread+0x10/0x10
[  363.601699][T16053]  ? _raw_spin_unlock_irq+0x23/0x50
[  363.606906][T16053]  ? lockdep_hardirqs_on+0x9c/0x150
[  363.612105][T16053]  ? __pfx_kthread+0x10/0x10
[  363.616700][T16053]  ret_from_fork+0x4bc/0x870
[  363.621289][T16053]  ? __pfx_ret_from_fork+0x10/0x10
[  363.626399][T16053]  ? __switch_to_asm+0x39/0x70
[  363.631155][T16053]  ? __switch_to_asm+0x33/0x70
[  363.635912][T16053]  ? __pfx_kthread+0x10/0x10
[  363.640517][T16053]  ret_from_fork_asm+0x1a/0x30
[  363.645297][T16053]  </TASK>
[  363.648316][T16053] Modules linked in:
[  363.652706][T16053] ---[ end trace 0000000000000000 ]---
[  363.702455][T16053] RIP: 0010:klist_del+0x49/0x110
[  363.709778][T16053] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 19 1a e8 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 fb 19 e8 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8
[  363.729965][T16053] RSP: 0018:ffffc9000b38f748 EFLAGS: 00010202
[  363.736169][T16053] RAX: 000000000000000b RBX: ffff88804c3a0460 RCX: ffff888029d89e40
[  363.744331][T16053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  363.752753][T16053] RBP: ffffc9000b38f870 R08: ffff8880496471e3 R09: 1ffff110092c8e3c
[  363.761212][T16053] R10: dffffc0000000000 R11: ffffed10092c8e3d R12: dffffc0000000000
[  363.769314][T16053] R13: 1ffff1100987408c R14: 0000000000000000 R15: ffff88807f8fc758
[  363.781924][T16053] FS:  0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000
[  363.803822][T16053] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  363.810837][T16053] CR2: 000000110c31b516 CR3: 0000000046588000 CR4: 00000000003526f0
[  363.818851][T16053] Kernel panic - not syncing: Fatal exception
[  363.825084][T16053] Kernel Offset: disabled
[  363.829410][T16053] Rebooting in 86400 seconds..