last executing test programs:

3.047542493s ago: executing program 1 (id=1204):
r0 = socket(0x840000000002, 0x3, 0x100)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4)
syz_emit_ethernet(0x93, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd6dafc4c900002f01fe800000000000000000000000000019ff020000000000000000000000000001"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000d7ffc8d90002000000000000cdbe0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x21, 0x800000}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"})
close(0xffffffffffffffff)
socketpair(0x11, 0x800, 0x260962c6, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="c3df394606bf636aa1add2d6355d44d6dd2b348a7b1f4cbc9f830b18ea9bb9a24f23c44356e30bdcdeef", 0x2a)

2.301502878s ago: executing program 1 (id=1215):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newae={0x70, 0x1e, 0x399, 0x0, 0x0, {{@in6=@mcast1}, @in6=@local}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$int_out(r2, 0x5460, &(0x7f0000000380))
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=<r11=>0x0, &(0x7f0000000180)=0x4)
r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r12, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=<r13=>0x0, &(0x7f0000000240)=0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=<r14=>0x0, &(0x7f00000003c0)=0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x210, 0x30, 0x80d, 0x0, 0x0, {}, [{0x1fc, 0x1, [@m_mirred={0x1f8, 0x6, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xc383, 0x80000001, 0x7, 0x5, 0x1}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x5, 0xffffffde, 0xff}, 0x0, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x8, 0x7, 0x9}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5c3decfa, 0x300, 0x8, 0x2, 0xe}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0x6, 0x40, 0x81}, 0x2, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xf2, 0x10000000, 0x8000, 0x3f96}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe3, 0x3, 0x4, 0x2000000, 0xfffffff9}, 0x2, r14}}]}, {0xe9, 0x6, "a4c3bbf951a06086c988a9efd96fc7965259ef2a7622fe7f1f09e777594d3be897205d2793a18bfce06933fbb1eb20c018e365fb59ab5d71a7677b6f29bbe87b58681f345c40e13f416829030000000000000004e91274fe5f890faa90484586d4b36c9e7e63ea23af2279889988f3f18cc716cbdcd6fa1a11e0b21e9b83b031ce9918e1e88b12324f96ba82b5be38bc4ea1279d70fe3194b426f2913e8ffd214a0d9f2b628f3f68435a2cb9f41d6dfb51f404a9bd98e1848eef334963112952ef91ec233d15dc84f4e1dbd29a670a45cb9c277f74c2ebf4da86b461588b5ddf1a1d6e43f1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x210}}, 0x0)
getsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f0000000040), &(0x7f0000000000)=0xfffffffffffffcad)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4804}, 0x80)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x20040041)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})

2.131844942s ago: executing program 1 (id=1217):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r0, 0xffffffffffffffff, 0x26}, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.034532832s ago: executing program 4 (id=1221):
r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={<r1=>0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6c, 0x7fff}, &(0x7f00000004c0)=0x90) (rerun: 64)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000500)={r1, 0x400}, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000)
close(r2) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, 0x0) (async)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) (async)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, 0x0, 0x0) (async, rerun: 32)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x401, 0x0, 0x0, {0xf, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x64, 0x6, "611267b89295cb05d755b106204dc62ed909cfc8788dc833c8f7b091ffd31db056697630bb9259acf040a1062faa48c4992b82faa7abdf57fb02727947cbc57f4d9eb6fa1e014df64217f587ece443cf15bfa64c27e51945535e544ff17c3c8a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0xd4}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r11=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=r11, @ANYBLOB="0000000014000100000100800000080002000052c877978702e21491814800000000000000f5"], 0x38}}, 0x0) (async, rerun: 32)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'NLBL_UNLBL\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd57}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) (async, rerun: 32)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r6, 0x200, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}]}, 0x4c}, 0x1, 0xffffffff00000003}, 0x0) (async, rerun: 64)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xe, 0x1e, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x0, 0xc, 0x2, 0x4, 0x100, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x3, 0x6, 0xb, 0x40}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x19bb, 0xc4, &(0x7f0000000780)=""/196, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000d00)=[r10, r12, r2, r2, r2], &(0x7f0000000d40)=[{0x1, 0x2, 0x2, 0x1}, {0x1, 0x5, 0x6, 0x5}, {0x0, 0x1, 0x5, 0x2}], 0x10, 0x3}, 0x94)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x1, 0x0, 0xd, 0x80, 0x80}, 0x20) (async)
writev(r13, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1)

1.982573615s ago: executing program 1 (id=1222):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xe5c}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f0000000040))
recvmmsg(r2, 0x0, 0x0, 0x2002, &(0x7f0000003240))
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000049001a00080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r3, 0x2f, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r5)
sendmsg$nl_route_sched(r2, 0x0, 0x20000000)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e24, @multicast1}, 0x10)
nanosleep(&(0x7f0000000200), 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, 0x0, 0x804)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000003480)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000003440)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x4004040)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000001000)={0x0, 0x55, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x30, 0x17, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000820}, 0x4004800)

1.811311733s ago: executing program 2 (id=1224):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401000000000000000000280002"], 0x38}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MAP={0x24}]}, 0x74}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0xfd96}]}]}, 0x28}}, 0x0)
recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

1.703642114s ago: executing program 0 (id=1226):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fedbdf2519000000180001248b002afc00000000000030000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x20008050)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x1000)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791204000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000240)=""/154, &(0x7f00000001c0)=0x9a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r0}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xf, &(0x7f0000000600)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@exit, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @generic={0x8, 0x0, 0x3, 0x7}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6c000000}, @generic={0xf8, 0x8, 0x1, 0x8, 0xacb5}, @generic={0x8, 0x1, 0x5, 0x97, 0x1ff}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}], {0x95, 0x0, 0x5a5}}, &(0x7f00000004c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94)

1.693267242s ago: executing program 4 (id=1227):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)

1.45845351s ago: executing program 4 (id=1229):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x4048000, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4a21, 0x5, @empty, 0x7}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0xffffffff}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000300)='\x00\x00', 0x0, 0x1, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}}, @in6={0xa, 0x4e22, 0x200, @empty, 0x7}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x40e8c, 0x0, 0x1}, 0x10)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102"], 0x38}}, 0x0)
preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000500)=""/154, 0xb}, {&(0x7f00000005c0)=""/200}], 0x1, 0x8, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='device_pm_callback_end\x00', r4, 0x0, 0x8}, 0x18)
shutdown(0xffffffffffffffff, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
setsockopt(r0, 0x9, 0x7f, &(0x7f0000000480)="0280ffff", 0x4)

1.430824135s ago: executing program 0 (id=1230):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)
syz_emit_ethernet(0x36, &(0x7f0000000400)={@link_local={0xd}, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @empty}, {0xfffc, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000018000100fcffffff00000000020000060015000400000014001680100008800c0002800800010004000000"], 0x38}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.334647503s ago: executing program 0 (id=1232):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000006c0)=[{{0x4}, {0x3, 0x1, 0x1, 0x1}}], 0x8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={'vxcan1\x00', {0x2, 0x4e22, @broadcast}})
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}})
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000240)=0x4ab8a40e, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvfrom$rxrpc(r6, 0x0, 0x0, 0x10000, 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f00000003c0)={{r6}, "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"})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="380034269afb6431f6d6a496a0bfee96289eb35dc5bbf025ea445292fd4ff09846689e558c5cef0cdc5f0d5cfc1c5b746299b4", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x8001, 0x5, 0x4, 0xffffffffffffffff, 0x80000001, 0x80000000}, {0x3, 0xb4, 0x9, 0x235, 0x8, 0xb85}], ['\x00']})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)

1.2064686s ago: executing program 0 (id=1233):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
ppoll(&(0x7f0000000000)=[{r0, 0x10}, {r0, 0x2410}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0xaa1b740]}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000200)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="1a7ddfec0e338453d30e67067dc3b4e4104721cc9883cbd8167b2ae1b24f61d023611743b892307f28485ed172b2328e97d2b91ed2af75ddc76cb3ae889bdfecb2f924475d656e21f436e3ce272e86adab724bacc46155", 0x57}, {&(0x7f0000000300)="254d0140d3be381a680bbfceb38206b33128c70c135b1ff69cbd322ee402569ef1c5d5d79d578ec3ecad0a99125d4fa40fe4879c4487606833524d89a5c6ac", 0x3f}, {&(0x7f0000000340)="589c751489ac493035a551e78b01eaf1608218a0188dcd53451e95b03f182247e4039ef1a93e2e4861e94ae86a6d5750ed5640f33af52634ac2195591b433250bcf3a9460ba3fe", 0x47}], 0x4}}], 0x1, 0x40091)
sendfile(r3, r3, 0x0, 0x1)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000240)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001240)={0x49834e15, 0x4f0, 0x9, 0x1, 0x81}, 0x14)
r6 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r6, @ANYRES32, @ANYRES16=r0, @ANYRES64=r4, @ANYRESOCT=r0, @ANYRESOCT], 0x78}, 0x4008812)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

1.05251444s ago: executing program 1 (id=1235):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0xfdef)

920.855973ms ago: executing program 3 (id=1236):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x4, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x3}, @typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @var={0x2, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x10, 0x0, 0x0, 0xc, 0x2}, @enum64={0xf, 0x5, 0x0, 0x13, 0x0, 0x0, [{0x10, 0x3, 0x2}, {0x9, 0x8000}, {0x8, 0x8, 0xf}, {0x8, 0x134, 0x8}, {0xf, 0x401, 0x8}]}, @union={0xa, 0x2, 0x0, 0x5, 0x1, 0x400, [{0x9, 0x0, 0x7}, {0x9, 0x0, 0x1a}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000000)=""/116, 0xc8, 0x74, 0x1, 0xfffffe00}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r1}, 0x94)

