last executing test programs:

7.315433167s ago: executing program 1 (id=3160):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000140)=0x1040, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4)
recvmmsg(r4, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/172, 0xac}, {&(0x7f0000000440)=""/227, 0xe3}, {0x0}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000ac0)=""/4126, 0x101e}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/218, 0xda}], 0x7}, 0x80000004}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x10000, 0x0)
accept4(r0, 0x0, 0x0, 0x80000)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002200811070f9586069bf02e00f", 0x11}, {&(0x7f0000000300)="0c74c75350f4a548092734fe1845473bbce6798a60e972b055b84ef1af", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.079164522s ago: executing program 1 (id=3162):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
listen(r0, 0x5)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$inet6(0xa, 0x3, 0x3c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040))
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x578}], 0x1)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010)

6.539504906s ago: executing program 1 (id=3165):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xc0, 0x3ed, 0x4, 0x70bd28, 0x25dfdbfb, "186ee1395c73314bbe7e876e729bd9c3eb9db49b41ea1160a94cd111aa9aa69a223fd0c5b8ed3bfa0bfdbd2423680101625d885523834d415d06cd6d08362c4bce024141f580fde3f99bf4ab11ab30d5e3dd9509e9efaaaba302a39efa571aab344efe2f52c2e9dd44af038b4b07ce3b81dbee0d252842aff681897e5c853ea042bd574da018c0ec1cd49e111904a41ffc8ebbf40c4af748db7c7825bca43ec771de49cb152166df16cac9fef5", ["", "", ""]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x402c081) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000acf100060000000000000007186a000007000000000000000500000095000000d600000000"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94)

6.433761883s ago: executing program 1 (id=3167):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x6}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000000000080000000000000000085000000270000009500000000000300"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014})
r7 = accept4(r2, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000240)=0x3, 0x0)
sendmsg$key(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x5, 0x4, 0x6, 0x2, 0x0, 0x70bd29, 0x25dfdbfb}, 0x10}}, 0x4001)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001})
r8 = epoll_create1(0x80000)
epoll_pwait(r8, &(0x7f0000000600)=[{}], 0x1, 0x200, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'})

5.375475879s ago: executing program 1 (id=3176):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0)
sendto$x25(r0, &(0x7f0000000140)="91ec7a0aa5249d78baa1f1232aeab1c9e4c63a72eddcb5b2ac10ac41a991555545dbf4f642f3936bfb597e9ad931b20b4b739f51741eeb6271eaf5524f183f370336ad09ff434f3d6f7de0144df51e8a627b73f4073bc76839dd16d09045f276bd", 0x61, 0x20008040, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x10100, 0x0, 0x0)

5.246461184s ago: executing program 1 (id=3177):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000002030103000000000000000000000008080001000100000909000200000000070000000059e19c07d7e2b88b1336fcfe3b286308d0c2cd03701c8c20c66a5b779c3f5af8184cef"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000001c00)={0x0, &(0x7f0000000180)}, 0x10)
unshare(0x6a040000)
socket$kcm(0x10, 0x2, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000003080))
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
shutdown(r2, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r6}, 0x99)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000600), &(0x7f0000000340)=@udp=r5, 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @local, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r2, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x2)

3.272964265s ago: executing program 4 (id=3191):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x4, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x24000000)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, 0x0, 0x15)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
accept4(r4, 0x0, 0x0, 0x80000)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r9, 0x713, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1e9a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x40020)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0)
socket(0x14, 0x6, 0x4)
close(0x4)

2.250328248s ago: executing program 3 (id=3198):
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x15)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800)
recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002580)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/192, 0xc0}, 0x8}], 0x1, 0x20, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x16)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x50, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x92}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xfffffffffffffe15, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x44012)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(0x3)
sendto$inet6(r4, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
shutdown(r4, 0x1)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="8dca5f87", 0x4)

2.115316543s ago: executing program 3 (id=3199):
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
listen(r1, 0xfffffffd)
r2 = accept4(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x80}, &(0x7f00000000c0)=0x8)
sendto$inet(r1, &(0x7f0000000180)="252763be170ca81af7d7187cc490ef3604cc3e50e82da0fc1f90befa92ca83b9b4a396a1bda3debaa9e2debb9561f7affdd0a880c765048ce4e869b77afe29ff357ae7a38be618c83da326c60aac7d59fa0647e8acff3bd9f9be7883cce2b62b670f352c8f911ec0f15cdf0e8f2092d05a6df675ce9bf629d8225d21c5ecca239efd8b8637555adb3bae106c7c965d758d426e068f1653932e68d21eab", 0x9d, 0x20000001, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0xfc, 0x10, 0x801, 0x0, 0x3, {0x0, 0x0, 0x0, r3, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xb0}]}, @IFLA_AF_SPEC={0xc8, 0x1a, 0x0, 0x1, [@AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0x5}, {0x8, 0xe, 0x0, 0x0, 0xae42}, {0x8, 0x1a, 0x0, 0x0, 0x8}, {0x8, 0xa, 0x0, 0x0, 0x7d}]}}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x78, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xd}]}, @AF_BRIDGE={0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2004c014}, 0x8000)

2.043230164s ago: executing program 2 (id=3200):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
r0 = socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="020d0000000000000000000000005ac92de8c4b330aab492420f0000080012000200020000000000000000001000320003000000000000000000000010b1c800000000000000000000000000fc020000000000000000000000000000030005000000000002000000acaa000000000000000003000600000000000200"/138], 0x80}}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000002c0)={'gretap0\x00', <r4=>0x0, 0x7800, 0x0, 0x0, 0x2, {{0x6, 0x4, 0x1, 0xa, 0x18, 0x66, 0x0, 0xf7, 0x2f, 0x0, @multicast2, @local, {[@end]}}}}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @restrict={0xf, 0x0, 0x0, 0xb, 0x2}, @typedef={0x8, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000700)=""/148, 0x4c, 0x94, 0x1, 0x2, 0x10000, @value=r2}, 0x28) (async)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0xa, 0x0, 0x76f5, 0x2, r3, 0x7ff, '\x00', r4, r5, 0x3, 0x0, 0x1, 0xb}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000900)}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f0000000240)="ed84e833177f3cbfcdc822c622e5286a519b3c9e3ab89405857d0eac7c6f6c702bf0553d1bfc697d1a074f03713b861189b186cbd98f742fe54d9ee4fd758878f7463867a7dae288bd7e5702a19fb400649fc3afcd838b8f8dbf2246bce1b3cb951423104963beec4430"}, 0x20) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000002002ec8000000000a0000008500000041000000850000002a00009196520cd30e8e0095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001800010000000000000000001d01000000000200000000000000000019d0606ac3c3a68f07000000080005000000f700aac7a93c9c429beca877d3306e88321724d097db8d45c2e55e4f59cac56fefd6da5bb110f297648688794970867a8509aa1be1e45706c60c0eea889df167b71b89e629e2486da98446e88730758e084cca3f9fdf1babdc9ba6fe56b9318df20b520fce4fe6288a2ba69f26599dac12bf52c05a4391de3a5e40fd855f77aa919baa5af9fa0083df1fc2982760c3027a9c472fad6d881a4ad368ad29b784581686c2618ea3912afc667b366fe7185bb34ce975ddea4f46593424932cff0cb504f3471d6a336014c60fa9a5d72ec7049c700bbb726ad927f6e6e35d317b76bbf64fe9b76c163f7b3645c6b1af4aa3f666fdb19ea86ba1eca4eae180bf69795e8ec9f0e79e83f0906178ec539cc89a4c5ae42484012474c9971145cb4aefbd34f7e0c3f08e69274c6588d27adf4fb1a58af4b39dcd49bd015540dbb218a0b1696cdef29cea29d56db43124f25d2e6af10ff092af41ecd62313291843e3cab6a0b3f9a5afdb035d10a9b2b74a0a3fcd9a260c2a00d2d131c17d2b9f2f0efe768b4e1fcb5f4732c0deb4daae27901ffa2ea2b006e7cb08ce11f237a03ddda02e062d65d11e9f0000000064228f6edb0461436bdbf2571cc15d9045be79e648e70805080185dd5367395361d46aec8bdf216a6971b27afb6ea44637b5f70fac74d21a20c930fa5c026194a4207b74b992cc405863ae9a02e6722c632af046e4fe6839e4d2cbf58ab79d6f10dda4b1dd0482ecb372482dfbe0010cb6610bac119daf57e04d20f700c2022dbb6e68766e673c41dd96301c0e299c22038d4ee5361e70683d628d660d3b14f08244b187c82e0aced0cda05c3eb73626664e07a1a99587527cf87454759e6524936bc5edddc1a5b21bd73c64610394ac4ffcd452b607b029c107f6631cbde1f4044ca532bfa5eb6279f4665a11751bb131ff538aa1a512"], 0x34}, 0x1, 0x0, 0x0, 0x22040850}, 0xc1)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)

1.849403654s ago: executing program 2 (id=3201):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) (async)
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) (async)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x30}}, 0x4040084) (async)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f0000000640)="ec", 0x1}], 0x100000000000029d, 0xf) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2a1}, 0x94) (async, rerun: 32)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) (rerun: 32)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r6}, 0x38) (async)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r7, 0x8) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x60, 0x1404, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4840}, 0x20048044) (async)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async, rerun: 64)
sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)

1.689399119s ago: executing program 3 (id=3202):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) (async)

1.607162759s ago: executing program 4 (id=3203):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000000), 0xfffffffb, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140)='\a', 0x0}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000e00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='j', 0x1}], 0x1, 0xc) (async)
vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='j', 0x1}], 0x1, 0xc)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
splice(r1, 0x0, r3, 0x0, 0x2000000002ffff, 0x0)

1.538601166s ago: executing program 2 (id=3204):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000305000000000000000800000000", @ANYRES32=0x0, @ANYBLOB="04000000000000006e64000000000c0002800800076800ffffff"], 0x3c}}, 0x4000000)