851.414687ms ago: executing program 1 (id=1237):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
r2 = socket(0x1d, 0x3, 0x2)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async)
connect$vsock_stream(r2, &(0x7f0000000080), 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$nci(r4, &(0x7f00000000c0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0xf, {0x5, 0x8}}, 0x5) (async)
write$nci(r4, &(0x7f00000000c0)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0xf, {0x5, 0x8}}, 0x5)
recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
shutdown(r3, 0x0) (async)
shutdown(r3, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="68000000140001000000000000000000ff010000000000000000000000000009fe80000000000000000000000000001c00"/64, @ANYRES16=r0, @ANYBLOB="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", @ANYBLOB="00000000000000000c00080008000800000000ffff"], 0x68}}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4000000240001002abd7000fedbdf2544000000bd000e80ff"], 0xd4}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

721.489999ms ago: executing program 3 (id=1238):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x91}]}, 0x44}}, 0x0)

709.016165ms ago: executing program 2 (id=1239):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@broadcast, 0x1, 0x0, 0x10, 0x0, [{@broadcast}]}})
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x17, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2c, r4, 0x5, 0x400003, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10800}, 0x24000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7d, 0x2a}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4800)

576.663417ms ago: executing program 3 (id=1240):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
unshare(0xc040480)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200"], 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x130, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69fa01dadbec8db85ad0a147eabb22fc6896d6d3e706b0bc8e88325fe6d76e894a422b9116227af2d29f89510f70541336b3d4683107c0bbb678ae476a0c409c15fda7d5cdbaf1265605a79e9847258124c3a6cf28e1df891b8edaac28b82794422d4b2b0d13870eff73990ecde487d74267d83a5c16592feb0211e9b9b13e420c29ac2d21de289c4109553ec0949748802a31d68b2280ab9de82ba7019d6798bc961633741dae6a5b0314266fadeb001584395af710b03134456f3ae4e24b8a777a1848ca788d2a28d5dac39c", @generic="5860e64b3f515b4e2e3de25114d4302f5f36993c6250ac50688494c207e07c71442fadba75909e81940f6fed"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r6 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r6, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}], 0x1, 0xc044)

521.544438ms ago: executing program 2 (id=1241):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020007000200000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

477.021771ms ago: executing program 4 (id=1242):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020f02500000000002020207b1af8ff00000000bfa1000000000000170100000bd42523073ae1bd08000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf07f}, 0x94) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(r0, 0x0) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000280)={0x7, 0x1, 0x3, 0x5, 0x1, [0xf7, 0x7, 0x7, 0x81]})
r1 = socket$unix(0x1, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2) (async)
getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) (async)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x11, 0x0, 0x89, 0x0, @remote, @private}}}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r6 = socket$key(0xf, 0x3, 0x2) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10401, 0x0)
sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0xe, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x5}]}, 0x60}}, 0x0)

408.324825ms ago: executing program 2 (id=1243):
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100"/12, @ANYRES32=r7, @ANYBLOB="e5a75ee7"], 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000003e000100fc00040000000c00018008001080040008800c00020000000000000000800000000000000000000032b45913e50f3ee92962e59ec73f786193a750785c974b0ac56057fa19b27d8b2ab50fbed815e62207fce125ec4331653407cd55606a052214d0bb0f4ed4e3a4d80d0f59616a6c0f083023d9748e494d87fae2b1fedc722bbd12c6721a913c7da566de311e4f37fbabc9a9746a5cc1cc501e391b440d814842db9c0f6bf739677377"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYBLOB='z'], 0x1c}}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, 0x0, &(0x7f0000000800))
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0xffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0xf, 0x2, 0x5)

365.465718ms ago: executing program 3 (id=1244):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team0\x00'}) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async)
r2 = accept$alg(r1, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000004c0)=""/208, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff30}, 0x94) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c04}, 0x20000000) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket(0x1e, 0x1, 0x0)
sendmmsg$alg(r7, &(0x7f0000009480)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004c}], 0x1, 0x40) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x48010)
close(r4) (async)
syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={<r8=>0x0, 0x7}, &(0x7f0000000080)=0x8) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY(r9, 0x0, 0x1, 0x0, &(0x7f0000000380))
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r8, @ANYBLOB="09000a0001000700060004000000040006000600bd0c0104790de53d5c9045df9dab81a5db62c503d6ba4f1a"], 0x1c)

310.286681ms ago: executing program 4 (id=1245):
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$caif_stream(0x25, 0x1, 0x2) (async)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x14040847}, 0x4004) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x78, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8f201b68a3bc7c5b}, 0x8005) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x2}}, 0x14) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f00000001c0)) (async)
sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="82578a6f0a00000000000000", @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r8, &(0x7f00000001c0), 0x0}, 0x20)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

274.223289ms ago: executing program 3 (id=1246):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180), 0x4)
getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000080))
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

209.466503ms ago: executing program 0 (id=1247):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r2=>0x0)
sendto(r1, &(0x7f0000000180)="1a7ac7b332cd59146c836bda0618696e1f1240b82029f88fc674cef4376eb180df2ed4f2f4fb0334939a056c062e3976e51c748e4a291f3dbcbb7d786c0b5f7a31a3d562ebf3a13537517ed3ba69b1dbd44f83bb362074e1a7db24de2467abe28d8d621aa5d218a4893f43735c3888ccdb99edec9159ebf44e19f8da25347f15f8a803b6fd1375611ad7df68cdaf60a74d5cb1d5273e172be054b206f39f0dc2de884d2cfdcc255111c3438d2372e8b78e24254fb037a21945d652b45d63f67f49616c2f71d53cf49a4b14bc6326fa38dd5915d54d775683863978e97fbaaf7ea6361b70c2a1e2bbf6136043c2fb", 0xee, 0x4001, &(0x7f0000000380)=@nfc={0x27, r2, 0x1, 0x4}, 0x80)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a3000"], 0xa8}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000280), &(0x7f0000000300)=0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r7, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff0060031200100888fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="000013fa07000000000000008ced710000", @ANYRES16=r6, @ANYBLOB="050000400000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a003400020202020202000008004a000cac0f00"], 0x30}}, 0x0)

208.866357ms ago: executing program 2 (id=1248):
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000180)=ANY=[], 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./cgroup/cgroup.procs/../file0\x00', 0x0, 0x8}, 0x18) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf060200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) (async)
write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r11=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000040000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000003fb9998b03bd2b9128889f92840fd58a0000140012800b0001006970766c616e000004000280080005002caa54", @ANYRES32=r11, @ANYBLOB="08001f0091000000"], 0x44}}, 0x0)

131.519757ms ago: executing program 4 (id=1249):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x5}, 0xffffffffffffff30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r1, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000000c0)="00008828", 0x1e, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x8, 0x6, @local}, 0x14)
sendfile(r1, r3, 0x0, 0xffffffff004)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0x4)

101.246336ms ago: executing program 3 (id=1250):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069107f000000000004000000000000009508001500040000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000002640)=0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r4, 0x6, {0x2, 0xff, 0x4}}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000100000008000b400000000054000480400001800e000100696d6d6564696174650000002c0002800800014002000000040002801c0002801800028008000180fffffffc0900020073797a3000000000100001800a0001006c696d69740000000900010073797a30"], 0xf0}}, 0x0) (async)
bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r4, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18)
bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000002139cb806b01000a4c000000060a0b04000000000000000002000000200004801c0001800b000100736fa82275d39a15aa0ce8a52a0e9ecb9d87636b657400000c00027a30000000000900020073797a3200000000140000001100010000000000000000"], 0x74}}, 0x0) (rerun: 32)
r8 = socket(0x21, 0x74c9f38550fe88fe, 0x81)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000180)=0x4a, 0x4)

41.118505ms ago: executing program 2 (id=1251):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x108, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)
sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8850}, 0x4000)

0s ago: executing program 0 (id=1252):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
syz_emit_ethernet(0xe7, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd9, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x2f, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x4, 0xc7, 0x3, 0xc}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x6}]}, @ssrr={0x89, 0x23, 0x5f, [@multicast1, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @remote, @local]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0]}, @lsrr={0x83, 0x2f, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x64010100, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x39}]}]}}, "bc"}}}}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="e72897e09e9dcddbebd678b0b1a0000000000000"], 0x14}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2000040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts.
[   85.686859][ T5848] cgroup: Unknown subsys name 'net'
[   85.835034][ T5848] cgroup: Unknown subsys name 'cpuset'
[   85.844161][ T5848] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   87.707749][ T5848] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   90.422600][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.422896][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.432045][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.444783][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.445050][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.459462][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.460550][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.476089][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.483462][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.493930][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.527850][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.537927][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.543873][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.552773][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.555518][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.569122][ T5182] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.577434][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.585758][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.597588][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.608316][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.617043][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.626641][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.641785][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.670351][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.680064][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   91.228516][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   91.486379][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   91.554179][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   91.569891][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   91.594486][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   91.687759][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.695168][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.703147][ T5862] bridge_slave_0: entered allmulticast mode
[   91.710572][ T5862] bridge_slave_0: entered promiscuous mode
[   91.788549][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.796958][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.804503][ T5862] bridge_slave_1: entered allmulticast mode
[   91.812919][ T5862] bridge_slave_1: entered promiscuous mode
[   91.887504][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.894940][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.902660][ T5858] bridge_slave_0: entered allmulticast mode
[   91.910012][ T5858] bridge_slave_0: entered promiscuous mode
[   91.949168][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.958604][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.966518][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.975090][ T5858] bridge_slave_1: entered allmulticast mode
[   91.983213][ T5858] bridge_slave_1: entered promiscuous mode
[   92.027068][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.094059][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.101524][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.108798][ T5867] bridge_slave_0: entered allmulticast mode
[   92.117562][ T5867] bridge_slave_0: entered promiscuous mode
[   92.125745][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.135566][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.143465][ T5868] bridge_slave_0: entered allmulticast mode
[   92.151477][ T5868] bridge_slave_0: entered promiscuous mode
[   92.159763][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.167209][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.174965][ T5868] bridge_slave_1: entered allmulticast mode
[   92.182666][ T5868] bridge_slave_1: entered promiscuous mode
[   92.219026][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.226355][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.233680][ T5872] bridge_slave_0: entered allmulticast mode
[   92.242200][ T5872] bridge_slave_0: entered promiscuous mode
[   92.250431][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.258444][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.268574][ T5872] bridge_slave_1: entered allmulticast mode
[   92.276145][ T5872] bridge_slave_1: entered promiscuous mode
[   92.283999][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.291551][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.298756][ T5867] bridge_slave_1: entered allmulticast mode
[   92.306255][ T5867] bridge_slave_1: entered promiscuous mode
[   92.344667][ T5862] team0: Port device team_slave_0 added
[   92.354362][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.366707][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.417016][ T5862] team0: Port device team_slave_1 added
[   92.492497][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.505863][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.532031][ T5861] Bluetooth: hci1: command tx timeout
[   92.537840][ T5861] Bluetooth: hci0: command tx timeout
[   92.556886][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.571151][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.583424][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.609451][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.619836][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.627010][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.653064][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.667027][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.674083][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.700198][ T5861] Bluetooth: hci4: command tx timeout
[   92.700306][ T5863] Bluetooth: hci3: command tx timeout
[   92.706102][   T51] Bluetooth: hci2: command tx timeout
[   92.717518][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.730825][ T5858] team0: Port device team_slave_0 added
[   92.787734][ T5858] team0: Port device team_slave_1 added
[   92.810519][ T5867] team0: Port device team_slave_0 added
[   92.819395][ T5867] team0: Port device team_slave_1 added
[   92.850454][ T5868] team0: Port device team_slave_0 added
[   92.875946][ T5872] team0: Port device team_slave_0 added
[   92.900143][ T5868] team0: Port device team_slave_1 added
[   92.954512][ T5872] team0: Port device team_slave_1 added
[   92.961860][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.968840][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.995181][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.024871][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.031982][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.058164][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.115904][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.124625][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.151692][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.163932][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.171220][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.197595][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.209576][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.216614][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.242620][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.259826][ T5862] hsr_slave_0: entered promiscuous mode
[   93.266726][ T5862] hsr_slave_1: entered promiscuous mode
[   93.295328][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.302380][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.328692][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.348673][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.355767][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.383212][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.395138][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.402533][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.429181][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.527991][ T5858] hsr_slave_0: entered promiscuous mode
[   93.534996][ T5858] hsr_slave_1: entered promiscuous mode
[   93.541664][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   93.547539][ T5858] Cannot create hsr debugfs directory
[   93.690086][ T5867] hsr_slave_0: entered promiscuous mode
[   93.697437][ T5867] hsr_slave_1: entered promiscuous mode
[   93.704367][ T5867] debugfs: 'hsr0' already exists in 'hsr'
[   93.710305][ T5867] Cannot create hsr debugfs directory
[   93.723528][ T5872] hsr_slave_0: entered promiscuous mode
[   93.730034][ T5872] hsr_slave_1: entered promiscuous mode
[   93.736915][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[   93.743864][ T5872] Cannot create hsr debugfs directory
[   93.755088][ T5868] hsr_slave_0: entered promiscuous mode
[   93.762575][ T5868] hsr_slave_1: entered promiscuous mode
[   93.770019][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   93.776594][ T5868] Cannot create hsr debugfs directory
[   94.415868][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.437155][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.457918][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.480462][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.541397][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.568729][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.580645][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.611488][   T51] Bluetooth: hci0: command tx timeout
[   94.616961][   T51] Bluetooth: hci1: command tx timeout
[   94.621254][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.676756][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.689266][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.702584][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.714721][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.772531][   T51] Bluetooth: hci3: command tx timeout
[   94.772564][ T5863] Bluetooth: hci4: command tx timeout
[   94.784092][ T5861] Bluetooth: hci2: command tx timeout