1.426583642s ago: executing program 2 (id=3206):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=<r0=>0x0, @ANYRES32], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0x1, &(0x7f0000000080)="aadc8b120ea8f7ff0c3a47cf87f6953979bcd221ad90dbabb46d839837630508013abc2a819e8a988ae042ae39db4c07954e92dc75e6578d554286f8efe79d373f7ff20718d21e90550f9e2d6b7801739f536fefd0d513d0ceac7500310fe3d5de3333b146fd2da2b0f7365c7ec8edcd94daa1a4ea475b13bbddd9f45cbdc32aef18995b8f7036ccc6b8b5f8a033f946179d159b440f6be5d4bfa24d1faa8fc45e7ae8c55be1d750b614", &(0x7f0000000180)=""/34}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
socket$rds(0x15, 0x5, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0xe, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0xee, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4) (async)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba02000)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0x1}], 0x1)
socket(0x10, 0x803, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@newtfilter={0x18f4, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa3e, 0x1, 0x80, 0x80000001, 0x6, {0x16, 0x1, 0xe5b, 0x5, 0x9, 0x2}, {0x7, 0x0, 0xb3d, 0x0, 0xfffe, 0xfffff976}, 0x0, 0x200, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1ff, 0xa4, 0x7, 0x101, 0x7, 0x8, 0xfffff000, 0x3, 0x0, 0x1, 0x1, 0x3932685, 0x4, 0x0, 0x5, 0x8, 0x0, 0x8, 0xfffffffd, 0x9, 0x0, 0x4, 0x1000, 0x8, 0x9, 0x66c, 0x3b8f5929, 0x3, 0x9, 0xa, 0x101, 0x3, 0x4, 0x9, 0xf0a, 0x800, 0x1, 0x1, 0x47905ebf, 0xfffffffe, 0x1, 0x1, 0xa, 0xf7f0, 0x3, 0x401, 0x7, 0xc, 0x8, 0xf, 0x7, 0xff0b882, 0x7ff, 0x55, 0xd, 0x2, 0xad, 0x2, 0x101, 0x0, 0x7fffffff, 0x6, 0x4, 0x2, 0x6c, 0x0, 0x5, 0x5, 0x57, 0x3, 0x14, 0x2d9, 0x0, 0x3, 0x0, 0x5, 0xab7, 0x9abb, 0x48, 0xfff, 0x8, 0x1, 0x4, 0x40, 0x8d23, 0xffff, 0x3, 0x31b, 0x8, 0x1, 0x9, 0x1, 0x5, 0x3, 0x7, 0x5, 0x8, 0x9, 0xca27, 0xffffffff, 0x10000, 0xb2, 0x7, 0x892, 0xb, 0x4bfbd968, 0x401, 0x2, 0xf184, 0xa2c7, 0x3, 0xfffffff7, 0x16eae2cc, 0x3, 0x9, 0x3, 0x6, 0x4, 0x4, 0x0, 0x9, 0x7, 0x8, 0x1, 0x6, 0x10000, 0x6, 0x3, 0x4, 0xfffffffd, 0x200000, 0x2000006, 0x4, 0x3, 0x2, 0xffffffee, 0x10001, 0xba87, 0x1000, 0xb, 0x4000000, 0x10001, 0x9, 0x4, 0x2, 0x8, 0x5, 0x5, 0xffffffc1, 0x200, 0x5, 0x80, 0x1800, 0x3ff, 0x7ff, 0x8, 0x4, 0x5, 0x401, 0xb, 0x9, 0x4, 0x790, 0xb, 0x400, 0xedd1, 0x6, 0x7ff, 0x8, 0x1ff, 0x4, 0xfffffffd, 0x0, 0x0, 0x7, 0x3, 0x5, 0x3, 0x6f2d, 0x3, 0x9, 0x6, 0x5, 0x40, 0x28, 0xd23b, 0x1, 0x5, 0x9, 0xd5, 0x905f, 0x2, 0x1, 0xffff, 0x8, 0x80, 0x6fd, 0x65dd, 0x8, 0x3272, 0x4, 0x497, 0x6, 0x7fffffff, 0x8, 0x3, 0x6, 0x101, 0xa, 0xfee6, 0xff, 0x7, 0x2, 0x7, 0x5406, 0x7, 0x1, 0x6, 0x0, 0x5, 0x2, 0x81, 0x80000000, 0x7, 0xf, 0x1000, 0x0, 0x75, 0x6, 0xb, 0x200, 0x4, 0xff, 0xe7, 0x40, 0x0, 0x401, 0x47ac2596, 0x39, 0xffffffff, 0x6, 0x1ff, 0x2, 0x2, 0x9, 0xffffe9e6, 0x3, 0x1, 0x8, 0x1, 0x3, 0xfffffffe, 0x3, 0xaf79, 0x101]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfff, 0x8, 0x9, 0x4, 0x8000800, 0x3, 0x8, 0x5, 0x0, 0xfffffff7, 0xd, 0x6, 0x3, 0xfffffff9, 0xfffffffa, 0x8, 0x40, 0x2, 0xd, 0x6, 0x8, 0x1de, 0x0, 0x3, 0x2800, 0x4, 0xffffffff, 0x6, 0x6, 0x0, 0x2, 0x58f3, 0x10001, 0x6, 0x4, 0x5, 0x2, 0x6, 0x51ec, 0x4, 0x8, 0x15c, 0x2, 0x1ff, 0x2, 0xfffff58a, 0x10, 0xc, 0x9, 0x6, 0x2, 0x7, 0x6, 0x2, 0x2, 0x204, 0x942, 0x6, 0x400, 0x1, 0x5, 0x2, 0xfffffff7, 0x1, 0x8, 0x1, 0x3, 0xb33, 0xe, 0x7, 0x5, 0x6b, 0x1ff, 0x3, 0x6, 0x80, 0x1, 0xfffffe01, 0xdc, 0x9, 0x1, 0x7, 0x0, 0x8, 0x10001, 0xc, 0x3, 0xe, 0x1ff, 0x80, 0x401, 0x3, 0x7ae4e9d, 0x3, 0x12b0, 0x5, 0x0, 0x101, 0x8, 0xee6, 0x3, 0x7, 0x7, 0x6, 0x1, 0x2, 0x6, 0x5, 0xf, 0x20000004, 0x3, 0x7, 0x2, 0x3e1, 0x1, 0x10001, 0xffff, 0x10, 0x401, 0x3, 0xe7a1, 0x401, 0x7, 0x6, 0x57, 0x1, 0x3, 0x1000, 0x0, 0x26, 0xc6, 0x3, 0x6, 0x1, 0x9, 0x7, 0x0, 0x400000ae, 0x3a81, 0x1, 0x8, 0x9, 0x1, 0xfff, 0x3999, 0x0, 0x4, 0x14, 0x1, 0x5, 0xce, 0xf0000000, 0x5, 0x7, 0x0, 0x3, 0x6, 0x1, 0xb, 0x9, 0x4, 0x9, 0x5, 0x6, 0x2, 0x3, 0x0, 0x7, 0x7, 0x3, 0x7, 0x2, 0x8, 0x31f8, 0x3, 0x2, 0xb, 0x8, 0x5, 0x8000, 0x5, 0x6, 0xa0000000, 0x96c0, 0xfffffeff, 0x9, 0x9, 0x80, 0xfffffffd, 0xc8, 0x2, 0x2, 0x81, 0x10001, 0xde8, 0x3ff, 0x4, 0x6, 0xd, 0x8, 0xa, 0x81, 0xde, 0x8, 0x2, 0x2, 0xa, 0x5, 0x9a62295, 0x8, 0x401, 0x7f, 0x8, 0x1, 0x4, 0x7b02, 0xffffffff, 0x80000001, 0x5, 0xf, 0x7, 0xffffffff, 0xa, 0x9, 0x3, 0xe, 0xd, 0xfffffff6, 0x4, 0x5, 0x804e, 0xeb, 0x800, 0xcb8, 0x6, 0x9, 0x86b2, 0x401, 0xfffffff8, 0x6, 0xf1e7, 0x8, 0x79d2, 0x4c6, 0x7, 0x2, 0x7, 0x7fffffff, 0x4, 0x7, 0x9, 0x7fff, 0x1, 0xa00, 0x4]}]}]}}, @filter_kind_options=@f_fw={{0x7}, {0x1070, 0x2, [@TCA_FW_POLICE={0xc28, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0x4, 0x2, 0x9, 0x8, 0x4, 0x10, 0x10000, 0x67, 0xb, 0x9, 0x7ff, 0x6, 0x7, 0x9, 0x2, 0xffff206d, 0x1b080, 0x0, 0x9, 0x89, 0xfffffff9, 0x6, 0x1, 0x2, 0x2, 0x9, 0x2, 0xfffff001, 0xff, 0xd9af, 0xfff, 0xfffffff9, 0x10001, 0x9, 0x80000001, 0x5, 0x1, 0x8, 0x1, 0x6, 0xfffffff8, 0x4ea8c68f, 0x81, 0x4, 0x3ff, 0x7, 0x4, 0x5, 0x5, 0x101, 0x3, 0xe8, 0x745b9e17, 0x0, 0x3ff80, 0x8, 0x4, 0xfffffff8, 0x2, 0x800, 0x0, 0x0, 0x5, 0x4, 0xfff, 0x8001, 0x2, 0x554d, 0x6, 0x5, 0x1b, 0x8, 0x4, 0x4, 0x5, 0x5, 0x8, 0xc, 0x40, 0x8, 0x1000, 0x3, 0x8000, 0x4, 0xfffffe00, 0x1b, 0x300, 0x401, 0x401, 0x8, 0x1, 0xa, 0x2, 0x7, 0x7, 0x6, 0x41eb, 0x7fffffff, 0x0, 0x9, 0x6, 0x400, 0x0, 0x2, 0x1000, 0x10, 0xb0, 0x7, 0x7, 0x4, 0x7, 0x7, 0x6, 0xc, 0x4, 0x1, 0x1, 0x9, 0x4, 0x1ff, 0x0, 0x3c, 0x621ed1d1, 0x9, 0x7f, 0x3, 0x2, 0x0, 0x4, 0x680, 0x10000, 0x0, 0x81, 0x0, 0x3, 0x3, 0x401, 0x1, 0x9, 0x2, 0xf, 0x27, 0xffffffff, 0x0, 0x4, 0x8f0, 0x2, 0xbf, 0x9, 0x6, 0x0, 0xea, 0x15, 0x8, 0x0, 0x80, 0x2, 0x81, 0x5, 0x80000000, 0x3ff, 0x0, 0x2, 0x70c, 0x3, 0x21e2afd3, 0xbd, 0x3996, 0x81, 0x1, 0x2, 0x1, 0x5, 0x1, 0x7fffffff, 0x8001, 0x0, 0x4, 0x90c9, 0xc, 0xe5d, 0x10, 0x8354, 0x8, 0x2, 0x6, 0x8, 0x38, 0x53, 0x0, 0x573, 0xe, 0x40, 0x4, 0x9, 0x0, 0x5, 0x4, 0x0, 0x1, 0xfffffff6, 0x8, 0x7, 0x0, 0x8001, 0x7837892, 0x1, 0xc, 0x8, 0x0, 0x10001, 0xee000000, 0xfffffffb, 0x9, 0x51f, 0x9, 0x3, 0x4, 0x80000001, 0x1, 0x6, 0x4, 0x4, 0xa, 0x40, 0x0, 0x9, 0x5, 0x9, 0x3, 0x2, 0xc2c, 0x81, 0x3, 0x7, 0x3, 0x5, 0x5cd, 0x4, 0x1aa, 0xffffffff, 0x4, 0x8, 0x8, 0xffffffff, 0xd6, 0x0, 0x7, 0x2, 0x0, 0xec6, 0x10, 0xfffffffc, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x605e, 0x800, 0x3d07, 0x5ecd, 0x7, 0x8, 0xc, 0x1c9, 0xffffffff, 0x5, 0xc, 0x3, 0x7, 0xf05, 0x8, 0x9, 0x3, 0x5, 0x81, 0xd7f, 0x11d65abb, 0xfffffffa, 0x9, 0x0, 0x7, 0x80e, 0x1, 0x3, 0x0, 0x1, 0xcee, 0x7fffffff, 0x7, 0x9, 0x10, 0x1d5, 0x2fa8e7a8, 0x3, 0x2, 0x9, 0x7, 0x3, 0xcaa, 0x1000, 0x8000, 0xffffff00, 0x70, 0x401, 0xd, 0x76d, 0x6, 0x792, 0xe5a2, 0x1, 0x7fffffff, 0x8, 0x101, 0x0, 0x5, 0xc3, 0x8, 0x5, 0x0, 0x7, 0xaa2b, 0x729a, 0x100, 0x400, 0x6, 0x7, 0x4, 0x1, 0x9, 0x2, 0x3ef6b25a, 0x81, 0x7, 0x8, 0x0, 0x3, 0x8, 0x6, 0x1, 0x5, 0xfffffffe, 0x9ea, 0xf, 0xfffffffc, 0x4, 0xf594, 0x8, 0x2, 0x1000, 0x0, 0x1, 0xff, 0xfffffffd, 0x5ce, 0x400, 0xc69, 0x4be, 0x1, 0xca9, 0x9, 0x3, 0x2, 0x8, 0xf58, 0x9, 0x5181, 0x4, 0x2, 0x401, 0xff, 0x400, 0x401, 0x7fc00000, 0x5, 0x7, 0x5, 0xfffffffa, 0x5, 0x6, 0x8000, 0x5, 0x1, 0x8, 0xf, 0x1, 0xfff, 0x0, 0x3, 0x80000000, 0x3, 0x5, 0x0, 0x1, 0x65, 0x7, 0x1, 0x610, 0xfffffffb, 0x0, 0x100, 0x8, 0x6, 0xcd4, 0x4, 0x0, 0x5, 0xeb9, 0xfffffffc, 0x80, 0x7, 0x3, 0x10001, 0x2, 0x0, 0x6, 0xb230e28, 0x9, 0x3, 0x7, 0x8, 0x80000001, 0xffff, 0x0, 0x6, 0x5, 0x4, 0xfff, 0x8, 0x2, 0xd, 0x80000000, 0x3ff, 0x9, 0x4, 0x0, 0x6, 0x1, 0x5, 0xb, 0x5f17, 0x6, 0x0, 0x1, 0x0, 0xffff, 0x6, 0xffffffff, 0x0, 0x400, 0x4, 0x5a2, 0xffffffff, 0x5, 0x0, 0x3, 0x6, 0x1, 0xfffffff9, 0xdd, 0xeadf, 0x6, 0x38, 0x2, 0x2b, 0x2, 0x8, 0x7, 0x8000, 0x4, 0xc8, 0x4124, 0x4, 0x7, 0xbefa, 0x6, 0x7, 0x1000, 0x200, 0x7, 0x6, 0x20000000, 0x10001, 0x800, 0x0, 0x98b, 0xa20, 0xfffff704, 0x8, 0x5, 0x2, 0x7fffffff, 0x6, 0xb, 0x7, 0x765, 0x8001, 0x2, 0x200, 0x6, 0x4, 0xca, 0x1000, 0x7, 0x81, 0x5, 0x4, 0xf, 0x800, 0xff, 0x9, 0x7, 0x1000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x160, 0x5, 0xa, 0x2, 0x1000, 0x3, 0xcb10, 0x8, 0x80000001, 0x10000003, 0x1ff, 0x7ff, 0x2, 0x8036, 0x200, 0x8001, 0x10000, 0x8, 0x4, 0x1, 0x9, 0x2, 0x8001, 0xd, 0x0, 0x8001, 0x10001, 0x3, 0x1, 0x1, 0x6, 0x1ff, 0xffff8001, 0xcc, 0x9d4, 0x8, 0x5, 0xf0, 0x3, 0xffd, 0x2, 0x7ff, 0x81, 0x1, 0x1ff, 0x39, 0x2, 0x4, 0x2, 0x2, 0x8, 0x1, 0x8, 0xf06, 0x1, 0x5, 0x9, 0x8, 0x6992, 0x6, 0x3, 0x8, 0x2, 0xfa8b, 0x7fff, 0x10, 0x4, 0x1000, 0x1, 0x800, 0x5, 0x6, 0x5e, 0x8000, 0x7, 0x5, 0x3, 0x7f, 0xd28, 0x6, 0xd8e, 0x800, 0x6, 0x7, 0x0, 0x7ff, 0xd, 0x1b1, 0x4, 0x0, 0xffffffff, 0xfffff056, 0x5cc8, 0x6, 0x0, 0x2, 0xa63, 0xffff219f, 0x5, 0x7, 0x7b0a, 0x1, 0x6, 0x7, 0xc, 0x4, 0x4, 0x0, 0x80, 0x0, 0xfffffffc, 0x5a6, 0x30, 0x10001, 0x8, 0x2, 0x10, 0x4, 0x400, 0x8000, 0x7f, 0x80000001, 0x1, 0xc00, 0x7, 0x6, 0x8, 0x9, 0x7ff, 0x4, 0xffffffff, 0x4, 0x4, 0x2, 0x7, 0x0, 0x2, 0x2, 0xffff, 0x5, 0x7, 0xfffffffb, 0xffff, 0x6, 0x44268d53, 0x2, 0x6, 0xd8, 0x8, 0x7, 0x6, 0x5, 0x6, 0x3, 0x8001, 0xffffffaf, 0x1, 0x1, 0x0, 0x8001, 0xff, 0x7, 0x1, 0x8, 0x7, 0x401, 0x1000, 0x6d84, 0xffffc8f6, 0x8a, 0x1ff, 0x7ff, 0x6, 0xed9, 0x400, 0xd0, 0x5f, 0x5ee, 0x0, 0x61, 0x38, 0x6, 0x1ff, 0xeeb8, 0x9, 0x616, 0x26, 0x6, 0x5, 0x6, 0x3, 0x3, 0x5, 0x80000001, 0x80000000, 0x800, 0x7fff, 0xe, 0x4, 0x3, 0x5, 0xa, 0x7, 0x3, 0x3ff, 0x0, 0x0, 0x4, 0x5, 0xc379, 0x7, 0xf, 0x3, 0x77, 0x6, 0x4, 0x9, 0x6, 0xff, 0x81, 0x1, 0x1000, 0x2, 0x3, 0x5, 0x1, 0xdcd9, 0x8, 0xc6e4, 0x731, 0x3, 0x4, 0xf, 0x3, 0x5, 0x9d, 0x8000, 0x7, 0x5, 0x0, 0x0, 0x1, 0x1, 0x80000000, 0x4, 0x5, 0x7ff, 0x1, 0x2, 0x4, 0x2, 0xfffffffb, 0x2, 0xf75, 0x44]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_FW_ACT={0x2e4, 0x4, [@m_csum={0x1d4, 0x6, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x7, 0x6, 0x9}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x4, 0xfffffffb, 0x8001}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x3, 0x0, 0x200000, 0x7}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x3, 0x9, 0xd0b7}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x33c49faa, 0x2, 0x3, 0x7, 0x8}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0xbb, 0x3, 0xfc1e, 0x7ff}, 0x3}}]}, {0xfd, 0x6, "e8143bd98a9cffc482291199b8158155cc197e9cad8fdc2f6289fc5fae3700f6362db7eacd5400e78f9245a27723baed195541bd1b4f54f296bb72e356f82deb15b05ed505ec71ab191af3f0a4863edb7a262d7eb08bc46cef2c6747f9dffaed2e9e9d5138c9624f22eb6cd6b0d8371edb8166d0a5834dad40b75043d43439b8f3815e294fe00393cdfa07dc616813b479dd85cc5f8eb0e2dcde4c73e0192165af75e0f7d7da68376a06c35f255809aba70683e821f2c3b5d8eda38593eff083c9760c79b844ff99decb9ea76ba8e503c5aa945bc3622234b280b98261b6125b827f20510fb13c9c85af841ae7e73328e83c6a8804b4e44e54"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x10c, 0x7, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x9, 0x0, 0x8, 0x1ff}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff8000, 0x6, 0x20000000, 0x5, 0x8}, 0x49}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4494, 0x4, 0x0, 0x80000, 0xffff}, 0x23}}]}, {0x8c, 0x6, "8b7e26aa57bce312f25123defa995c2c207b6d63a4d6f58c89923f978abd4db587282ca06a6c67189617c497f8370550899ee92261e656f8fadf16fc9f18f84ad61a79f9062d754f0ad674fd4b7546514c026ef9bfcefb9525a87acdc6b2b77e486eec8a1e8d8e517bcc465c57364eafa0e9b7b16cf3257f360d8ef5b431fdc079278b764f97195b"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_FW_ACT={0x130, 0x4, [@m_skbedit={0x12c, 0x20, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x3, 0x3, 0xc, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9000000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3ff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xb}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8}}]}, {0xad, 0x6, "8bc9ba4d6aab6311cb73599f1904027c6feec07407dad7bd636f80321aaf868f5af0de07de8674dc385c71ce4ffdf408f1e2e1c1be4bfd951d535aa2a80112e5f803d7d18eeb5a97e504c3de33b365934c0d305547b3e88d477815e80f1cfba7abc85e4855f7953f0c58364a910111db77cf97e9cd4c33f9439a748ffaf00bd22bb0c98a23438791f28aba7d440206b90833ec246abac844a32859e041cafdaa0086b553c8d6353ac6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x5}}]}}]}, 0x18f4}}, 0x0)