[   94.865178][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.885003][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.919811][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.934477][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.064597][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.079654][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   95.106592][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   95.119819][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   95.146154][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   95.166374][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.214677][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   95.243079][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   95.255972][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.263322][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.294844][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.302115][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.338200][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.345523][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.365807][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.404896][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.412118][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.450754][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   95.472243][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.479515][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.523764][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.531092][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.575698][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.765404][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.786301][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.876180][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   95.916617][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   95.938198][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.945409][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.989091][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.996439][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.048547][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.055774][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.109980][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.117210][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.255520][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.285477][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.396499][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.620083][ T5862] veth0_vlan: entered promiscuous mode
[   96.635810][ T5858] veth0_vlan: entered promiscuous mode
[   96.677714][ T5858] veth1_vlan: entered promiscuous mode
[   96.697536][ T5861] Bluetooth: hci0: command tx timeout
[   96.703467][ T5863] Bluetooth: hci1: command tx timeout
[   96.729810][ T5862] veth1_vlan: entered promiscuous mode
[   96.853046][ T5861] Bluetooth: hci3: command tx timeout
[   96.858572][ T5861] Bluetooth: hci2: command tx timeout
[   96.864536][ T5863] Bluetooth: hci4: command tx timeout
[   96.870419][ T5858] veth0_macvtap: entered promiscuous mode
[   96.894884][ T5858] veth1_macvtap: entered promiscuous mode
[   96.969751][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.990719][ T5862] veth0_macvtap: entered promiscuous mode
[   97.007303][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.020665][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.061634][ T5862] veth1_macvtap: entered promiscuous mode
[   97.070565][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.080270][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.119688][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.129684][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.178789][ T5867] veth0_vlan: entered promiscuous mode
[   97.221854][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.234353][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.255255][   T10] cfg80211: failed to load regulatory.db
[   97.268612][ T5867] veth1_vlan: entered promiscuous mode
[   97.297634][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.335592][ T5872] veth0_vlan: entered promiscuous mode
[   97.373418][ T3070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.383380][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.404989][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.416784][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.449345][ T5872] veth1_vlan: entered promiscuous mode
[   97.457507][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.467199][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.518421][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.527069][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.554182][ T5868] veth0_vlan: entered promiscuous mode
[   97.593945][ T5868] veth1_vlan: entered promiscuous mode
[   97.628015][ T5867] veth0_macvtap: entered promiscuous mode
[   97.662528][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   97.670024][ T5867] veth1_macvtap: entered promiscuous mode
[   97.704160][ T5872] veth0_macvtap: entered promiscuous mode
[   97.718081][ T5872] veth1_macvtap: entered promiscuous mode
[   97.753808][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.773271][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.847150][ T5977] netlink: 'syz.2.3': attribute type 1 has an invalid length.
[   97.857917][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.877443][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.883425][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.899568][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.932831][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.975857][ T5868] veth0_macvtap: entered promiscuous mode
[   98.002496][ T5868] veth1_macvtap: entered promiscuous mode
[   98.014836][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.088669][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.138379][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.154820][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.183478][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.194783][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.250268][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.260079][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.276665][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.385758][   T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.405463][   T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.498276][   T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.521044][   T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.563692][ T5995] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9'.
[   98.583898][   T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.600023][   T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.619246][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.650394][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.700516][ T5998] netlink: 'syz.2.9': attribute type 39 has an invalid length.
[   98.774822][ T5861] Bluetooth: hci0: command tx timeout
[   98.780328][ T5863] Bluetooth: hci1: command tx timeout
[   98.853525][ T5999] netlink: 284 bytes leftover after parsing attributes in process `syz.2.9'.
[   98.893646][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.902607][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.910472][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.923954][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.936224][ T5863] Bluetooth: hci2: command tx timeout
[   98.942262][ T5861] Bluetooth: hci4: command tx timeout
[   98.942306][ T5861] Bluetooth: hci3: command tx timeout
[   99.075920][   T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.100446][   T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.176504][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.208152][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.323878][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.365014][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.422152][ T6016] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15'.
[   99.476108][ T6015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'.
[   99.522564][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'.
[   99.741868][ T6026] sctp: [Deprecated]: syz.3.4 (pid 6026) Use of int in maxseg socket option.
[   99.741868][ T6026] Use struct sctp_assoc_value instead
[  100.181187][ T6047] Zero length message leads to an empty skb
[  100.298986][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'.
[  100.529053][ T6063] netlink: 'syz.1.28': attribute type 3 has an invalid length.
[  100.565503][ T6063] netlink: 224 bytes leftover after parsing attributes in process `syz.1.28'.
[  100.596172][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'.
[  100.647096][ T6065] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.709149][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.29'.
[  100.762543][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'.
[  100.777471][ T6072] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.921538][ T6078] trusted_key: syz.3.32 sent an empty control message without MSG_MORE.
[  100.976825][ T6075] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET)
[  101.381540][ T6082] team0 (unregistering): Port device team_slave_0 removed
[  101.434101][ T6082] team0 (unregistering): Port device team_slave_1 removed
[  101.476527][ T6085] pimreg: entered allmulticast mode
[  101.511675][ T6099] veth1_to_bond: entered allmulticast mode
[  101.667718][ T6099] bond0: (slave bond_slave_1): Releasing backup interface
[  101.771542][ T6099] veth1_to_bond (unregistering): left allmulticast mode
[  102.140619][ T6124] delete_channel: no stack
[  102.141724][ T6122] veth0: entered promiscuous mode
[  102.277728][ T6119] veth0: left promiscuous mode
[  102.393401][ T6118] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  102.472563][ T6140] netlink: 'syz.1.54': attribute type 83 has an invalid length.
[  102.558781][ T6118] veth3: entered allmulticast mode
[  102.610437][ T6146] pim6reg1: entered promiscuous mode
[  102.622169][ T6146] pim6reg1: entered allmulticast mode
[  103.181406][ T6167] syzkaller1: entered promiscuous mode
[  103.223606][ T6167] syzkaller1: entered allmulticast mode
[  103.745437][ T6174] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[  104.274408][    C1] vcan0: j1939_tp_rxtimer: 0xffff888056c17800: rx timeout, send abort
[  104.283878][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056c17800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session.
[  105.720369][ T6216] __nla_validate_parse: 10 callbacks suppressed
[  105.720392][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.75'.
[  105.743613][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.2.75'.
[  105.765931][ T6216] gretap1: entered promiscuous mode
[  105.775152][ T6216] gretap1: entered allmulticast mode
[  105.805974][ T6221] netlink: 'syz.0.77': attribute type 25 has an invalid length.
[  106.062175][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056d84c00: rx timeout, send abort
[  106.143181][ T6247] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.84'.
[  106.473817][ T6264] delete_channel: no stack
[  106.489263][ T6265] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  106.570502][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056d84c00: abort rx timeout. Force session deactivation
[  106.624690][ T6268] netlink: 52 bytes leftover after parsing attributes in process `syz.2.90'.
[  106.644726][ T6270] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  106.713578][ T6273] netlink: 'syz.1.92': attribute type 1 has an invalid length.
[  106.787191][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'.
[  107.015185][ T6284] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'.
[  107.278500][ T6296] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  107.345333][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.354476][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.700136][ T6312] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  107.708007][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.104'.
[  107.722778][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'.
[  107.767356][ T6312] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  107.786000][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'.
[  107.987968][ T6038] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.012591][ T6038] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.054125][ T6038] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.109609][   T70] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.369297][ T6338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.112'.
[  108.676314][ T6350] netlink: 'syz.4.118': attribute type 1 has an invalid length.
[  108.693386][ T6352] netlink: 'syz.1.116': attribute type 11 has an invalid length.
[  108.957571][ T6345] netlink: 'syz.1.116': attribute type 1 has an invalid length.
[  110.743516][ T6463] syzkaller1: entered promiscuous mode
[  110.764337][ T6463] syzkaller1: entered allmulticast mode
[  110.778198][ T6468] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  110.813303][ T6469] tipc: Started in network mode
[  110.818514][ T6469] tipc: Node identity a653e9440408, cluster identity 4711
[  110.839138][ T6469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.891963][ T6470] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  110.954913][ T6469] __nla_validate_parse: 7 callbacks suppressed
[  110.954937][ T6469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'.
[  111.173096][ T6487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.142'.
[  111.202303][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'.
[  111.643841][ T6467] tipc: Disabling bearer <eth:syzkaller0>
[  111.849185][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'.
[  111.908613][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'.
[  111.976797][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.148'.
[  112.235930][ T6506] syzkaller0: entered promiscuous mode
[  112.252950][ T6506] syzkaller0: entered allmulticast mode
[  113.538296][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'.
[  113.561451][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'.
[  113.642059][ T6535] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.156'.
[  113.911449][ T6551] netlink: 'syz.2.160': attribute type 21 has an invalid length.
[  113.946694][ T6561] netlink: 'syz.4.162': attribute type 4 has an invalid length.
[  114.028483][ T6564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.163'.
[  114.127625][ T6570] syzkaller0: entered promiscuous mode
[  114.138846][ T6570] syzkaller0: entered allmulticast mode
[  114.290513][ T6573] openvswitch: netlink: IPv4 tun info is not correct
[  114.426805][ T6579] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  115.015010][ T6597] netlink: 'syz.3.176': attribute type 11 has an invalid length.
[  115.329041][ T6617] netlink: 'syz.4.183': attribute type 10 has an invalid length.
[  115.374029][ T6617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  115.774440][ T5986] IPVS: starting estimator thread 0...
[  115.882038][ T6641] IPVS: using max 25 ests per chain, 60000 per kthread
[  115.998328][ T6647] __nla_validate_parse: 4 callbacks suppressed
[  115.998347][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'.
[  116.020735][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'.
[  116.279196][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.190'.
[  116.326930][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.190'.
[  116.419163][ T6663] tipc: Started in network mode
[  116.438038][ T6663] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[  116.467208][ T6663] tipc: Enabled bearer <udp:syz1>, priority 10
[  116.543430][ T6669] veth1_macvtap: left promiscuous mode
[  116.637389][ T6674] netlink: 204 bytes leftover after parsing attributes in process `syz.4.194'.
[  117.231715][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'.
[  117.243839][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'.
[  117.337984][ T6703] bridge_slave_0: left allmulticast mode
[  117.385249][ T6703] bridge_slave_0: left promiscuous mode
[  117.393815][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.420312][ T6703] bridge_slave_1: left allmulticast mode
[  117.439136][ T6703] bridge_slave_1: left promiscuous mode
[  117.454818][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.485003][ T6703] bond0: (slave bond_slave_0): Releasing backup interface
[  117.507598][ T6703] team0: Port device team_slave_0 removed
[  117.519321][ T6703] team0: Port device team_slave_1 removed
[  117.526529][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.539854][ T6703] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.561795][ T6703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.583400][   T10] tipc: Node number set to 4269801514
[  117.590165][ T6703] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.746029][ T6717] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  117.952574][ T6731] netlink: 'syz.0.212': attribute type 1 has an invalid length.
[  117.987309][ T6731] netlink: 224 bytes leftover after parsing attributes in process `syz.0.212'.
[  118.342890][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'.
[  118.504328][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'.
[  118.626418][ T6771] netlink: 'syz.0.225': attribute type 1 has an invalid length.
[  118.661429][ T6771] block nbd1: not configured, cannot reconfigure
[  118.781464][ T6778] nftables ruleset with unbound chain
[  119.075793][ T6789] team0: No ports can be present during mode change
[  119.107146][ T6789] vlan0: entered promiscuous mode
[  119.130557][ T6789] team0: Port device vlan0 added
[  119.165228][ T6791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.200485][ T6794] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  119.222437][ T6796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.238198][   T30] audit: type=1800 audit(1754803910.643:2): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.232" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=216 res=0 errno=0
[  119.267815][ T6789] syz.1.230 (6789) used greatest stack depth: 20024 bytes left
[  119.819477][ T6825] netlink: 'syz.3.239': attribute type 1 has an invalid length.
[  120.197569][ T6841] sctp: [Deprecated]: syz.3.241 (pid 6841) Use of int in maxseg socket option.
[  120.197569][ T6841] Use struct sctp_assoc_value instead
[  120.287526][ T6849] netlink: 'syz.2.242': attribute type 2 has an invalid length.
[  120.632366][ T6867] tipc: Failed to obtain node identity
[  120.658565][ T6867] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  120.801458][ T6869] Bluetooth: MGMT ver 1.23
[  120.851893][ T6872] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  121.186641][ T6885] geneve2: entered promiscuous mode
[  121.210967][ T6885] geneve2: entered allmulticast mode
[  121.268479][ T6892] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  121.279984][ T6881] IPVS: stopping master sync thread 6892 ...
[  121.513728][ T6903] pimreg: entered allmulticast mode
[  121.720245][ T6915] netlink: 'syz.3.265': attribute type 2 has an invalid length.
[  121.750340][ T6915] __nla_validate_parse: 8 callbacks suppressed
[  121.750357][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'.
[  122.201439][ T6939] netlink: 212264 bytes leftover after parsing attributes in process `syz.3.271'.
[  122.429761][ T6941] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  122.779396][ T6962] netlink: 13 bytes leftover after parsing attributes in process `syz.1.278'.
[  123.137878][ T6982] vlan2: entered promiscuous mode
[  123.146421][ T6982] bridge0: entered promiscuous mode
[  123.192818][ T6983] bond0: entered promiscuous mode
[  123.241028][ T6983] bond_slave_0: entered promiscuous mode
[  123.251562][ T6983] bond_slave_1: entered promiscuous mode
[  123.288321][ T6983] batadv0: entered promiscuous mode
[  123.335795][ T6983] hsr1: entered allmulticast mode
[  123.361522][ T6983] bond0: entered allmulticast mode
[  123.371913][ T6983] bond_slave_0: entered allmulticast mode
[  123.377831][ T6983] bond_slave_1: entered allmulticast mode
[  123.384584][ T6983] batadv0: entered allmulticast mode
[  123.391371][ T6983] 8021q: adding VLAN 0 to HW filter on device hsr1
[  123.605025][ T7003] openvswitch: netlink: Actions may not be safe on all matching packets
[  123.676511][ T7009] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ
�D��UD�w�}�z
[  124.718399][ T7065] IPVS: set_ctl: invalid protocol: 92 172.20.20.34:21
[  124.809509][ T7065] tipc: Enabled bearer <eth:team0>, priority 0
[  124.907284][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[  125.296706][ T7080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.348109][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.312'.
[  125.360271][ T7081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.465697][ T7098] netlink: 64 bytes leftover after parsing attributes in process `syz.2.310'.
[  125.774566][ T7114] netlink: 76 bytes leftover after parsing attributes in process `syz.1.316'.
[  125.862450][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'.
[  125.921601][ T1212] tipc: Node number set to 2723932484
[  126.613727][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.325'.
[  126.707500][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.326'.
[  126.764296][ T7162] __nla_validate_parse: 1 callbacks suppressed
[  126.764319][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.329'.
[  126.848652][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'.
[  127.035892][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'.
[  127.121193][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'.
[  127.264993][ T7191] netlink: 32 bytes leftover after parsing attributes in process `syz.2.335'.
[  127.462560][ T7202] netlink: 'syz.3.337': attribute type 2 has an invalid length.
[  127.496226][ T7204] netlink: 80 bytes leftover after parsing attributes in process `syz.0.338'.
[  127.521492][ T7202] netlink: 'syz.3.337': attribute type 8 has an invalid length.
[  127.536606][ T7205] netlink: 80 bytes leftover after parsing attributes in process `syz.0.338'.
[  127.541105][ T7202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.337'.
[  127.547460][ T7207] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  127.570465][ T7204] netlink: 'syz.0.338': attribute type 1 has an invalid length.
[  127.600413][ T7204] netlink: 228 bytes leftover after parsing attributes in process `syz.0.338'.
[  127.620333][ T7212] netlink: 'syz.2.340': attribute type 21 has an invalid length.
[  127.631992][ T7207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.339'.
[  127.647593][ T7209] netlink: 'syz.0.338': attribute type 1 has an invalid length.
[  128.073792][ T7231] netlink: 'syz.4.346': attribute type 3 has an invalid length.
[  128.287940][ T7240] sch_fq: defrate 0 ignored.
[  128.601768][ T1212] IPVS: starting estimator thread 0...
[  128.607944][ T7260] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  128.722761][ T7266] netlink: 'syz.2.357': attribute type 83 has an invalid length.
[  128.731016][ T7265] netlink: 'syz.2.357': attribute type 83 has an invalid length.
[  128.755184][ T7261] IPVS: using max 26 ests per chain, 62400 per kthread
[  129.256960][ T7300] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[  129.270956][ T7300] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[  130.735040][ T7355] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  131.026935][ T7369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.360460][ T7393] sctp: [Deprecated]: syz.3.395 (pid 7393) Use of int in max_burst socket option deprecated.
[  131.360460][ T7393] Use struct sctp_assoc_value instead
[  131.369805][ T7390] 8021q: adding VLAN 0 to HW filter on device bond1
[  131.413093][ T7393] syz.3.395 (7393) used greatest stack depth: 19736 bytes left
[  132.302920][ T7428] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  132.366110][ T7428] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  132.455334][ T7428] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  132.468121][ T7446] __nla_validate_parse: 13 callbacks suppressed
[  132.468144][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'.
[  132.522393][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'.
[  132.544256][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'.
[  132.652523][ T7453] validate_nla: 4 callbacks suppressed
[  132.652544][ T7453] netlink: 'syz.2.413': attribute type 6 has an invalid length.
[  132.699741][ T7453] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[  132.739475][ T7453] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.413'.
[  132.755814][ T7452] wg1: entered promiscuous mode
[  132.762505][ T7452] wg1: entered allmulticast mode
[  132.941652][ T7461] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  132.974233][ T7461] netlink: 104 bytes leftover after parsing attributes in process `syz.3.415'.
[  133.300735][ T7478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.420'.
[  133.564812][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'.
[  133.614673][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'.
[  133.631660][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'.
[  133.640515][ T7494] netlink: 'syz.1.425': attribute type 11 has an invalid length.