1.251160573s ago: executing program 3 (id=3208):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
accept4$llc(r1, 0x0, 0x0, 0x80000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x10c, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xe0, 0x6, "8c44d3c335a4d3e5e4c8ce2a58a0a1849fc3ca30582230238a71f702d1d0506e130d94c3da01747312684e4f1c9c9bf94e42fd4fe1d841294d5baa261e0b85cf8403078127789e374f80470dd8611e8fe05cc7ac359b82d6a5b2e9d3cbd97772c39a16ba7f600eb2c4a4ef278bb438e40ace9f4996a7c77505af44447769d15f2bb4c7297710453735db92d604db1e617c7d62187581fe1f82a4860a13f4bcf41314ffecc8c95a49ad43a7bb5a572d0a275c09b80504222edc07c66a8493bf71ea8d00f45d5071d2847c666c77e84d0bc54169a37b3bde7836b33b83"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_USERDATA={0x84, 0x7, 0x1, 0x0, "5ad33ed6fa97605feacef5471854616192085795d085a70e22028e489f200e5427486c0eceb9003b2e5f645775652c9dbdd3d2c3dce80a3ae9d02d1b9e0d72904c33fb0efe460dd3b327a4698f24cf366dc0c1dd84de05a2e7161b38e05cffccaac448cbecaa1e28dc0be0c6b8e3996b53da729d08ce8d261f0a41be9144f2fb"}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x900, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x604, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x30c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xf8, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb47}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2aa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x144, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x221}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a5e30de}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffeffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4a42}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbcce}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_EXPRESSIONS={0x2ac, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0xc8, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0xa0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x99, 0x1, "2ea4901252546e26230486ea0e1f3a1a6a6200eee6ea0fe579a4135804cf858f612e0ccd8163c2093d1cf2c37dd134af2f0cf1b480fe344648429f9a6b6accf05bb4f85d41e407eabbc1abb90726af5d0486cd25b3e8c838fd36b19fc77871a17b9d98c909918ecb546333d2251a4898e36715438c06b4c8a703ab4d65cea6bdc247f36c48779657b096babf5b4b0474dc1ce8999a"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x104, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xf4, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BITWISE_MASK={0xe0, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x26, 0x1, "0f546cc1fef7627607e86aeb6e2ce7e42c09950677c36b607876ba1a186ad7452b2d"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x128, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1000}, @NFTA_SET_USERDATA={0x3e, 0xd, 0x1, 0x0, "48d6dc10016b271bd020a1a3471fef7e5b026bc4e97bfe03a3012963047eb42aacad22155d4e72d5f88847d2b9595bb07dd05c337dd17034f3aa"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0xa4, 0xd, 0x1, 0x0, "a3af7cdebfa984c5a64c4a75aa31045e8151dd82cd8aa95490f24c9eabb09281feeb9fb30c93df3ef1bdad44cfded00025c925a7bf7b8eb58f9f56f420e162bb34cdef350ddc150f8324a9f8a3998f600bfde8fe6b6325852e9d4f5e29056f949692bd8ec715632563fe52a44e1f84020bed9ca7d3c68e16dfc613de70f030b2017f7ec25b7d255da237fb2f5f48d2920d7e2429c6981c1d886bf70dfacd5fff"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9bc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2efc, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.094765741s ago: executing program 0 (id=3209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaa000800450000001fe1e0000001"], 0x32)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x2, 0x0, 0xa5, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x3, "c54bfe6bddb0a35b8f1fcd3d0418dc12b949b7e5560635b5bf39b5152819a973", "88e8514f8160134e4b86cd3e9853ff8bb2024c88c1a600b7f9a70565e32cf58050038d629eb196dcd2c40d3753d18268", "577bf699b4ac2010bd21ec5099fc45596d43ee96eace82320cc38da0", {"2897c63fce331822b0bbca5143bfb766", "4f4c76b74a261703c827481abff75b19"}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002)

1.044724345s ago: executing program 4 (id=3210):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x4c8d0)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x30, r4, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "3613"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x3000000, 0x0, 0x4000001}, 0x40000)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x1c4, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x164, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x0, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8e4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3564}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0xfffffd8a, 0x5, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x20000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xabe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3807f525}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xbb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x820}, 0x900) (async)
socket$nl_audit(0x10, 0x3, 0x9)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103003a290100000000000000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8812}, 0x4000) (async)
r8 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c)
sendmsg$inet_sctp(r8, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x0, 0x4}}], 0x38, 0x4855}, 0x24000052)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000f276832a1e625b0b1b1c1e8ddd2b6e6bc359c20d0c99bd6677fc17ef075b6cbbffb28b6320960323979b3581990e1fe9466dbd265c5854f56e7763ea842893ec934c99867b70b4dc68b1a6efe0c2c28f80dd9a07ad04618cdbfb7be95f1d99442c0a156e2fb10061c5e2b61ef8854e5ac0302a008dfe976d8889eb1a1527611a1e4a9f0cb3bf1639274e74dd00cc4c4470b4ef7d6368042d8df9d0227d28b153e13385e2728471adda48df0066412afe7e7fe52fa669ba64", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r11}, 0x38)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r8, @ANYBLOB="f4347264071ecc2718d1499d013661182210272827d31695e13c3ead6822dd94f8ce22fc96477576c4bdb5951e59eeb34be8b3ec58ed6bf8fcb67f766a68b03461631b0913f678da6f41c61f75ef606ef70aa88ee0e4538880d248afdd5637407e36254f00d48239f9c44c6b2b99e4fefa348f", @ANYRES8=r10, @ANYRES32=r11], 0xc8}}, 0xc880) (async)
r12 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
r13 = socket$netlink(0x10, 0x3, 0x0)
writev(r13, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000", 0x36}], 0x1)

963.403874ms ago: executing program 3 (id=3211):
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2, 0x18, 0xb2, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_address={0x5, 0x17, 0x2b, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x3, @remote, 0x8}}]}, 0x38}}, 0x8040)
bind$phonet(r0, &(0x7f0000000040)={0x23, 0x7, 0x8, 0x6}, 0x10)

941.802613ms ago: executing program 3 (id=3212):
r0 = socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x13012, r0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)=0x40000)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0)
getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000000)=0x31)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r10}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x5c, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1d77, 0xf, 0x9, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000100001000000001e000000000000000a68000000060a0b040000000000000000020000003c00048014000180090001006c6173740000000004000280240001800a0001807265646972000000140002800800034000000028080001400000001d0900010073797a30000000000900020073797a32"], 0x90}}, 0x2000c004)

826.376299ms ago: executing program 4 (id=3213):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f00000004c0)='GPL\x00'}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040))
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg(r1, &(0x7f0000009e40)=[{{&(0x7f0000000f40)=@in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}, 0x401}, 0x80, 0x0, 0x0, &(0x7f00000010c0)=[{0x10, 0x0, 0x6}, {0x10, 0x29, 0x4}], 0x20}}], 0x1, 0x20008004)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f983b"], 0xfce)

775.477161ms ago: executing program 0 (id=3214):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0xb)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000540)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r3, 0x0)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0)

689.933612ms ago: executing program 0 (id=3215):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async)
sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1={0xff, 0x11}}}}, @hopopts={{0x18, 0x29, 0x36, {0x3b}}}], 0x40, 0x7ffffff7}}], 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000020003f7c2f998c27cb73f7486ff3bcd101ed0000000000000001", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000700000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd70000035000002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a1c00040002"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

560.567597ms ago: executing program 0 (id=3216):
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @mcast2, 0x5}, 0x1c)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair(0x32, 0x80f, 0x2, &(0x7f0000000040))
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
pipe(&(0x7f0000000080))
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r2, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) (async)
getsockopt(r2, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xdbf}, {&(0x7f00000000c0)=""/85, 0x55}, &(0x7f0000000740)=[{&(0x7f0000000140)=""/73, 0x49}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000000300)=""/177, 0xb1}, {&(0x7f00000003c0)=""/182, 0xb6}, {&(0x7f0000000480)=""/58, 0x3a}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/126, 0x7e}, {&(0x7f00000005c0)=""/33, 0x21}], 0x9, 0x11, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x12}}], 0x78, 0x4000000}, 0x4040)

323.393941ms ago: executing program 0 (id=3217):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002"], 0x44}}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000180)=0xf) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async)
r3 = socket$inet6(0x10, 0x3, 0x0) (async)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f4070009040180202000000000000000000008", 0x1d)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

245.551211ms ago: executing program 4 (id=3218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28860}, [@IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60004095}, 0x48000)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1)

135.771906ms ago: executing program 2 (id=3219):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24)
r2 = socket(0x2, 0x80802, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0))
shutdown(r2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

47.438183ms ago: executing program 4 (id=3220):
socketpair(0xa, 0x3, 0x0, &(0x7f0000000040))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pressure(r2, 0x0, 0x0)
r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev}, &(0x7f0000000040)=0xc)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)
recvmmsg(r7, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xff05, 0x0, 0xfffffffd, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x4941}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x45844}, 0x0)

47.103631ms ago: executing program 0 (id=3221):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000001c40)=ANY=[@ANYBLOB='-cpu  +'], 0x19)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x4cc59}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x1, 0x3, 0x1}]}}}, @IFLA_IFALIAS={0x0, 0x14, 'wg0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x1)
r2 = socket$inet6_sctp(0xa, 0x3, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x5, [0x0, 0x0, 0x0, <r3=>0x0, 0x0]}, &(0x7f0000000340)=0x18)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000380)={r3, 0x3}, 0x8)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
sendfile(r4, r5, 0x0, 0xffffffff000)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r6, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=<r7=>0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c)
r9 = accept$inet(r8, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000a00000000000000030000008500000041000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x64, &(0x7f0000000200)="e372f3ec986c672df2826128194a", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e)
ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0x0, @nfc={0x27, r7, 0xffffffffffffffff, 0x3}, @phonet={0x23, 0x53, 0x7, 0x98}, @isdn={0x22, 0x6, 0x7f, 0xb, 0x92}, 0x1ff, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='bridge0\x00', 0x8e, 0x10001, 0x1})