[  133.690525][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'.
[  134.346171][ T7533] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  135.250494][ T7587] bridge_slave_1: left allmulticast mode
[  135.296212][ T7587] bridge_slave_1: left promiscuous mode
[  135.321663][ T7587] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.385460][ T7587] bridge_slave_0: left allmulticast mode
[  135.395533][ T7587] bridge_slave_0: left promiscuous mode
[  135.434938][ T7587] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.071182][ T7620] netlink: 'syz.4.466': attribute type 1 has an invalid length.
[  136.252049][ T7627] veth3: entered promiscuous mode
[  136.350435][ T7631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.359562][ T7631] syzkaller0: entered promiscuous mode
[  136.386478][ T7631] syzkaller0: entered allmulticast mode
[  136.538422][ T7638] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  136.638898][ T7642] tipc: Resetting bearer <eth:syzkaller0>
[  136.680252][ T7630] tipc: Resetting bearer <eth:syzkaller0>
[  136.728471][ T7630] tipc: Disabling bearer <eth:syzkaller0>
[  137.108931][ T7666] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  137.183085][ T7667] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.225555][ T7667] bond0: (slave rose0): Enslaving as an active interface with an up link
[  137.795885][ T7711] __nla_validate_parse: 14 callbacks suppressed
[  137.795909][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'.
[  137.847005][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'.
[  138.085282][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'.
[  138.158426][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'.
[  138.227254][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  138.235789][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  139.310741][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'.
[  139.324206][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'.
[  139.937659][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.516'.
[  140.065664][ T7827] netlink: 'syz.3.518': attribute type 33 has an invalid length.
[  140.118271][ T7827] netlink: 152 bytes leftover after parsing attributes in process `syz.3.518'.
[  140.129804][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'.
[  140.150828][ T7835] netlink: 'syz.0.520': attribute type 3 has an invalid length.
[  140.163836][ T7835] netlink: 766 bytes leftover after parsing attributes in process `syz.0.520'.
[  141.147657][ T7885] netlink: 'syz.0.534': attribute type 9 has an invalid length.
[  141.221630][ T7885] netlink: 'syz.0.534': attribute type 9 has an invalid length.
[  141.694849][ T7918] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  141.711789][ T7918] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  142.268978][ T7955] !
: renamed from dummy0 (while UP)
[  142.927645][ T7977] __nla_validate_parse: 41 callbacks suppressed
[  142.927665][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'.
[  143.017577][ T7977] netlink: 'syz.0.556': attribute type 8 has an invalid length.
[  143.374106][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.564'.
[  143.432130][ T8008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.564'.
[  143.863649][ T8023] netlink: 'syz.1.567': attribute type 1 has an invalid length.
[  143.886947][ T8023] netlink: 236 bytes leftover after parsing attributes in process `syz.1.567'.
[  143.914778][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.568'.
[  143.970531][ T8030] netlink: 6 bytes leftover after parsing attributes in process `syz.3.569'.
[  143.976884][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'.
[  144.004797][ T8030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.075000][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.568'.
[  144.310543][ T8044] netlink: 372 bytes leftover after parsing attributes in process `syz.0.571'.
[  144.819976][ T8052] tipc: Started in network mode
[  144.851673][ T8052] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  144.860578][ T8052] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  144.962106][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'.
[  145.648280][   T24] IPVS: starting estimator thread 0...
[  145.668651][ T8090] IPVS: set_ctl: invalid protocol: 60319 24.0.0.0:0
[  145.761955][ T8091] IPVS: using max 24 ests per chain, 57600 per kthread
[  145.971584][   T10] tipc: Node number set to 10136234
[  146.068770][ T6038] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  146.130114][ T8127] netlink: 'syz.2.585': attribute type 1 has an invalid length.
[  147.163446][ T8163] bridge: RTM_NEWNEIGH with invalid state 0x8
[  147.628266][ T8188] IPv6: NLM_F_CREATE should be specified when creating new route
[  147.848858][ T8198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.106174][ T8168] __nla_validate_parse: 6 callbacks suppressed
[  148.106196][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'.
[  148.232530][ T8181] netlink: 'syz.1.601': attribute type 1 has an invalid length.
[  148.240587][ T8181] netlink: 236 bytes leftover after parsing attributes in process `syz.1.601'.
[  148.282200][ T8184] netlink: 'syz.3.604': attribute type 23 has an invalid length.
[  148.434503][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'.
[  148.435220][ T8212] netlink: 232 bytes leftover after parsing attributes in process `syz.0.609'.
[  148.703289][ T8225] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  149.294240][ T8247] Bluetooth: MGMT ver 1.23
[  149.312257][ T8250] netlink: zone id is out of range
[  149.317426][ T8250] netlink: zone id is out of range
[  149.376476][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.621'.
[  149.385621][ T8250] netlink: zone id is out of range
[  149.390766][ T8250] netlink: zone id is out of range
[  149.452859][ T8250] netlink: zone id is out of range
[  149.481965][ T8250] netlink: zone id is out of range
[  149.487182][ T8250] netlink: zone id is out of range
[  149.564599][ T8250] netlink: zone id is out of range
[  149.569826][ T8250] netlink: zone id is out of range
[  149.624977][ T8250] netlink: zone id is out of range
[  150.198145][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[  150.515090][ T8311] erspan0: entered promiscuous mode
[  150.523402][ T8311] erspan0: entered allmulticast mode
[  150.834366][ T8326] veth0_virt_wifi: renamed from veth0_vlan
[  150.866300][ T8316] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  150.879827][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'.
[  151.082927][ T8342] netlink: 'syz.0.645': attribute type 2 has an invalid length.
[  151.520087][ T8368] gretap1: entered promiscuous mode
[  151.545837][ T8368] gretap1: entered allmulticast mode
[  151.561936][ T8376] netlink: 'syz.0.653': attribute type 1 has an invalid length.
[  151.606241][ T8376] netlink: 'syz.0.653': attribute type 1 has an invalid length.
[  151.628141][ T8371] netlink: 165 bytes leftover after parsing attributes in process `syz.4.652'.
[  151.690727][ T8377] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.652'.
[  151.879387][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.658'.
[  152.205472][ T8405] netlink: 'syz.4.664': attribute type 29 has an invalid length.
[  152.271303][ T8407] netlink: 'syz.4.664': attribute type 29 has an invalid length.
[  152.361312][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.482193][ T8410] can: request_module (can-proto-0) failed.
[  153.157725][ T8451] __nla_validate_parse: 6 callbacks suppressed
[  153.157748][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'.
[  153.161741][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'.
[  153.171673][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.676'.
[  153.237143][ T5863] Bluetooth: hci4: link tx timeout
[  153.246301][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.256306][   T51] Bluetooth: hci4: link tx timeout
[  153.261641][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.269696][   T51] Bluetooth: hci4: link tx timeout
[  153.274909][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.836689][ T8490] netlink: 'syz.2.689': attribute type 1 has an invalid length.
[  153.870754][ T8490] netlink: 'syz.2.689': attribute type 2 has an invalid length.
[  154.223160][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'.
[  154.571336][ T5527] veth0_virt_wifi: left promiscuous mode
[  154.629107][ T5527] veth0_virt_wifi: entered promiscuous mode
[  154.842383][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'.
[  155.335011][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  155.497563][ T8557] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.695517][ T8548] syzkaller0: entered promiscuous mode
[  155.706469][ T8548] syzkaller0: entered allmulticast mode
[  155.715853][ T8548] tipc: Resetting bearer <eth:syzkaller0>
[  155.751760][ T8546] tipc: Resetting bearer <eth:syzkaller0>
[  157.256781][ T8546] tipc: Disabling bearer <eth:syzkaller0>
[  157.508630][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'.
[  158.012922][ T8637] net_ratelimit: 396 callbacks suppressed
[  158.012946][ T8637] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[  158.530424][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.538331][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.870004][ T8682] netlink: 'syz.1.737': attribute type 4 has an invalid length.
[  159.281810][ T8703] xfrm1: entered allmulticast mode
[  159.857054][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.752'.
[  159.880894][ T8736] Bluetooth: MGMT ver 1.23
[  160.083607][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'.
[  160.155386][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'.
[  160.484809][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'.
[  160.522802][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.759'.
[  160.542497][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'.
[  160.543086][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'.
[  160.935775][ T8782] bridge_slave_0: left allmulticast mode
[  160.944217][ T8782] bridge_slave_0: left promiscuous mode
[  160.950418][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.981204][ T8782] bridge_slave_1: left allmulticast mode
[  161.015656][ T8782] bridge_slave_1: left promiscuous mode
[  161.074180][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.124019][ T8799] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  161.219412][ T8782] bond0: (slave bond_slave_0): Releasing backup interface
[  161.349830][ T8782] bond0: (slave bond_slave_1): Releasing backup interface
[  161.412199][ T8782] team0: Port device team_slave_0 removed
[  161.456689][ T8782] team0: Port device team_slave_1 removed
[  161.477553][ T8782] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.492021][ T8782] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.502106][ T8811] netlink: 'syz.3.767': attribute type 1 has an invalid length.
[  161.510394][ T8782] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.537303][ T8782] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.605170][ T8782] team0: Port device vlan0 removed
[  161.650400][ T8791] team0: Mode changed to "activebackup"
[  161.782677][ T1149] tipc: Resetting bearer <eth:team0>
[  161.976265][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'.
[  162.101976][ T8836] netlink: 'syz.0.772': attribute type 1 has an invalid length.
[  162.252177][ T8841] netlink: 128 bytes leftover after parsing attributes in process `syz.2.774'.
[  162.254472][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.775'.
[  162.375345][ T8851] vlan0: entered allmulticast mode
[  162.407913][ T8851] bridge0: entered allmulticast mode
[  162.441411][ T8851] bridge1: port 1(vlan0) entered blocking state
[  162.448307][ T8851] bridge1: port 1(vlan0) entered disabled state
[  162.470654][ T8851] vlan0: entered promiscuous mode
[  162.520144][ T8851] bridge0: entered promiscuous mode
[  162.552655][ T8850] batadv_slave_0: entered allmulticast mode
[  162.561658][ T8843] batadv_slave_0: left allmulticast mode
[  162.865621][ T8844] gretap1: entered promiscuous mode
[  162.871885][ T8844] bridge1: port 2(gretap1) entered blocking state