0s ago: executing program 2 (id=3222):
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0xd)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
r4 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x0, 0xd, 0xff, 0x2, 0xa6, 0x7, 0xc, 0x40, 0x4, 0xfd, 0xb2, 0x8, 0x2, 0xc7}, 0xe)

kernel console output (not intermixed with test programs):

m_socket_setsockopt+0x9/0x20
[  310.917527][T12705]  ? __pfx_xsk_setsockopt+0x10/0x10
[  310.917556][T12705]  do_sock_setsockopt+0x179/0x1b0
[  310.917585][T12705]  __x64_sys_setsockopt+0x13f/0x1b0
[  310.917615][T12705]  do_syscall_64+0xfa/0x3b0
[  310.917634][T12705]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.917663][T12705]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.917683][T12705]  ? clear_bhb_loop+0x60/0xb0
[  310.917706][T12705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.917724][T12705] RIP: 0033:0x7feb5dd8eec9
[  310.917745][T12705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.917762][T12705] RSP: 002b:00007feb5ec73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  310.917782][T12705] RAX: ffffffffffffffda RBX: 00007feb5dfe5fa0 RCX: 00007feb5dd8eec9
[  310.917797][T12705] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000a
[  310.917807][T12705] RBP: 00007feb5de11f91 R08: 0000000000000004 R09: 0000000000000000
[  310.917818][T12705] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  310.917831][T12705] R13: 00007feb5dfe6038 R14: 00007feb5dfe5fa0 R15: 00007fffbe505728
[  310.917865][T12705]  </TASK>
[  311.182549][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  311.192236][T12705] Mem-Info:
[  311.195441][T12705] active_anon:7109 inactive_anon:0 isolated_anon:0
[  311.195441][T12705]  active_file:3272 inactive_file:39960 isolated_file:0
[  311.195441][T12705]  unevictable:768 dirty:111 writeback:0
[  311.195441][T12705]  slab_reclaimable:12206 slab_unreclaimable:131746
[  311.195441][T12705]  mapped:30122 shmem:1406 pagetables:1005
[  311.195441][T12705]  sec_pagetables:0 bounce:0
[  311.195441][T12705]  kernel_misc_reclaimable:0
[  311.195441][T12705]  free:1270148 free_pcp:34439 free_cma:0
[  311.243850][T12705] Node 0 active_anon:28536kB inactive_anon:0kB active_file:13088kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120488kB dirty:436kB writeback:0kB shmem:4088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13348kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  311.276335][T12705] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  311.306708][T12705] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  311.336715][T12705] lowmem_reserve[]: 0 2506 2506 2506 2506
[  311.342679][T12705] Node 0 DMA32 free:1177640kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28496kB inactive_anon:0kB active_file:13088kB inactive_file:159312kB unevictable:1536kB writepending:436kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:116684kB local_pcp:29332kB free_cma:0kB
[  311.387710][T12705] lowmem_reserve[]: 0 0 0 0 0
[  311.392965][T12705] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  311.534758][T12705] lowmem_reserve[]: 0 0 0 0 0
[  311.539551][T12705] Node 1 Normal free:3887492kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20932kB local_pcp:9344kB free_cma:0kB
[  311.610995][T12705] lowmem_reserve[]: 0 0 0 0 0
[  311.615956][T12705] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  311.642611][T12705] Node 0 DMA32: 1899*4kB (UM) 337*8kB (UME) 324*16kB (UME) 583*32kB (UME) 198*64kB (UME) 62*128kB (UM) 14*256kB (ME) 10*512kB (UM) 7*1024kB (UM) 4*2048kB (ME) 269*4096kB (M) = 1180628kB
[  311.683631][T12705] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  311.705050][T12705] Node 1 Normal: 231*4kB (UME) 59*8kB (UME) 47*16kB (UME) 117*32kB (UME) 26*64kB (UME) 12*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3887492kB
[  311.729648][T12736] netlink: 'syz.1.1741': attribute type 1 has an invalid length.
[  311.738221][T12736] netlink: 'syz.1.1741': attribute type 1 has an invalid length.
[  311.804293][T12705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.824207][T12705] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.863884][T12705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  311.873479][T12705] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  311.913420][T12705] 44585 total pagecache pages
[  311.939111][T12705] 0 pages in swap cache
[  311.966234][T12705] Free swap  = 124996kB
[  311.970446][T12705] Total swap = 124996kB
[  311.993779][T12705] 2097051 pages RAM
[  311.997900][T12705] 0 pages HighMem/MovableOnly
[  312.008026][T12705] 423781 pages reserved
[  312.018165][T12705] 0 pages cma reserved
[  312.244563][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  312.339151][T12758] __nla_validate_parse: 36 callbacks suppressed
[  312.339173][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'.
[  312.355005][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'.
[  312.372839][T12759] vlan4: entered promiscuous mode
[  312.378789][T12759] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  312.440980][T12758] vlan4: entered promiscuous mode
[  312.470115][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1748'.
[  312.492580][T12761] bridge7: entered allmulticast mode
[  312.547200][T12763] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1749'.
[  312.556692][T12763] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1749'.
[  312.571796][T12763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1749'.
[  312.624946][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'.
[  313.002185][T12794] syzkaller1: entered promiscuous mode
[  313.008578][T12794] syzkaller1: entered allmulticast mode
[  313.027436][T12795] netlink: 'syz.3.1758': attribute type 6 has an invalid length.
[  313.283980][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  314.279045][T12833] Bluetooth: MGMT ver 1.23
[  314.324005][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  314.367378][T12836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1766'.
[  314.456657][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1767'.
[  314.544282][T12842] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1768'.
[  315.128605][T12852] netlink: 'syz.1.1770': attribute type 11 has an invalid length.
[  315.363934][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  315.766914][   T30] audit: type=1800 audit(1759700028.147:12): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1771" name="memory.events" dev="tmpfs" ino=1888 res=0 errno=0
[  315.861125][T12875] syzkaller1: tun_chr_ioctl cmd 1074025677
[  315.876535][T12875] syzkaller1: Linktype set failed because interface is up
[  315.884715][ T5922] syzkaller1: tun_net_xmit 90
[  316.054506][ T8927] syzkaller1: tun_net_xmit 86
[  316.403809][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  316.564786][ T5922] syzkaller1: tun_net_xmit 90
[  317.199052][T12917] netlink: 'syz.4.1788': attribute type 1 has an invalid length.
[  317.369382][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  317.369468][ T5849] Bluetooth: hci4: command 0x0405 tx timeout
[  317.443988][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  317.508995][T12919] gretap1: entered promiscuous mode
[  317.570174][T12926] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  317.895183][T12947] __nla_validate_parse: 198 callbacks suppressed
[  317.895203][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'.
[  318.048642][T12955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1797'.
[  318.483828][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  318.572601][T12967] netlink: 'syz.2.1801': attribute type 1 has an invalid length.
[  318.582541][T12967] netlink: 'syz.2.1801': attribute type 1 has an invalid length.
[  318.591478][T12967] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1801'.
[  318.853313][T12983] sit0: entered promiscuous mode
[  318.865748][T12983] netlink: 'syz.2.1806': attribute type 1 has an invalid length.
[  318.875600][T12983] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1806'.
[  318.902516][T12981] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  318.925776][T12975] netlink: 'syz.0.1805': attribute type 12 has an invalid length.
[  318.940968][T12985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1809'.
[  318.944828][T12975] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1805'.
[  319.030850][ T5849] Bluetooth: hci4: link tx timeout
[  319.036678][ T5849] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  319.118425][T12997] netlink: 'syz.1.1812': attribute type 1 has an invalid length.
[  319.494573][T13004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1813'.
[  319.523920][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  319.835768][T13004] netlink: 'syz.3.1813': attribute type 1 has an invalid length.
[  319.858173][T13021] netlink: 'syz.4.1815': attribute type 1 has an invalid length.
[  319.967173][T13025] netlink: 'syz.2.1816': attribute type 3 has an invalid length.
[  320.004706][T13025] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1816'.
[  320.434910][T13036] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1817'.
[  320.563810][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  320.732625][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1822'.
[  320.895173][T13054] erspan0: entered allmulticast mode
[  320.971298][T13057] vlan1: entered promiscuous mode
[  320.977753][T13057] bond0: entered promiscuous mode
[  320.999175][T13057] bond_slave_0: entered promiscuous mode
[  321.030038][T13057] bond_slave_1: entered promiscuous mode
[  321.124447][ T5854] Bluetooth: hci4: command 0x0405 tx timeout
[  321.354224][T13082] netlink: 'syz.2.1827': attribute type 13 has an invalid length.
[  321.502898][T13090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.603899][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  321.647412][T13090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.815742][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.824439][T13099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.834755][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.381483][T13119] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  322.643799][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  323.282629][T13159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.683832][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  324.380917][T13202] __nla_validate_parse: 5 callbacks suppressed
[  324.380936][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1855'.
[  324.443331][T13204] tc_dump_action: action bad kind
[  324.699033][T13215] Àÿ: renamed from team_slave_1
[  324.723804][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  324.754571][T13219] netlink: 'syz.3.1863': attribute type 1 has an invalid length.
[  324.785839][T13219] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  324.812690][T13219] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  324.878007][T13219] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  324.924330][T13219] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  325.030873][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'.
[  325.097245][T13219] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  325.110084][T13219] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  325.197560][T13237] syzkaller0: entered promiscuous mode
[  325.210328][T13237] syzkaller0: entered allmulticast mode
[  325.235969][T13219] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  325.252436][T13219] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  325.763825][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  326.803863][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  326.947508][   T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  326.965845][   T49] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  326.994094][   T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  327.002929][   T49] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  327.050510][   T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  327.059983][   T49] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  327.107286][   T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  327.121739][   T49] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  327.224793][T13258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1876'.
[  327.275159][T13258] netlink: 'syz.0.1876': attribute type 1 has an invalid length.
[  327.373427][T13275] siw: device registration error -23
[  327.432836][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'.
[  327.514159][T13283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1880'.
[  327.843811][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  327.897830][T13299] netlink: 'syz.1.1886': attribute type 4 has an invalid length.
[  327.915131][T13299] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1886'.
[  328.100885][T13307] netlink: 'syz.3.1889': attribute type 13 has an invalid length.
[  328.347339][T13307] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1889'.
[  328.529142][T13325] netlink: 'syz.2.1894': attribute type 6 has an invalid length.
[  328.543444][T13325] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1894'.
[  328.591928][T13325] netlink: 'syz.2.1894': attribute type 6 has an invalid length.
[  328.606608][T13325] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1894'.
[  328.662305][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1896'.
[  328.696498][T13335] geneve4: entered promiscuous mode
[  328.702506][T13335] geneve4: entered allmulticast mode
[  328.883909][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  329.341323][T13375] veth1_to_bridge (unregistering): left promiscuous mode
[  329.923925][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  330.078057][T13408] __nla_validate_parse: 1 callbacks suppressed
[  330.078077][T13408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1914'.
[  330.209313][T13408] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland
[  330.223150][T13418] netlink: 'syz.2.1917': attribute type 29 has an invalid length.
[  330.234753][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1916'.
[  330.250939][T13418] netlink: 'syz.2.1917': attribute type 29 has an invalid length.
[  330.274907][T13418] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1917'.
[  330.343639][T13418] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  330.359075][T13418] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  330.367433][T13418] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  330.377355][T13419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1916'.
[  330.539111][T13428] 8021q: adding VLAN 0 to HW filter on device team0
[  330.554804][T13428] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  330.579437][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'.
[  330.630336][T13427] siw: device registration error -23
[  330.833149][T13436] xfrm2: entered allmulticast mode
[  330.875177][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'.
[  330.884483][T13438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1924'.
[  330.963793][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  330.976277][T13438] geneve4: entered promiscuous mode
[  330.981640][T13438] geneve4: entered allmulticast mode
[  331.116168][T13440] 8021q: adding VLAN 0 to HW filter on device bond9
[  331.672535][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1933'.
[  331.682249][T13467] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  331.966482][T13478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1936'.
[  332.003800][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  332.192209][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1937'.
[  332.470761][T13502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.937702][T13522] netlink: 'syz.3.1949': attribute type 3 has an invalid length.
[  333.043840][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  333.840018][T13549] syz.0.1958: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  333.841166][T13575] nbd: couldn't find a device at index 0
[  333.864508][T13549] CPU: 1 UID: 0 PID: 13549 Comm: syz.0.1958 Not tainted syzkaller #0 PREEMPT(full) 
[  333.864536][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  333.864548][T13549] Call Trace:
[  333.864555][T13549]  <TASK>
[  333.864562][T13549]  dump_stack_lvl+0x189/0x250
[  333.864594][T13549]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.864616][T13549]  ? __pfx__printk+0x10/0x10
[  333.864642][T13549]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  333.864664][T13549]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  333.864689][T13549]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  333.864717][T13549]  warn_alloc+0x214/0x310
[  333.864750][T13549]  ? __pfx_warn_alloc+0x10/0x10
[  333.864792][T13549]  ? __get_vm_area_node+0x28f/0x300
[  333.864817][T13549]  ? xskq_create+0xbf/0x170
[  333.864850][T13549]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  333.864908][T13549]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  333.864944][T13549]  ? __kasan_kmalloc+0x93/0xb0
[  333.864971][T13549]  vmalloc_user_noprof+0xad/0xf0
[  333.864995][T13549]  ? xskq_create+0xbf/0x170
[  333.865024][T13549]  xskq_create+0xbf/0x170
[  333.865054][T13549]  xsk_init_queue+0xb0/0x110
[  333.865085][T13549]  xsk_setsockopt+0x57b/0x8d0
[  333.865116][T13549]  ? __pfx_xsk_setsockopt+0x10/0x10
[  333.865143][T13549]  ? __pfx_aa_sk_perm+0x10/0x10
[  333.865171][T13549]  ? __fget_files+0x2a/0x420
[  333.865194][T13549]  ? aa_sock_opt_perm+0xff/0x1b0
[  333.865225][T13549]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  333.865253][T13549]  ? __pfx_xsk_setsockopt+0x10/0x10
[  333.865282][T13549]  do_sock_setsockopt+0x179/0x1b0
[  333.865309][T13549]  __x64_sys_setsockopt+0x13f/0x1b0
[  333.865336][T13549]  do_syscall_64+0xfa/0x3b0
[  333.865355][T13549]  ? lockdep_hardirqs_on+0x9c/0x150
[  333.865382][T13549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.865401][T13549]  ? clear_bhb_loop+0x60/0xb0
[  333.865425][T13549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.865443][T13549] RIP: 0033:0x7fecd678eec9
[  333.865461][T13549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.865477][T13549] RSP: 002b:00007fecd7566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  333.865497][T13549] RAX: ffffffffffffffda RBX: 00007fecd69e5fa0 RCX: 00007fecd678eec9
[  333.865511][T13549] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005
[  333.865523][T13549] RBP: 00007fecd6811f91 R08: 0000000000000004 R09: 0000000000000000
[  333.865534][T13549] R10: 0000200000001480 R11: 0000000000000246 R12: 0000000000000000
[  333.865546][T13549] R13: 00007fecd69e6038 R14: 00007fecd69e5fa0 R15: 00007ffd5c0ee9f8
[  333.865578][T13549]  </TASK>
[  333.865660][T13549] Mem-Info:
[  334.087365][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  334.141698][T13549] active_anon:3888 inactive_anon:0 isolated_anon:0
[  334.141698][T13549]  active_file:3272 inactive_file:39968 isolated_file:0
[  334.141698][T13549]  unevictable:768 dirty:74 writeback:0
[  334.141698][T13549]  slab_reclaimable:12298 slab_unreclaimable:132800
[  334.141698][T13549]  mapped:29124 shmem:1355 pagetables:988
[  334.141698][T13549]  sec_pagetables:0 bounce:0
[  334.141698][T13549]  kernel_misc_reclaimable:0
[  334.141698][T13549]  free:1280027 free_pcp:17918 free_cma:0
[  334.187633][T13549] Node 0 active_anon:15552kB inactive_anon:0kB active_file:13088kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116496kB dirty:296kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13264kB pagetables:3816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  334.224294][T13549] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  334.263509][T13549] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  334.294921][T13549] lowmem_reserve[]: 0 2506 2506 2506 2506
[  334.422786][T13549] Node 0 DMA32 free:1216644kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15612kB inactive_anon:0kB active_file:13088kB inactive_file:159344kB unevictable:1536kB writepending:296kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:52160kB local_pcp:22160kB free_cma:0kB
[  334.510136][T13549] lowmem_reserve[]: 0 0 0 0 0
[  334.537870][T13549] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  334.598345][T13549] lowmem_reserve[]: 0 0 0 0 0
[  334.603128][T13549] Node 1 Normal free:3888008kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20416kB local_pcp:11072kB free_cma:0kB
[  334.641573][T13593] netlink: 'syz.2.1969': attribute type 1 has an invalid length.
[  334.663952][T13549] lowmem_reserve[]: 0 0 0 0 0
[  334.668917][T13549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  334.714557][T13549] Node 0 DMA32: 4*4kB (UME) 355*8kB (UME) 224*16kB (ME) 165*32kB (ME) 357*64kB (UME) 75*128kB (UM) 42*256kB (UME) 12*512kB (UM) 9*1024kB (UM) 5*2048kB (UME) 277*4096kB (UM) = 1215112kB
[  334.744461][T13549] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  334.777243][T13549] Node 1 Normal: 232*4kB (UME) 59*8kB (UME) 47*16kB (UME) 127*32kB (UME) 29*64kB (UME) 12*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3888008kB
[  334.857422][T13549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  334.884405][T13549] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  334.923075][T13549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  334.954980][T13549] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  334.984955][T13549] 45042 total pagecache pages
[  334.989675][T13549] 0 pages in swap cache
[  335.004433][T13549] Free swap  = 124996kB
[  335.008811][T13549] Total swap = 124996kB
[  335.012975][T13549] 2097051 pages RAM
[  335.037356][T13549] 0 pages HighMem/MovableOnly
[  335.052700][T13549] 423781 pages reserved
[  335.062798][T13549] 0 pages cma reserved
[  335.123998][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  335.498728][T13619] __nla_validate_parse: 8 callbacks suppressed
[  335.498748][T13619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1977'.
[  335.990523][T13629] bond9: option mode: unable to set because the bond device is up
[  336.163887][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  336.684901][T13666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1986'.
[  336.717667][T13666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1986'.
[  337.203898][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  338.240663][T13698] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1992'.
[  338.249917][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  338.407664][T13702] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.422681][T13700] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1994'.
[  338.485907][T13700] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.525389][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1994'.
[  338.593577][T13700] bond0: (slave rose0): Enslaving as an active interface with an up link
[  338.611670][T13706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1994'.
[  338.855509][T13714] netlink: 'syz.0.1998': attribute type 11 has an invalid length.
[  338.877405][T13715] netlink: 'syz.0.1998': attribute type 11 has an invalid length.
[  338.952653][T13717] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1999'.
[  339.084345][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2002'.
[  339.279270][T13734] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  339.283827][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  339.310092][T13728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  339.314375][T13734] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  339.412049][T13734] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  339.424667][T13734] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  339.511194][T13734] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  339.521378][T13734] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  339.597261][T13734] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  339.631774][T13734] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  339.672364][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'.
[  339.796599][ T8924] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  339.813223][ T8924] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  339.873053][   T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  339.883793][   T49] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  339.987617][   T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  339.996941][   T49] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  340.199897][ T8926] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  340.213948][ T8926] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  340.243666][T13769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.323806][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  340.368690][T13774] bond6: (slave macvlan2): Enslaving as an active interface with a down link
[  340.528347][T13781] bridge: RTM_NEWNEIGH with invalid ether address
[  340.544769][T13781] macvtap1: entered allmulticast mode
[  340.551038][T13781] bridge0: port 1(macvtap1) entered blocking state
[  340.565026][T13781] bridge0: port 1(macvtap1) entered disabled state
[  340.606574][T13785] __nla_validate_parse: 3 callbacks suppressed
[  340.606594][T13785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'.
[  340.639282][T13785] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  340.655072][T13785] tipc: Enabled bearer <udp:syz0>, priority 10
[  340.675451][T13788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'.
[  341.363792][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  341.389218][T13805] netlink: 'syz.2.2027': attribute type 1 has an invalid length.
[  342.403851][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  343.444022][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  343.549373][T13852] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2037'.
[  344.111584][T13870] netlink: 'syz.1.2043': attribute type 13 has an invalid length.
[  344.405722][T13877] netlink: 'syz.3.2045': attribute type 39 has an invalid length.
[  344.469092][ T8765] IPVS: starting estimator thread 0...
[  344.476803][T13879] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2045'.
[  344.483915][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  344.489250][T13879] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2045'.
[  344.506419][T13879] netlink: 'syz.3.2045': attribute type 5 has an invalid length.
[  344.515490][T13879] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2045'.
[  344.564667][T13880] IPVS: using max 24 ests per chain, 57600 per kthread
[  345.524192][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  345.579531][T13921] netlink: 'syz.2.2055': attribute type 23 has an invalid length.
[  345.800514][T13924] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2056'.
[  345.817859][T13924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2056'.
[  345.827476][T13924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2056'.
[  345.859400][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'.
[  346.106006][T13932] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2059'.
[  346.221920][T13938] netlink: 'syz.2.2061': attribute type 1 has an invalid length.
[  346.245659][T13938] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2061'.
[  346.267391][T13938] netlink: 'syz.2.2061': attribute type 1 has an invalid length.
[  346.287997][T13938] netlink: 'syz.2.2061': attribute type 10 has an invalid length.
[  346.362769][T13938] batadv_slave_0: entered promiscuous mode
[  346.385623][T13938] batadv_slave_0: entered allmulticast mode
[  346.394960][T13938] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  346.564027][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  346.582065][T13963] netlink: 'syz.4.2069': attribute type 22 has an invalid length.
[  346.616999][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'.
[  346.707368][T13963] netlink: 'syz.4.2069': attribute type 22 has an invalid length.
[  346.721171][T13943] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  346.721578][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2069'.
[  346.744186][T13943] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  346.761999][T13943] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  346.781261][T13973] veth1_to_hsr: entered promiscuous mode
[  346.811206][T13973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2071'.
[  346.812021][T13943] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  346.852561][T13973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2071'.
[  347.025817][T13997] netlink: 'syz.4.2077': attribute type 21 has an invalid length.
[  347.053463][T14007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.157501][T14009] Bluetooth: MGMT ver 1.23
[  347.603013][T14032] netlink: 'syz.4.2085': attribute type 11 has an invalid length.
[  347.611105][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  348.416522][T14058] netlink: 'syz.2.2093': attribute type 1 has an invalid length.
[  348.643872][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  348.885400][T14082] ip6gre2: entered allmulticast mode
[  349.336527][T14111] netlink: 'syz.4.2110': attribute type 15 has an invalid length.
[  349.409564][T14109] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  349.450131][T14111] netlink: 'syz.4.2110': attribute type 15 has an invalid length.
[  349.515021][T14115] bond6: Removing last arp target with arp_interval on
[  349.684227][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  350.019735][T14153] team0: Caught tx_queue_len zero misconfig
[  350.053432][T14155] lo: Caught tx_queue_len zero misconfig
[  350.235534][T14165] netlink: 'syz.4.2121': attribute type 1 has an invalid length.
[  350.252726][T14165] netlink: 'syz.4.2121': attribute type 1 has an invalid length.
[  350.723871][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  350.835377][T14201] netlink: 'syz.2.2130': attribute type 1 has an invalid length.
[  350.856291][T14201] __nla_validate_parse: 19 callbacks suppressed
[  350.856311][T14201] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2130'.
[  350.897886][T14201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.934877][T14204] ip6tnl0: Caught tx_queue_len zero misconfig
[  350.943499][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2130'.
[  350.978151][T14201] macsec1: entered allmulticast mode
[  350.993498][T14201] bridge0: entered allmulticast mode
[  351.009829][T14201] bridge0: port 1(macsec1) entered blocking state
[  351.032653][T14201] bridge0: port 1(macsec1) entered disabled state
[  351.067469][T14201] bridge0: left allmulticast mode
[  351.318493][T14220] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  351.336351][T14220] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  351.562779][T14220] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  351.598343][T14220] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  351.763994][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  351.851894][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'.
[  351.917147][T14220] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  351.928895][T14220] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  351.967987][T14240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.033082][T14220] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  352.045518][T14220] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  352.088666][T14243] tipc: Resetting bearer <eth:syzkaller0>
[  352.209375][T13942] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  352.218404][T13942] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  352.251160][T13942] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  352.259949][T13942] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  352.295149][T13942] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  352.304840][T13942] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  352.328087][T13942] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  352.337950][T13942] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  352.472309][T14256] validate_nla: 1 callbacks suppressed
[  352.472332][T14256] netlink: 'syz.2.2146': attribute type 29 has an invalid length.
[  352.493398][T14256] netlink: 'syz.2.2146': attribute type 29 has an invalid length.
[  352.559019][T14267] veth1_to_bond: entered allmulticast mode
[  352.624191][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'.
[  352.652652][T14271] bond0: (slave bond_slave_1): Releasing backup interface
[  352.691737][T14271] veth1_to_bond (unregistering): left allmulticast mode
[  352.710058][T14238] tipc: Disabling bearer <eth:syzkaller0>
[  352.803874][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  353.086598][T14289] syzkaller1: entered promiscuous mode
[  353.092428][T14289] syzkaller1: entered allmulticast mode
[  353.155567][T14291] netlink: 'syz.1.2154': attribute type 8 has an invalid length.
[  353.228503][T14290] syzkaller1: entered promiscuous mode
[  353.235626][T14290] syzkaller1: entered allmulticast mode
[  353.711831][T14307] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2159'.
[  353.843982][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  353.948473][T14317] syzkaller1: entered promiscuous mode
[  353.966004][T14317] syzkaller1: entered allmulticast mode
[  353.973459][T14320] netlink: 'syz.0.2162': attribute type 5 has an invalid length.
[  354.091253][T14331] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2164'.
[  354.105942][T14331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2164'.
[  354.218508][T14337] delete_channel: no stack
[  354.245490][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'.
[  354.561648][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'.
[  354.568123][T14355] netlink: 'syz.3.2172': attribute type 1 has an invalid length.
[  354.599314][T14352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.607499][T14352] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.648848][T14356] netlink: 'syz.0.2170': attribute type 16 has an invalid length.
[  354.659545][T14356] netlink: 'syz.0.2170': attribute type 17 has an invalid length.
[  354.660414][T14355] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  354.682964][T14355] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  354.702699][T14365] IPv6: NLM_F_REPLACE set, but no existing node found!
[  354.884039][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  354.918916][T14361] bond7: (slave bridge0): Enslaving as an active interface with a down link
[  354.949010][T14355] macvlan2: entered promiscuous mode
[  354.955350][T14355] macvlan2: entered allmulticast mode
[  354.961732][T14355] bond7: entered promiscuous mode
[  354.971732][T14355] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  354.981368][T14355] bond7: left promiscuous mode
[  355.016752][ T6269] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.036652][ T6269] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.087019][ T6269] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.107316][ T6269] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.331908][T14388] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2178'.
[  355.923933][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  356.106043][T14408] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2182'.
[  356.151679][T14408] sctp: [Deprecated]: syz.2.2182 (pid 14408) Use of struct sctp_assoc_value in delayed_ack socket option.
[  356.151679][T14408] Use struct sctp_sack_info instead
[  356.169677][T14424] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2189'.
[  356.425955][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'.
[  356.474515][T14424] netlink: 'syz.4.2189': attribute type 13 has an invalid length.
[  356.487325][T14429] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2189'.
[  356.512128][T14424] netlink: 'syz.4.2189': attribute type 17 has an invalid length.
[  356.589291][T14436] netlink: 'syz.1.2191': attribute type 1 has an invalid length.
[  356.727798][T14424] 8021q: adding VLAN 0 to HW filter on device bond0
[  356.744823][T14424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  356.761423][T14438] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2193'.
[  356.779304][T14440] dvmrp0: left allmulticast mode
[  356.855272][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2195'.
[  356.963937][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  356.989540][T14453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2198'.