[  162.878750][ T8844] bridge1: port 2(gretap1) entered disabled state
[  162.887979][ T8844] gretap1: entered allmulticast mode
[  162.906401][ T8857] netlink: 'syz.2.778': attribute type 5 has an invalid length.
[  162.942342][ T8871] netlink: 'syz.3.781': attribute type 2 has an invalid length.
[  162.996530][ T8871] dvmrp0: entered allmulticast mode
[  164.783591][ T8961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.088353][ T8981] __nla_validate_parse: 8 callbacks suppressed
[  165.088376][ T8981] netlink: 96 bytes leftover after parsing attributes in process `syz.1.807'.
[  165.389595][ T8992] netlink: 112 bytes leftover after parsing attributes in process `syz.1.810'.
[  165.772835][ T9016] netlink: 44 bytes leftover after parsing attributes in process `syz.3.814'.
[  165.783363][ T9014] netlink: 'syz.1.816': attribute type 10 has an invalid length.
[  165.842869][ T9014] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  165.862373][ T9019] netlink: 'syz.1.816': attribute type 11 has an invalid length.
[  165.870532][ T9019] netlink: 'syz.1.816': attribute type 11 has an invalid length.
[  165.879643][ T9019] netlink: 152 bytes leftover after parsing attributes in process `syz.1.816'.
[  166.478127][   T44] IPVS: starting estimator thread 0...
[  166.571998][ T9038] IPVS: using max 24 ests per chain, 57600 per kthread
[  167.536431][ T9085] wg1: entered promiscuous mode
[  167.550432][ T9085] wg1: entered allmulticast mode
[  167.668153][ T9090] Bluetooth: MGMT ver 1.23
[  167.839181][ T9092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.837'.
[  168.179581][ T9106] team0: Device gtp0 is of different type
[  168.464308][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'.
[  168.782981][ T9136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.927949][ T9140] netlink: 60 bytes leftover after parsing attributes in process `syz.4.848'.
[  168.962487][ T9142] IPVS: length: 157 != 24
[  169.394396][ T9165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'.
[  169.485166][ T9165] veth1_to_team: mtu less than device minimum
[  169.740209][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.860'.
[  169.784414][ T9186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.860'.
[  170.249951][ T9212] netlink: 'syz.2.867': attribute type 21 has an invalid length.
[  170.318243][ T9216] __nla_validate_parse: 4 callbacks suppressed
[  170.318264][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  170.342845][ T9212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.867'.
[  170.373791][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  170.386057][ T9220] netlink: 68 bytes leftover after parsing attributes in process `syz.1.868'.
[  170.418068][ T9209] team0: Mode changed to "loadbalance"
[  170.463712][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.866'.
[  170.487525][ T9216] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  170.556010][ T9218] vlan0: entered promiscuous mode
[  170.571633][ T9218] team0: Port device vlan0 added
[  170.586278][ T9212] pimreg: left allmulticast mode
[  171.382020][ T9268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.881'.
[  171.501189][ T9271] netlink: 'syz.0.882': attribute type 21 has an invalid length.
[  171.557470][ T9275] dvmrp1: entered allmulticast mode
[  171.577974][ T9271] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[  171.596063][ T9280] netlink: 284 bytes leftover after parsing attributes in process `syz.1.885'.
[  172.124396][ T9306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.156698][ T9306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.237448][ T9314] tipc: Invalid UDP bearer configuration
[  172.237509][ T9314] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  172.742687][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'.
[  172.765248][ T9334] netlink: 'syz.1.900': attribute type 18 has an invalid length.
[  172.771584][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.902'.
[  172.777293][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.900'.
[  172.798562][ T9334] netlink: 'syz.1.900': attribute type 18 has an invalid length.
[  173.106761][   T30] audit: type=1800 audit(1754803964.533:3): pid=9355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.905" name="memory.events" dev="tmpfs" ino=933 res=0 errno=0
[  173.198168][ T9344] syzkaller1: entered promiscuous mode
[  173.238273][ T9344] syzkaller1: entered allmulticast mode
[  173.316175][ T9367] netlink: 'syz.4.908': attribute type 12 has an invalid length.
[  173.428336][ T9371] netlink: 'syz.0.910': attribute type 1 has an invalid length.
[  173.629701][ T9380] IPVS: set_ctl: invalid protocol: 43 172.20.20.18:20000
[  173.646577][ T9389] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  173.658649][ T9389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  173.689334][ T9380] ieee802154 phy0 wpan0: entered promiscuous mode
[  173.724362][ T9380] ieee802154 phy0 wpan0: entered allmulticast mode
[  174.292528][ T9424] netlink: 'syz.4.923': attribute type 6 has an invalid length.
[  199.655306][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  201.193182][ T9556] __nla_validate_parse: 6 callbacks suppressed
[  201.193205][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[  201.290622][ T9565] netlink: 52 bytes leftover after parsing attributes in process `syz.1.925'.
[  201.560914][ T9581] netlink: 'syz.3.934': attribute type 1 has an invalid length.
[  201.568622][ T9581] netlink: 224 bytes leftover after parsing attributes in process `syz.3.934'.
[  201.591220][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'.
[  201.619598][ T9586] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  202.013243][ T9604] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  202.042410][ T9605] veth1_virt_wifi: entered allmulticast mode
[  202.341008][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'.
[  202.430348][ T9617] sctp: [Deprecated]: syz.4.947 (pid 9617) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.430348][ T9617] Use struct sctp_sack_info instead
[  202.464566][ T9610] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.472663][ T9610] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.550790][ T9624] netlink: 324 bytes leftover after parsing attributes in process `syz.3.948'.
[  202.803575][ T9610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.848761][ T9610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.195078][ T9610] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  203.231519][ T1149] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.256290][ T1149] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.312803][ T1149] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.331001][ T1149] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  203.501598][ T9649] netlink: 'syz.4.953': attribute type 11 has an invalid length.
[  203.540765][ T9649] netlink: 224 bytes leftover after parsing attributes in process `syz.4.953'.
[  204.066759][ T9676] tipc: Started in network mode
[  204.093903][ T9676] tipc: Node identity 080211000001, cluster identity 4711
[  204.137456][ T9676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.241834][ T9676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  204.357357][ T9676] tipc: Resetting bearer <eth:syzkaller0>
[  204.386398][ T9676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.667957][ T9711] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.967'.
[  204.719418][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'.
[  204.739387][ T9714] chnl_net:caif_netlink_parms(): no params data found
[  204.877493][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'.
[  205.222486][ T5992] tipc: Node number set to 134418688
[  206.123411][ T9774] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  206.217972][ T9778] syzkaller0: entered promiscuous mode
[  206.222911][ T9783] __nla_validate_parse: 5 callbacks suppressed
[  206.222937][ T9783] netlink: 80 bytes leftover after parsing attributes in process `syz.4.991'.
[  206.223879][ T9778] syzkaller0: entered allmulticast mode
[  206.534951][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.994'.
[  206.655263][ T9808] macvlan0: entered allmulticast mode
[  206.667051][ T9808] veth1_vlan: entered allmulticast mode
[  206.675273][ T9808] veth1_vlan: left allmulticast mode
[  206.775708][ T9808] macvlan0 (unregistering): left allmulticast mode
[  206.901772][ T9819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.298144][ T9840] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1007'.
[  207.308684][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'.
[  207.326043][ T9840] netlink: 5532 bytes leftover after parsing attributes in process `syz.4.1007'.
[  207.739174][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'.
[  208.478043][ T9819] syzkaller0: entered promiscuous mode
[  208.483974][ T9819] syzkaller0: entered allmulticast mode
[  208.493784][ T9831] tipc: Resetting bearer <eth:syzkaller0>
[  208.626952][ T9818] tipc: Resetting bearer <eth:syzkaller0>
[  209.802993][ T9818] tipc: Disabling bearer <eth:syzkaller0>
[  209.834476][ T9861] ip6gre1: entered allmulticast mode
[  210.087167][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'.
[  210.132608][ T9882] chnl_net:caif_netlink_parms(): no params data found
[  210.140729][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'.
[  210.910106][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'.
[  211.148937][ T9902] raw_sendmsg: syz.3.1021 forgot to set AF_INET. Fix it!
[  211.242520][ T9902] syz.3.1021 (9902) used greatest stack depth: 19592 bytes left
[  211.378094][ T9908] netlink: 'syz.0.1023': attribute type 1 has an invalid length.
[  211.418364][ T9908] wlan1 speed is unknown, defaulting to 1000
[  211.443708][ T9916] sctp: [Deprecated]: syz.3.1027 (pid 9916) Use of struct sctp_assoc_value in delayed_ack socket option.
[  211.443708][ T9916] Use struct sctp_sack_info instead
[  211.453108][ T9908] wlan1 speed is unknown, defaulting to 1000
[  211.515208][ T9908] wlan1 speed is unknown, defaulting to 1000
[  211.605700][ T9908] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  211.648893][ T9908] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  211.691725][ T9908] wlan1 speed is unknown, defaulting to 1000
[  211.708906][ T9908] wlan1 speed is unknown, defaulting to 1000
[  211.718446][ T9908] wlan1 speed is unknown, defaulting to 1000
[  211.754590][ T9908] wlan1 speed is unknown, defaulting to 1000
[  211.769870][ T9925] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.1030'.
[  211.790200][ T9908] wlan1 speed is unknown, defaulting to 1000
[  211.811198][ T9923] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  212.179455][ T9940] netlink: 'syz.0.1034': attribute type 21 has an invalid length.
[  212.262629][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1034'.
[  212.262662][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1034'.
[  212.318824][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'.
[  212.485120][ T9956] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1039'.
[  212.547845][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1040'.
[  212.609956][ T9959] mac80211_hwsim hwsim3 �
: renamed from wlan1
[  212.775075][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1044'.
[  212.852664][ T9971] 8021q: adding VLAN 0 to HW filter on device bond1
[  213.015940][ T9998] syzkaller0: entered promiscuous mode
[  213.028722][ T9998] syzkaller0: entered allmulticast mode
[  213.099100][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.109715][T10003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.119610][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.127749][T10003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.990517][T10030] tls_set_device_offload: netdev not found
[  214.523148][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'.
[  214.564102][T10018] nbd: must specify a size in bytes for the device
[  215.734372][T10122] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1081'.
[  215.901355][T10137] netlink: 'syz.3.1082': attribute type 1 has an invalid length.
[  216.040803][T10140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  216.093852][T10153] Driver unsupported XDP return value 0 on prog  (id 255) dev N/A, expect packet loss!