[  357.005413][T14454] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  357.016085][T14454] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  357.071970][T14454] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  357.086966][T14454] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  357.157655][T14454] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  357.177918][T14454] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  357.223636][T14458] sit0: left promiscuous mode
[  357.250462][T14458] 8021q: adding VLAN 0 to HW filter on device team0
[  357.262988][T14458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  357.280630][T14460] kthread_run failed with err -4
[  357.330001][T14454] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  357.340603][T14454] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  357.519220][T14464] syzkaller0: entered promiscuous mode
[  357.526194][T14464] syzkaller0: entered allmulticast mode
[  357.604091][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout
[  357.605496][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  358.003958][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  359.044734][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  359.069334][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  359.077901][   T12] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  359.100812][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'.
[  359.111063][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'.
[  359.120719][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'.
[  359.274770][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  359.283042][   T12] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  359.323477][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  359.348493][   T12] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  359.361098][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  359.371240][   T12] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  359.634359][T14503] macvlan1 (unregistering): left allmulticast mode
[  359.641169][T14503] macvlan1 (unregistering): left promiscuous mode
[  359.648890][T14503] bridge3: port 1(macvlan1) entered disabled state
[  360.058685][T14511] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  360.083956][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  361.266844][T14538] __nla_validate_parse: 106 callbacks suppressed
[  361.266864][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'.
[  361.460174][T14546] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2220'.
[  362.496483][T14595] pim6reg: entered allmulticast mode
[  362.532534][T14598] pim6reg: left allmulticast mode
[  362.604493][ T5849] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  362.616575][T14599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  362.916343][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'.
[  362.955546][T14599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  363.027459][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2235'.
[  363.063462][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'.
[  363.083134][T14617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2237'.
[  363.297882][T14599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  363.445850][T14599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  364.548232][T14634] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  364.569782][T14634] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  364.595918][T14634] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  364.603594][T14634] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  364.688123][T14634] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  364.692262][T14652] geneve2: entered promiscuous mode
[  364.701204][T14652] geneve2: entered allmulticast mode
[  364.737664][T14634] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  364.759472][T14634] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  364.780936][T14634] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  364.853565][T14634] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  364.864915][T14634] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  365.142415][T14669] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  366.557760][T14700] validate_nla: 2 callbacks suppressed
[  366.557780][T14700] netlink: 'syz.1.2257': attribute type 39 has an invalid length.
[  366.653090][T14709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2257'.
[  366.715872][T14709] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2257'.
[  366.731607][T14713] vlan1: entered allmulticast mode
[  366.754148][T14713] bridge_slave_0: entered allmulticast mode
[  366.767548][T14709] netlink: 'syz.1.2257': attribute type 5 has an invalid length.
[  366.812690][T14709] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2257'.
[  367.053650][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2263'.
[  367.116963][T14730] Unsupported ieee802154 address type: 0
[  367.149500][T14732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2263'.
[  367.204269][ T5849] Bluetooth: hci0: command tx timeout
[  367.214452][T14726] 8021q: adding VLAN 0 to HW filter on device bond7
[  367.353080][T14735] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2265'.
[  367.675635][T14750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2268'.
[  367.793879][T14752] netlink: 'syz.0.2268': attribute type 4 has an invalid length.
[  368.016941][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'.
[  368.075764][T14772] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  368.232129][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'.
[  368.258316][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'.
[  369.041453][T14792] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  369.110921][T14794] sctp: [Deprecated]: syz.2.2280 (pid 14794) Use of int in max_burst socket option.
[  369.110921][T14794] Use struct sctp_assoc_value instead
[  369.129190][T14797] !
: renamed from dummy0 (while UP)
[  370.706900][T14898] sctp: [Deprecated]: syz.2.2302 (pid 14898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  370.706900][T14898] Use struct sctp_sack_info instead
[  371.556433][T14942] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  371.659548][T14944] dvmrp1: entered allmulticast mode
[  371.724949][T14950] netlink: 'syz.4.2317': attribute type 1 has an invalid length.
[  371.753776][T14954] trusted_key: syz.2.2318 sent an empty control message without MSG_MORE.
[  371.829254][T14950] bond10: entered promiscuous mode
[  371.842469][T14950] 8021q: adding VLAN 0 to HW filter on device bond10
[  371.884713][T14957] 8021q: adding VLAN 0 to HW filter on device bond10
[  371.898326][T14957] bond10: (slave wireguard3): The slave device specified does not support setting the MAC address
[  371.909988][T14957] bond10: (slave wireguard3): Setting fail_over_mac to active for active-backup mode
[  371.946033][T14957] bond10: (slave wireguard3): making interface the new active one
[  371.966462][T14960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  371.973799][T14960] IPv6: NLM_F_CREATE should be set when creating new route
[  371.981027][T14960] IPv6: NLM_F_CREATE should be set when creating new route
[  371.992606][T14957] wireguard3: entered promiscuous mode
[  372.008812][T14957] bond10: (slave wireguard3): Enslaving as an active interface with an up link
[  372.026213][T14960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  372.717858][T14994] __nla_validate_parse: 12 callbacks suppressed
[  372.717876][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2329'.
[  374.247897][T15027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2339'.
[  374.263165][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'.
[  374.331969][T15027] bond8: entered promiscuous mode
[  374.343536][T15027] bond8: entered allmulticast mode
[  374.361705][T15027] 8021q: adding VLAN 0 to HW filter on device bond8
[  374.462550][T15032] netlink: 'syz.3.2339': attribute type 1 has an invalid length.
[  374.554767][T15045] openvswitch: netlink: Key 6 has unexpected len 16 expected 2
[  374.737322][T15059] netlink: 'syz.2.2345': attribute type 10 has an invalid length.
[  374.874411][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2346'.
[  375.026620][T15071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2349'.
[  375.231281][T15073] netlink: 'syz.3.2350': attribute type 1 has an invalid length.
[  375.258682][T15073] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2350'.
[  375.273915][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2350'.
[  375.358441][T15078] netlink: 'syz.1.2352': attribute type 1 has an invalid length.
[  375.391729][T15078] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2352'.
[  375.405046][T15078] netlink: 'syz.1.2352': attribute type 1 has an invalid length.
[  375.912142][T15111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2357'.
[  376.131277][T15116] netlink: 'syz.2.2358': attribute type 29 has an invalid length.
[  376.518684][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2364'.
[  377.401587][T15166] syzkaller1: entered promiscuous mode
[  377.413908][T15166] syzkaller1: entered allmulticast mode
[  377.603653][T15178] netlink: 'syz.1.2378': attribute type 1 has an invalid length.
[  377.693284][T15174] gretap2: entered promiscuous mode
[  378.055759][T15196] syzkaller1: entered promiscuous mode
[  378.072698][T15196] syzkaller1: entered allmulticast mode
[  378.097792][T15199] sch_fq: defrate 4294967293 ignored.
[  378.168936][T15203] netlink: 'syz.4.2388': attribute type 1 has an invalid length.
[  378.181524][T15201] sit0: Caught tx_queue_len zero misconfig
[  378.204932][T15203] 8021q: adding VLAN 0 to HW filter on device bond11
[  378.256537][T15203] 8021q: adding VLAN 0 to HW filter on device bond11
[  378.264224][T15203] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  378.276104][T15203] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  378.526062][T15218] netlink: 'syz.2.2391': attribute type 4 has an invalid length.
[  378.977115][T15237] __nla_validate_parse: 5 callbacks suppressed
[  378.977137][T15237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2394'.
[  379.044838][T15237] netlink: 'syz.0.2394': attribute type 3 has an invalid length.
[  379.074374][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'.
[  379.136891][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'.
[  379.197719][T15246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2398'.
[  379.665881][T15270] netlink: 'syz.1.2401': attribute type 64 has an invalid length.
[  379.848644][T15279] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2404'.
[  380.685270][T15299] pim6reg: entered allmulticast mode
[  380.850242][T15306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2410'.
[  380.882128][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'.
[  380.924494][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'.
[  380.954322][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'.
[  380.984900][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2410'.
[  381.174288][T15314] netlink: 'syz.4.2413': attribute type 9 has an invalid length.
[  381.182060][T15314] netlink: 'syz.4.2413': attribute type 6 has an invalid length.
[  381.634831][T15351] bond0: Device is already in use.
[  384.538274][T15435] __nla_validate_parse: 8 callbacks suppressed
[  384.538292][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2441'.
[  384.724083][T15444] pim6reg: entered allmulticast mode
[  384.772263][T15443] pim6reg: left allmulticast mode
[  385.515879][T15461] IPv6: NLM_F_REPLACE set, but no existing node found!
[  385.898139][T15474] netlink: 'syz.1.2455': attribute type 3 has an invalid length.
[  386.020773][T15477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2456'.
[  386.171646][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2457'.
[  386.955512][T15512] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2466'.
[  386.975877][T15512] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2466'.
[  387.036537][T15513] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  387.176142][T15524] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  387.253650][T15525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2470'.
[  387.373220][T15533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2473'.
[  387.383381][T15533] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2473'.
[  388.901248][T15533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2473'.
[  388.913218][T15537] netlink: 'syz.3.2473': attribute type 12 has an invalid length.
[  388.923177][T15537] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2473'.
[  389.045163][T15546] xt_l2tp: missing protocol rule (udp|l2tpip)
[  389.187235][T15554] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  389.215372][T15551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.237495][T15552] syzkaller0: entered promiscuous mode
[  389.258074][T15552] syzkaller0: entered allmulticast mode
[  389.334709][T15552] tipc: Resetting bearer <eth:syzkaller0>
[  389.439146][T15552] tipc: Disabling bearer <eth:syzkaller0>
[  389.693530][T15569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2483'.
[  389.709471][T15567] netlink: 'syz.3.2484': attribute type 1 has an invalid length.
[  389.718672][T15567] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2484'.
[  389.727673][T15569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2483'.
[  389.739123][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2484'.
[  389.954524][T15572] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  390.121517][T15587] tipc: MTU too low for tipc bearer
[  390.208742][T15589] tipc: MTU too low for tipc bearer
[  390.582198][T15605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  390.731153][T15605] syzkaller0: entered promiscuous mode
[  390.737078][T15605] syzkaller0: entered allmulticast mode
[  390.743208][T15605] tipc: Resetting bearer <eth:syzkaller0>
[  390.746968][T15613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2494'.
[  390.791833][T15614] tipc: Resetting bearer <eth:syzkaller0>
[  391.639939][ T8737] tipc: Node number set to 3728363247
[  391.794510][T15628] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2497'.
[  392.461430][T15614] tipc: Disabling bearer <eth:syzkaller0>
[  392.882508][T15628] bond0 (unregistering): left promiscuous mode
[  392.898501][T15628] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  392.912815][T15628] batadv_slave_0: left promiscuous mode
[  392.934456][T15628] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  392.945037][T15628] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  392.956210][T15628] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  392.969259][T15628] batadv_slave_0: left allmulticast mode
[  392.991942][T15628] bond0 (unregistering): Released all slaves
[  393.479425][T15647] netlink: 'syz.1.2502': attribute type 1 has an invalid length.
[  393.515133][ T8765] IPVS: starting estimator thread 0...
[  393.590495][T15647] 8021q: adding VLAN 0 to HW filter on device bond10
[  393.614294][T15650] IPVS: using max 28 ests per chain, 67200 per kthread
[  393.632756][T15651] bond10: (slave ip6gretap2): making interface the new active one
[  393.650578][T15651] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link
[  393.699663][T15647] veth15: entered promiscuous mode
[  393.709210][T15647] bond10: (slave veth15): Enslaving as an active interface with a down link
[  393.906726][T15661] netlink: 'syz.1.2505': attribute type 12 has an invalid length.
[  394.072102][T15666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2506'.
[  395.242016][T15705] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2514'.
[  395.267244][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2515'.
[  395.418398][T15712] netlink: 'syz.4.2516': attribute type 1 has an invalid length.
[  396.007360][T15741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.015967][T15741] syzkaller0: entered promiscuous mode
[  396.021905][T15741] syzkaller0: entered allmulticast mode
[  396.037655][T15741] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  396.067990][T15741] tipc: Resetting bearer <eth:syzkaller0>
[  396.265292][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2529'.
[  396.298268][T15758] team1: entered promiscuous mode
[  396.300913][T15755] netlink: 'syz.0.2530': attribute type 1 has an invalid length.
[  396.303364][T15758] team1: entered allmulticast mode
[  396.306637][T15758] 8021q: adding VLAN 0 to HW filter on device team1
[  396.447973][T15766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2531'.
[  397.074627][ T8765] tipc: Node number set to 1423855502
[  397.090778][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  397.102689][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2539'.
[  397.116600][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2539'.
[  397.242831][T15788] siw: device registration error -23
[  397.402839][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'.
[  397.466364][T15810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'.
[  397.637226][T15808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2543'.
[  397.667907][T15808] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  397.685502][T15810] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  397.819015][T15832] veth1_to_bond: entered allmulticast mode
[  397.920435][T15833] veth1_to_bond: left allmulticast mode
[  398.026781][T15839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.035264][T15839] syzkaller0: entered promiscuous mode
[  398.040763][T15839] syzkaller0: entered allmulticast mode
[  398.101301][T15839] tipc: Resetting bearer <eth:syzkaller0>
[  398.191664][T15838] tipc: Resetting bearer <eth:syzkaller0>
[  398.227727][T15838] tipc: Disabling bearer <eth:syzkaller0>
[  398.438232][T15855] syzkaller1: entered promiscuous mode
[  398.444795][T15855] syzkaller1: entered allmulticast mode
[  398.976165][T15896] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  399.058607][T15898] geneve2: entered promiscuous mode
[  399.184573][T15906] openvswitch: netlink: Missing key (keys=40, expected=80)
[  399.258654][T15913] netlink: 'syz.2.2571': attribute type 13 has an invalid length.
[  399.327970][T15913] bond0: option fail_over_mac: invalid value (6)
[  399.353924][T15913] bond0 (unregistering): Released all slaves
[  400.415201][T15970] __nla_validate_parse: 15 callbacks suppressed
[  400.415222][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2587'.
[  400.431667][T15970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2587'.
[  400.610210][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2589'.
[  400.705422][T15984] vlan5: entered promiscuous mode
[  400.732708][T15984] bond0: entered promiscuous mode
[  400.758687][T15987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  400.948104][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'.
[  400.979872][T16000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2592'.
[  401.215290][T16018] netlink: 'syz.0.2597': attribute type 1 has an invalid length.
[  402.030186][T16018] 8021q: adding VLAN 0 to HW filter on device bond9
[  402.111496][T16019] bond9: (slave ip6gretap2): making interface the new active one
[  402.121133][T16019] bond9: (slave ip6gretap2): Enslaving as an active interface with an up link
[  402.162278][T16024] veth5: entered promiscuous mode
[  402.177579][T16024] bond9: (slave veth5): Enslaving as an active interface with a down link
[  402.204416][T16034] erspan0: entered allmulticast mode
[  402.227563][T16043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2601'.
[  402.449539][T16073] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  402.513247][T16073] bond0: (slave syz_tun): Releasing backup interface
[  402.538105][T16073] bond0: (slave bond_slave_0): Releasing backup interface
[  402.552956][T16073] bond_slave_0: left promiscuous mode
[  402.561169][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2608'.
[  402.571632][T16073] bond0: (slave bond_slave_1): Releasing backup interface
[  402.581244][T16073] bond_slave_1: left promiscuous mode
[  402.588924][T16073] team0: Port device team_slave_0 removed
[  402.596746][T16073] team0: Port device team_slave_1 removed
[  402.603241][T16073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  402.629742][T16080] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2608'.
[  402.647767][T16080] ip6gre2: entered promiscuous mode
[  402.654363][T16073] netlink: 'syz.1.2606': attribute type 10 has an invalid length.
[  402.681642][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'.
[  402.682620][T16073] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  402.706802][T16073] bond0: (slave wlan1): refused to change device type
[  402.878160][T16092] netlink: 2848 bytes leftover after parsing attributes in process `syz.0.2610'.
[  402.989536][T16094] netlink: 'syz.1.2614': attribute type 3 has an invalid length.
[  403.050370][T16090] netlink: 'syz.0.2610': attribute type 1 has an invalid length.
[  403.343140][T16109] netlink: 'syz.1.2620': attribute type 4 has an invalid length.
[  403.526533][T16123] netlink: 'syz.1.2623': attribute type 1 has an invalid length.
[  403.558890][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  403.575126][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  403.586660][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  403.598864][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  403.608825][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  403.637335][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  403.647720][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  403.658498][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  403.676621][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  403.692840][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  403.719843][T16123] 8021q: adding VLAN 0 to HW filter on device bond5
[  404.213036][T16145] netlink: 'syz.2.2631': attribute type 4 has an invalid length.
[  404.231544][T16145] netlink: 'syz.2.2631': attribute type 4 has an invalid length.
[  404.313098][T16145] netlink: 'syz.2.2631': attribute type 4 has an invalid length.
[  404.494946][T16156] Dead loop on virtual device ip6_vti0, fix it urgently!
[  404.865527][T16122] chnl_net:caif_netlink_parms(): no params data found
[  405.078569][T16122] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.094443][T16122] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.108202][T16122] bridge_slave_0: entered allmulticast mode
[  405.117040][T16122] bridge_slave_0: entered promiscuous mode
[  405.127122][T16122] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.135824][T16122] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.143177][T16122] bridge_slave_1: entered allmulticast mode
[  405.163463][T16122] bridge_slave_1: entered promiscuous mode
[  405.268994][ T8925] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  405.381872][T16122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.417771][T16122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.493030][T16122] team0: Port device team_slave_0 added
[  405.518856][T16122] team0: Port device team_slave_1 added
[  405.531712][T16210] IPv6: NLM_F_CREATE should be specified when creating new route
[  405.579155][T16122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.588740][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.621588][T16122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.637323][T16122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.646575][T16122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.680378][T16122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.713494][T16217] netlink: 'syz.0.2645': attribute type 4 has an invalid length.
[  405.768912][T16220] netlink: 'syz.0.2645': attribute type 4 has an invalid length.
[  405.770313][ T5849] Bluetooth: hci1: command tx timeout
[  405.826904][T16122] hsr_slave_0: entered promiscuous mode
[  405.833535][T16122] hsr_slave_1: entered promiscuous mode
[  406.403015][T16122] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.480342][T16122] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.548037][T16249] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.646055][ T8927] bond5: (slave macvlan0): link status definitely down, disabling slave
[  406.698965][T16122] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.769841][T16253] bond0: Caught tx_queue_len zero misconfig
[  406.769957][T16254] __nla_validate_parse: 8 callbacks suppressed
[  406.769972][T16254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2657'.
[  406.835497][T16122] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  406.992109][T16267] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  407.097916][T16267] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  407.493651][T16122] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  407.537432][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'.
[  407.573004][T16122] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  407.610406][T16289] vlan1: entered promiscuous mode
[  407.633048][T16285] syzkaller1: entered promiscuous mode
[  407.640050][T16285] syzkaller1: entered allmulticast mode
[  407.657890][T16122] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  407.760309][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2668'.
[  407.845928][ T5849] Bluetooth: hci1: command tx timeout
[  408.020830][T16122] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  408.677717][T16341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'.
[  408.792293][T16343] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2676'.
[  408.848581][T16122] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.960747][T16122] 8021q: adding VLAN 0 to HW filter on device team0
[  408.993553][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.000761][ T8925] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.042696][T13943] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.049935][T13943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  409.891642][T16122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.925390][ T5849] Bluetooth: hci1: command tx timeout
[  410.008737][T16380] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2684'.
[  410.527079][T16122] veth0_vlan: entered promiscuous mode
[  410.547202][T16122] veth1_vlan: entered promiscuous mode
[  410.686821][T16122] veth0_macvtap: entered promiscuous mode
[  410.745176][T16122] veth1_macvtap: entered promiscuous mode
[  410.847125][T16122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.878295][T16122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.932698][ T8927] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.986687][ T8927] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.020045][ T8927] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.099698][ T8927] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.329711][ T8927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.371962][ T8927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.499913][T16414] gtp1: entered promiscuous mode
[  411.513791][T16414] gtp1: entered allmulticast mode
[  411.534991][T16417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  411.588234][T16417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  411.604982][T16417] hsr0: entered promiscuous mode
[  411.617548][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.634638][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.017103][ T5849] Bluetooth: hci1: command tx timeout
[  412.286128][T16449] netlink: 'syz.0.2688': attribute type 6 has an invalid length.
[  412.613363][T16459] bond0: Device is already in use.
[  412.672767][T16464] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2702'.
[  412.909765][T16477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2704'.
[  412.923989][T16471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.005235][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2704'.
[  413.014491][T16480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2704'.
[  413.092124][T16477] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.169526][T16477] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.248209][T16477] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.415862][T16477] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.039577][T13943] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.047488][T16500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2709'.
[  414.049560][T13943] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.065684][T13943] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.197937][T16500] vlan0: entered promiscuous mode
[  414.203011][T16500] bond0: entered promiscuous mode
[  414.345320][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.551923][T16505] netlink: 'syz.3.2712': attribute type 1 has an invalid length.
[  414.562157][T16505] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2712'.
[  414.575141][T16505] netlink: 'syz.3.2712': attribute type 2 has an invalid length.
[  414.583210][T16505] netlink: 'syz.3.2712': attribute type 1 has an invalid length.
[  414.596439][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2712'.
[  414.853623][T16518] netlink: 'syz.2.2718': attribute type 25 has an invalid length.
[  414.922612][T16519] 8021q: VLANs not supported on ipvlan1
[  414.945811][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2720'.
[  415.575163][T16575] tipc: Started in network mode
[  415.578517][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2736'.
[  415.580153][T16575] tipc: Node identity ac1414aa, cluster identity 4711
[  415.581067][T16575] tipc: Enabled bearer <udp:s>, priority 10
[  415.722775][T16585] bridge5: port 1(veth17) entered blocking state
[  415.760988][T16585] bridge5: port 1(veth17) entered disabled state
[  415.816387][T16585] veth17: entered allmulticast mode
[  415.857405][T16585] veth17: entered promiscuous mode
[  415.898963][T16579] bridge5: port 2(veth0_to_bond) entered blocking state
[  415.919746][T16579] bridge5: port 2(veth0_to_bond) entered disabled state
[  415.931470][T16579] veth0_to_bond: entered allmulticast mode
[  415.987855][T16579] veth0_to_bond: entered promiscuous mode
[  416.032514][T16585] vlan2: entered allmulticast mode
[  416.037923][T16585] veth1: entered allmulticast mode
[  416.043927][T16585] bridge5: port 3(vlan2) entered blocking state
[  416.050852][T16585] bridge5: port 3(vlan2) entered disabled state
[  416.059763][T16585] vlan2: entered promiscuous mode
[  416.065190][T16585] veth1: entered promiscuous mode
[  416.395272][T16628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2745'.
[  416.437083][T16628] rdma_op ffff8880250d41f0 conn xmit_rdma 0000000000000000
[  416.473131][T16626] netlink: 'syz.3.2747': attribute type 4 has an invalid length.
[  416.693817][ T8737] tipc: Node number set to 2886997162
[  416.775784][T16646] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  416.790015][T16647] netlink: 'syz.4.2749': attribute type 9 has an invalid length.
[  416.799330][T16647] netlink: 'syz.4.2749': attribute type 7 has an invalid length.
[  416.817641][T16647] netlink: 'syz.4.2749': attribute type 8 has an invalid length.
[  416.937284][T16652] netlink: 'syz.3.2752': attribute type 13 has an invalid length.
[  418.012393][T16696] __nla_validate_parse: 3 callbacks suppressed
[  418.012414][T16696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2761'.
[  418.125749][T16698] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2762'.
[  418.150077][T16701] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2763'.
[  418.250524][T16707] Bluetooth: MGMT ver 1.23
[  418.484116][ T5849] Bluetooth: hci1: command tx timeout
[  418.713555][T16715] bond_slave_1: entered promiscuous mode
[  418.719837][T16714] bond_slave_1: left promiscuous mode
[  418.763469][T16721] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2769'.
[  419.119781][T16731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2769'.
[  419.356846][T16739] validate_nla: 1 callbacks suppressed
[  419.356865][T16739] netlink: 'syz.4.2772': attribute type 10 has an invalid length.
[  419.445574][T16739] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.463084][T16739] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  419.507931][T16739] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.535683][T16739] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.602621][T16739] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.638814][T16739] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.766051][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  419.782039][T16739] bond0: (slave batadv0): Releasing backup interface
[  419.843085][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2773'.
[  419.955850][T16763] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  420.095972][T16775] netlink: 'syz.1.2781': attribute type 6 has an invalid length.
[  420.119617][T16771] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2779'.
[  420.238452][T16784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2783'.
[  420.393590][T16797] netlink: 'syz.0.2786': attribute type 5 has an invalid length.
[  420.406873][T16795] bond0: option packets_per_slave: invalid value (16779898)
[  420.415274][T16795] bond0: option packets_per_slave: allowed values 0 - 65535
[  420.755263][T16817] netlink: 'syz.0.2790': attribute type 11 has an invalid length.
[  421.012127][T16825] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2793'.
[  421.032777][T16827] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2792'.
[  423.025418][T16939] netlink: 'syz.1.2819': attribute type 2 has an invalid length.
[  423.035079][T16939] netlink: 'syz.1.2819': attribute type 1 has an invalid length.
[  423.044579][T16939] __nla_validate_parse: 5 callbacks suppressed
[  423.044600][T16939] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2819'.
[  423.074612][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2820'.
[  423.310163][T16962] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2824'.
[  423.512181][T16972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2826'.
[  424.076981][T16995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2831'.
[  425.021746][T17040] Dead loop on virtual device ip6_vti0, fix it urgently!
[  425.436606][ T8737] IPVS: starting estimator thread 0...
[  425.543921][T17055] IPVS: using max 27 ests per chain, 64800 per kthread
[  425.611199][T17060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2848'.
[  425.615042][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  425.640518][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  425.793161][T17065] Bluetooth: hci0: Opcode 0x080f failed: -22
[  425.807521][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2849'.
[  425.892147][T17067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2850'.
[  425.961527][T17071] netlink: 'syz.0.2852': attribute type 6 has an invalid length.
[  426.035603][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2853'.
[  426.114892][T17074] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2853'.
[  426.445375][T17089] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  426.829871][T17097] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  426.888880][T17099] pimreg: entered allmulticast mode
[  426.930457][T17099] pimreg: left allmulticast mode
[  426.931704][T17101] netlink: 'syz.2.2861': attribute type 7 has an invalid length.
[  426.943633][T17099] dvmrp1: left allmulticast mode
[  427.401909][T17131] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  427.423588][T17118] bond13: Removing last arp target with arp_interval on
[  427.440336][T17118] bond13: entered promiscuous mode
[  427.446759][T17118] bond13: entered allmulticast mode
[  427.455354][T17118] 8021q: adding VLAN 0 to HW filter on device bond13
[  427.601875][T17144] netlink: 'syz.3.2871': attribute type 11 has an invalid length.
[  427.844587][ T5849] Bluetooth: hci0: command tx timeout
[  428.120768][T17177] netlink: 'syz.4.2882': attribute type 11 has an invalid length.
[  428.156445][T17182] __nla_validate_parse: 10 callbacks suppressed
[  428.156465][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2884'.
[  428.190242][T17177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2882'.
[  428.205379][T17177] netlink: 'syz.4.2882': attribute type 11 has an invalid length.
[  428.215813][T17177] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2882'.