[  216.232324][T10163] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  216.254109][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'.
[  216.359569][T10157] IPVS: Scheduler module ip_vs_sip not found
[  216.769071][T10181] netlink: 'syz.4.1093': attribute type 1 has an invalid length.
[  216.807968][T10178] netlink: 'syz.4.1093': attribute type 1 has an invalid length.
[  216.821528][T10190] __nla_validate_parse: 2 callbacks suppressed
[  216.821556][T10190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1096'.
[  216.848708][T10178] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  216.868935][T10181] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  216.984560][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'.
[  217.034239][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'.
[  217.067883][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'.
[  217.100502][ T5182] Bluetooth: hci1: command 0x0406 tx timeout
[  217.103502][ T5873] Bluetooth: hci3: command 0x0406 tx timeout
[  217.108264][ T5182] Bluetooth: hci2: command 0x0406 tx timeout
[  217.700413][T10231] netlink: 'syz.3.1110': attribute type 5 has an invalid length.
[  217.816938][T10239] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  217.907119][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1114'.
[  217.981343][T10248] netlink: 'syz.1.1115': attribute type 24 has an invalid length.
[  218.063900][T10255] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[  218.082645][T10253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1117'.
[  218.114926][T10256] ip6gre0: Master is either lo or non-ether device
[  218.157854][T10260] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1119'.
[  218.177415][T10260] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1119'.
[  218.300139][T10268] syzkaller1: entered promiscuous mode
[  218.305908][T10268] syzkaller1: entered allmulticast mode
[  218.495212][T10280] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  218.506123][T10280] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  218.862770][T10306] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1133'.
[  218.891967][T10306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1133'.
[  218.937232][T10310] netlink: 'syz.0.1134': attribute type 12 has an invalid length.
[  219.393743][T10333] netlink: zone id is out of range
[  219.400610][T10333] netlink: del zone limit has 4 unknown bytes
[  219.693798][T10342] veth1_to_bond: entered allmulticast mode
[  219.809441][T10342] bond0: (slave bond_slave_1): Releasing backup interface
[  219.837297][T10358] netlink: 'syz.4.1152': attribute type 10 has an invalid length.
[  219.920459][T10342] veth1_to_bond (unregistering): left allmulticast mode
[  219.959926][T10358] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  220.194042][T10375] IPVS: set_ctl: invalid protocol: 31248 172.20.20.16:20002
[  220.238238][T10377] : renamed from hsr0
[  220.368202][T10384] netlink: 'syz.1.1161': attribute type 1 has an invalid length.
[  220.386436][T10387] netlink: 'syz.4.1159': attribute type 1 has an invalid length.
[  220.401160][T10386] netlink: zone id is out of range
[  220.406612][T10386] netlink: get zone limit has 8 unknown bytes
[  220.485522][T10392] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  220.620686][T10399] netlink: 'syz.3.1167': attribute type 4 has an invalid length.
[  220.639674][T10399] `: renamed from bond0 (while UP)
[  221.034631][T10404] netlink: 'syz.1.1165': attribute type 1 has an invalid length.
[  221.805269][T10457] openvswitch: netlink: Unknown nsh attribute 0
[  221.817579][T10457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.897337][T10462] netlink: 'syz.3.1186': attribute type 10 has an invalid length.
[  221.908356][T10463] netlink: 'syz.3.1186': attribute type 10 has an invalid length.
[  221.932059][T10466] bridge4: the hash_elasticity option has been deprecated and is always 16
[  221.953553][T10468] __nla_validate_parse: 16 callbacks suppressed
[  221.953575][T10468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1185'.
[  221.972767][T10462] `: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  222.190785][T10473] tunl0: entered promiscuous mode
[  222.209164][T10473] netlink: 'syz.4.1188': attribute type 3 has an invalid length.
[  222.245145][T10473] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1188'.
[  222.715956][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'.
[  222.759222][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'.
[  223.176039][T10520] netlink: 'syz.0.1199': attribute type 1 has an invalid length.
[  223.397085][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'.
[  223.458423][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'.
[  223.514657][T10548] netlink: 'syz.4.1209': attribute type 1 has an invalid length.
[  223.533332][T10548] netlink: 'syz.4.1209': attribute type 1 has an invalid length.
[  223.671245][T10558] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1212'.
[  223.682665][T10556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1211'.
[  223.701901][T10558] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1212'.
[  223.794755][T10532] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  223.943094][T10561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1213'.
[  224.571364][T10609] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  225.697709][T10657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.726911][T10655] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  225.858223][T10665] openvswitch: netlink: Flow key attr not present in new flow.
[  226.069488][T10680] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  226.076452][T10680] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  226.141047][   T36] wlan1: Trigger new scan to find an IBSS to join
[  226.172000][   T36] ------------[ cut here ]------------
[  226.177539][   T36] WARNING: CPU: 0 PID: 36 at net/mac80211/scan.c:1235 ieee80211_request_ibss_scan+0x701/0x790
[  226.188492][   T36] Modules linked in:
[  226.193836][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  226.205756][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  226.216767][   T36] Workqueue: events_unbound cfg80211_wiphy_work
[  226.223268][   T36] RIP: 0010:ieee80211_request_ibss_scan+0x701/0x790
[  226.230099][   T36] Code: e8 f4 3d d5 f6 eb 05 e8 ed 3d d5 f6 b8 ea ff ff ff e9 2b fa ff ff e8 de 3d d5 f6 90 0f 0b 90 e9 e6 f9 ff ff e8 d0 3d d5 f6 90 <0f> 0b 90 eb dd 48 c7 c1 70 77 a3 8f 80 e1 07 80 c1 03 38 c1 0f 8c
[  226.250474][   T36] RSP: 0018:ffffc90000ac7810 EFLAGS: 00010293
[  226.256823][   T36] RAX: ffffffff8aea6de0 RBX: 0000000000000000 RCX: ffff888140ef9e00
[  226.265044][   T36] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  226.273609][   T36] RBP: dffffc0000000000 R08: 0000000000000000 R09: 1ffff92000158eb8
[  226.281729][   T36] R10: dffffc0000000000 R11: fffff52000158eb9 R12: ffff88807bef8e40
[  226.289779][   T36] R13: ffff88807befcf78 R14: 0000000000000000 R15: ffff88807bef8e80
[  226.297883][   T36] FS:  0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000
[  226.307287][   T36] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  226.314626][   T36] CR2: 00007f8e3766bf98 CR3: 000000000df36000 CR4: 00000000003526f0
[  226.322907][   T36] Call Trace:
[  226.326238][   T36]  <TASK>
[  226.329345][   T36]  ieee80211_ibss_work+0xdec/0x1060
[  226.335076][   T36]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  226.340801][   T36]  ? ieee80211_iface_work+0x1224/0x12d0
[  226.346486][   T36]  ? rcu_is_watching+0x15/0xb0
[  226.351361][   T36]  cfg80211_wiphy_work+0x2b8/0x470
[  226.356528][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  226.362763][   T36]  process_scheduled_works+0xade/0x17b0
[  226.368401][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  226.374649][   T36]  worker_thread+0x8a0/0xda0
[  226.379332][   T36]  kthread+0x70e/0x8a0
[  226.383560][   T36]  ? __pfx_worker_thread+0x10/0x10
[  226.388727][   T36]  ? __pfx_kthread+0x10/0x10
[  226.393783][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.399040][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.404385][   T36]  ? __pfx_kthread+0x10/0x10
[  226.409036][   T36]  ret_from_fork+0x3fc/0x770
[  226.413802][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  226.418977][   T36]  ? __switch_to_asm+0x39/0x70
[  226.424669][   T36]  ? __switch_to_asm+0x33/0x70
[  226.429643][   T36]  ? __pfx_kthread+0x10/0x10
[  226.434420][   T36]  ret_from_fork_asm+0x1a/0x30
[  226.439412][   T36]  </TASK>
[  226.442582][   T36] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  226.449918][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  226.461736][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  226.471816][   T36] Workqueue: events_unbound cfg80211_wiphy_work
[  226.478097][   T36] Call Trace:
[  226.481413][   T36]  <TASK>
[  226.484368][   T36]  dump_stack_lvl+0x99/0x250
[  226.488986][   T36]  ? __asan_memcpy+0x40/0x70
[  226.493612][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  226.498922][   T36]  ? __pfx__printk+0x10/0x10
[  226.503551][   T36]  vpanic+0x281/0x750
[  226.507553][   T36]  ? __pfx__printk+0x10/0x10
[  226.512191][   T36]  ? __pfx_vpanic+0x10/0x10
[  226.516805][   T36]  ? is_bpf_text_address+0x292/0x2b0
[  226.522127][   T36]  panic+0xb9/0xc0
[  226.525867][   T36]  ? __pfx_panic+0x10/0x10
[  226.530313][   T36]  __warn+0x31b/0x4b0
[  226.534317][   T36]  ? ieee80211_request_ibss_scan+0x701/0x790
[  226.540315][   T36]  ? ieee80211_request_ibss_scan+0x701/0x790
[  226.546307][   T36]  report_bug+0x2be/0x4f0
[  226.550652][   T36]  ? ieee80211_request_ibss_scan+0x701/0x790
[  226.556651][   T36]  ? ieee80211_request_ibss_scan+0x701/0x790
[  226.562650][   T36]  ? ieee80211_request_ibss_scan+0x703/0x790
[  226.568648][   T36]  handle_bug+0x84/0x160
[  226.572914][   T36]  exc_invalid_op+0x1a/0x50
[  226.577441][   T36]  asm_exc_invalid_op+0x1a/0x20
[  226.582306][   T36] RIP: 0010:ieee80211_request_ibss_scan+0x701/0x790
[  226.588913][   T36] Code: e8 f4 3d d5 f6 eb 05 e8 ed 3d d5 f6 b8 ea ff ff ff e9 2b fa ff ff e8 de 3d d5 f6 90 0f 0b 90 e9 e6 f9 ff ff e8 d0 3d d5 f6 90 <0f> 0b 90 eb dd 48 c7 c1 70 77 a3 8f 80 e1 07 80 c1 03 38 c1 0f 8c
[  226.608647][   T36] RSP: 0018:ffffc90000ac7810 EFLAGS: 00010293
[  226.614737][   T36] RAX: ffffffff8aea6de0 RBX: 0000000000000000 RCX: ffff888140ef9e00
[  226.622724][   T36] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  226.630803][   T36] RBP: dffffc0000000000 R08: 0000000000000000 R09: 1ffff92000158eb8
[  226.638895][   T36] R10: dffffc0000000000 R11: fffff52000158eb9 R12: ffff88807bef8e40
[  226.647073][   T36] R13: ffff88807befcf78 R14: 0000000000000000 R15: ffff88807bef8e80
[  226.655065][   T36]  ? ieee80211_request_ibss_scan+0x700/0x790
[  226.661278][   T36]  ieee80211_ibss_work+0xdec/0x1060
[  226.666499][   T36]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  226.672152][   T36]  ? ieee80211_iface_work+0x1224/0x12d0
[  226.677716][   T36]  ? rcu_is_watching+0x15/0xb0
[  226.682532][   T36]  cfg80211_wiphy_work+0x2b8/0x470
[  226.687666][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  226.693402][   T36]  process_scheduled_works+0xade/0x17b0
[  226.698988][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  226.704995][   T36]  worker_thread+0x8a0/0xda0
[  226.709623][   T36]  kthread+0x70e/0x8a0
[  226.713716][   T36]  ? __pfx_worker_thread+0x10/0x10
[  226.718844][   T36]  ? __pfx_kthread+0x10/0x10
[  226.723455][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.728671][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  226.733920][   T36]  ? __pfx_kthread+0x10/0x10
[  226.738532][   T36]  ret_from_fork+0x3fc/0x770
[  226.743143][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  226.748274][   T36]  ? __switch_to_asm+0x39/0x70
[  226.753057][   T36]  ? __switch_to_asm+0x33/0x70
[  226.757842][   T36]  ? __pfx_kthread+0x10/0x10
[  226.762450][   T36]  ret_from_fork_asm+0x1a/0x30
[  226.767249][   T36]  </TASK>
[  226.770634][   T36] Kernel Offset: disabled
[  226.774967][   T36] Rebooting in 86400 seconds..