[  428.277410][T17192] netlink: 'syz.1.2888': attribute type 1 has an invalid length.
[  428.336682][T17196] netlink: 'syz.2.2887': attribute type 39 has an invalid length.
[  428.357558][T17200] netlink: 'syz.3.2889': attribute type 2 has an invalid length.
[  428.396359][T17192] 8021q: adding VLAN 0 to HW filter on device bond14
[  428.398300][T17205] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2887'.
[  428.431272][T17205] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2887'.
[  428.453363][T17205] netlink: 'syz.2.2887': attribute type 5 has an invalid length.
[  428.462642][T17205] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2887'.
[  428.518113][T17209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2892'.
[  428.547119][T17209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2892'.
[  428.994397][T17223] netlink: 'syz.1.2895': attribute type 1 has an invalid length.
[  429.609550][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  429.620553][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  429.629766][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  429.638688][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  429.646775][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  429.882415][T13943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.892713][T13943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.908322][T17242] tipc: Failed to remove unknown binding: 66,1,1/33820791:2187364794/2187364796
[  429.919993][T17242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  429.946301][ T8925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  429.970060][ T8925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.682110][T17247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2902'.
[  431.107380][T17260] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2906'.
[  431.142726][   T49] batman_adv: batadv0: Removing interface: netdevsim0
[  431.684131][ T5854] Bluetooth: hci3: command tx timeout
[  431.708317][T17294] ip6gretap0: entered promiscuous mode
[  431.715113][T17294] macsec1: entered promiscuous mode
[  431.720521][T17294] macsec1: entered allmulticast mode
[  431.727119][T17294] ip6gretap0: entered allmulticast mode
[  431.759078][T17235] chnl_net:caif_netlink_parms(): no params data found
[  432.057058][T17321] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  432.415417][   T49] batman_adv: batadv0: Removing interface: gretap1
[  432.530310][   T49] bond5 (unregistering): (slave gretap3): Releasing active interface
[  433.245165][   T49] bond1 (unregistering): Released all slaves
[  433.359525][   T49] bond2 (unregistering): (slave bond3): Releasing backup interface
[  433.368544][   T49] bond2 (unregistering): Released all slaves
[  433.471681][   T49] bond3 (unregistering): Released all slaves
[  433.485784][   T49] bond4 (unregistering): Released all slaves
[  433.498518][   T49] bond5 (unregistering): Released all slaves
[  433.596814][   T49] bond6 (unregistering): Released all slaves
[  433.694011][   T49] bond7 (unregistering): Released all slaves
[  433.706914][   T49] bond8 (unregistering): Released all slaves
[  433.719575][   T49] bond9 (unregistering): Released all slaves
[  433.740821][T17304] netlink: 'syz.0.2918': attribute type 30 has an invalid length.
[  433.742424][T17317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.759099][T17317] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.764159][ T5854] Bluetooth: hci3: command tx timeout
[  434.018067][   T49] tipc: Disabling bearer <udp:s>
[  434.028944][   T49] tipc: Disabling bearer <udp:syz2>
[  434.040050][   T49] tipc: Left network mode
[  434.089633][   T49] IPVS: stopping backup sync thread 7250 ...
[  434.160255][T17357] __nla_validate_parse: 7 callbacks suppressed
[  434.160273][T17357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2929'.
[  434.241304][T17235] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.264459][T17235] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.271784][T17235] bridge_slave_0: entered allmulticast mode
[  434.278235][T17361] netlink: 'syz.4.2930': attribute type 1 has an invalid length.
[  434.280348][T17235] bridge_slave_0: entered promiscuous mode
[  434.399984][T17361] 8021q: adding VLAN 0 to HW filter on device bond1
[  434.411437][T17235] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.419127][T17235] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.426574][T17235] bridge_slave_1: entered allmulticast mode
[  434.434765][T17235] bridge_slave_1: entered promiscuous mode
[  434.453220][T17367] bond1: (slave geneve2): making interface the new active one
[  434.462707][T17367] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  434.733387][T17378] ip6tnl1: entered promiscuous mode
[  434.756719][T17235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.778316][T17235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.827834][T17386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2934'.
[  435.002647][T17395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.032457][T17235] team0: Port device team_slave_0 added
[  435.059083][T17392] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  435.104561][T17235] team0: Port device team_slave_1 added
[  435.197215][   T49] hsr_slave_0: left promiscuous mode
[  435.203355][   T49] hsr_slave_1: left promiscuous mode
[  435.210481][   T49] batman_adv: batadv0: Removing interface: virt_wifi0
[  435.259895][   T49] pim6reg (unregistering): left allmulticast mode
[  435.341688][   T49] pim6reg99999999 (unregistering): left allmulticast mode
[  435.843923][ T5854] Bluetooth: hci3: command tx timeout
[  436.422130][T17392] tipc: Resetting bearer <eth:syzkaller0>
[  436.438699][T17235] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.462598][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.489725][T17235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.507281][T17235] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.523878][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  436.603708][T17235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.765424][T17391] tipc: Disabling bearer <eth:syzkaller0>
[  437.171608][T17235] hsr_slave_0: entered promiscuous mode
[  437.207814][T17235] hsr_slave_1: entered promiscuous mode
[  437.256606][T17235] debugfs: 'hsr0' already exists in 'hsr'
[  437.323800][T17235] Cannot create hsr debugfs directory
[  437.376112][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'.
[  437.571137][   T49] IPVS: stop unused estimator thread 0...
[  437.668547][T17457] netlink: 'syz.1.2953': attribute type 18 has an invalid length.
[  437.680588][T17453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2950'.
[  437.793193][T17463] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  437.924006][ T5854] Bluetooth: hci3: command tx timeout
[  437.937145][T17471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2956'.
[  437.982908][T17471] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2956'.
[  437.995398][T17471] netlink: zone id is out of range
[  438.000683][T17471] netlink: zone id is out of range
[  438.007121][T17471] netlink: zone id is out of range
[  438.012687][T17471] netlink: zone id is out of range
[  438.018552][T17471] netlink: get zone limit has 8 unknown bytes
[  438.237805][T17235] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  438.259955][T17235] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  438.263559][T17492] netlink: 'syz.1.2961': attribute type 1 has an invalid length.
[  438.278045][T17492] netlink: 'syz.1.2961': attribute type 2 has an invalid length.
[  438.288105][T17491] netlink: 'syz.1.2961': attribute type 1 has an invalid length.
[  438.288541][T17235] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  438.297257][T17491] netlink: 'syz.1.2961': attribute type 2 has an invalid length.
[  438.311619][T17491] netlink: 'syz.1.2961': attribute type 1 has an invalid length.
[  438.317284][T17235] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  438.328260][T17491] netlink: 'syz.1.2961': attribute type 2 has an invalid length.
[  438.336450][T17491] netlink: 'syz.1.2961': attribute type 1 has an invalid length.
[  438.550617][T17511] IPVS: Scheduler module ip_vs_sip not found
[  438.577424][T17235] 8021q: adding VLAN 0 to HW filter on device bond0
[  438.617042][T17235] 8021q: adding VLAN 0 to HW filter on device team0
[  438.698171][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.705495][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  438.725712][T17511] IPVS: length: 141 != 8
[  438.739326][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.746781][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  438.921664][T17235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  439.516251][T17540] 
: renamed from bond_slave_0
[  439.819085][T17235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  440.077195][T17235] veth0_vlan: entered promiscuous mode
[  440.099384][T17235] veth1_vlan: entered promiscuous mode
[  440.152371][T17235] veth0_macvtap: entered promiscuous mode
[  440.165054][T17235] veth1_macvtap: entered promiscuous mode
[  440.218656][T17235] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.265472][T17235] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.347719][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.368847][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.429890][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.453776][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.470893][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'.
[  440.519149][T17578] validate_nla: 61 callbacks suppressed
[  440.519167][T17578] netlink: 'syz.0.2973': attribute type 12 has an invalid length.
[  440.611857][T17581] raw_sendmsg: syz.1.2975 forgot to set AF_INET. Fix it!
[  440.776851][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.808192][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.951179][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  440.958025][T17590] netlink: 'syz.1.2977': attribute type 1 has an invalid length.
[  440.969425][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2977'.
[  440.980402][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.076841][T17604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2982'.
[  441.107450][T17604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2982'.
[  441.153492][T17604] bond16: entered promiscuous mode
[  441.162261][T17604] bond16: entered allmulticast mode
[  441.168092][T17604] 8021q: adding VLAN 0 to HW filter on device bond16
[  441.257339][T17614] tipc: Started in network mode
[  441.262255][T17614] tipc: Node identity 3ad9ba940a07, cluster identity 4711
[  441.283105][T17614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  441.361012][T17612] syzkaller0: entered promiscuous mode
[  441.380541][T17612] syzkaller0: entered allmulticast mode
[  441.478743][T17614] tipc: Resetting bearer <eth:syzkaller0>
[  441.501521][T17614] tipc: Disabling bearer <eth:syzkaller0>
[  441.708712][T17641] hsr0: entered promiscuous mode
[  441.767359][T17641] hsr0: left promiscuous mode
[  441.897604][T17653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2993'.
[  441.901666][T17655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2994'.
[  441.930362][T17653] netlink: 'syz.1.2993': attribute type 7 has an invalid length.
[  441.952126][T17653] netlink: 'syz.1.2993': attribute type 8 has an invalid length.
[  442.013983][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2993'.
[  442.168703][T17669] netlink: 'syz.0.2998': attribute type 39 has an invalid length.
[  442.219397][T17670] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2998'.
[  442.245417][ T5849] Bluetooth: hci3: command 0x0405 tx timeout
[  442.254676][T17670] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2998'.
[  442.266151][T17670] netlink: 'syz.0.2998': attribute type 5 has an invalid length.
[  442.274402][T17670] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2998'.
[  442.910403][T17697] netlink: 'syz.4.3007': attribute type 7 has an invalid length.
[  443.366265][T17713] netlink: 'syz.4.3011': attribute type 1 has an invalid length.
[  443.458841][T17713] bond2: entered promiscuous mode
[  443.488536][T17713] 8021q: adding VLAN 0 to HW filter on device bond2
[  443.818421][   T30] audit: type=1107 audit(1759700156.187:13): pid=17738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  444.903201][T17771] bond0: entered promiscuous mode
[  444.925042][T17771] bond_slave_0: entered promiscuous mode
[  444.941256][T17771] bond_slave_1: entered promiscuous mode
[  444.959769][T17771] veth1_to_bridge: entered promiscuous mode
[  444.977750][T17771] hsr1: entered promiscuous mode
[  445.192299][T17785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.381788][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  445.394012][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  445.402775][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  445.412544][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  445.421239][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  445.451796][ T2991] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  445.494849][ T2991] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  445.573925][T17795] __nla_validate_parse: 13 callbacks suppressed
[  445.573946][T17795] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3033'.
[  445.591352][T17794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3034'.
[  445.739592][ T2991] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  445.797289][ T2991] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  446.024166][T17817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3038'.
[  446.048006][T17817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3038'.
[  446.085446][ T2991] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  446.113729][ T2991] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  447.185042][ T2991] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  447.195284][ T2991] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  447.374270][T17788] chnl_net:caif_netlink_parms(): no params data found
[  447.445096][ T5854] Bluetooth: hci4: command tx timeout
[  447.671957][T17859] tipc: Enabling of bearer <et‚:g> rejected, media not registered
[  447.752221][T17869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3050'.
[  447.761892][T17869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3050'.
[  447.926783][T17869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3050'.
[  447.937227][T17869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3050'.
[  448.406664][ T2991] bond5 (unregistering): (slave gretap1): Releasing active interface
[  448.492485][ T2991] bond4 (unregistering): (slave geneve3): Releasing active interface
[  448.628296][ T2991] bond7 (unregistering): (slave bridge0): Releasing active interface
[  448.845769][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.855836][ T2991] bond0 (unregistering): (slave team0): Releasing backup interface
[  448.869725][ T2991] bond0 (unregistering): Released all slaves
[  448.883011][ T2991] bond1 (unregistering): Released all slaves
[  448.898087][ T2991] bond2 (unregistering): Released all slaves
[  449.016556][ T2991] bond3 (unregistering): Released all slaves
[  449.158735][ T2991] bond4 (unregistering): Released all slaves
[  449.269806][ T2991] bond5 (unregistering): Released all slaves
[  449.282510][ T2991] bond6 (unregistering): Released all slaves
[  449.295526][ T2991] bond7 (unregistering): Released all slaves
[  449.407990][ T2991] bond8 (unregistering): Released all slaves
[  449.420645][ T2991] bond9 (unregistering): Released all slaves
[  449.433248][ T2991] bond10 (unregistering): Released all slaves
[  449.533929][ T5854] Bluetooth: hci4: command tx timeout
[  449.573255][T17788] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.635866][T17788] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.643156][T17788] bridge_slave_0: entered allmulticast mode
[  449.671695][T17788] bridge_slave_0: entered promiscuous mode
[  449.717896][ T2991] tipc: Disabling bearer <udp:syz2>
[  449.725499][ T2991] tipc: Disabling bearer <udp:syz0>
[  449.730906][ T2991] tipc: Left network mode
[  449.739148][T17788] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.757454][T17788] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.777952][T17788] bridge_slave_1: entered allmulticast mode
[  449.851959][T17788] bridge_slave_1: entered promiscuous mode
[  450.000346][T17788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.035449][T17923] tipc: Enabled bearer <udp:s>, priority 10
[  450.085968][T17788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.176928][T17931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3060'.
[  450.333375][T17788] team0: Port device team_slave_0 added
[  450.436855][T17503] nci: nci_rx_work: unknown MT 0x1
[  450.483480][T17788] team0: Port device team_slave_1 added
[  450.564668][T17788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.571836][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.600285][T17788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.612623][T17956] netlink: 'syz.0.3067': attribute type 1 has an invalid length.
[  450.650974][T17788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.659583][T17788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.687231][T17788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.758653][ T2991] hsr_slave_0: left promiscuous mode
[  450.768681][ T2991] hsr_slave_1: left promiscuous mode
[  450.774978][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.780031][T17962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3069'.
[  450.792218][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.831619][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3069'.
[  451.034652][ T8763] tipc: Node number set to 819903124
[  451.276272][ T2991] team0 (unregistering): Port device team_slave_1 removed
[  451.290782][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3071'.
[  451.333982][ T2991] team0 (unregistering): Port device team_slave_0 removed
[  451.613920][ T5854] Bluetooth: hci4: command tx timeout
[  451.759864][T17788] hsr_slave_0: entered promiscuous mode
[  451.796058][T17788] hsr_slave_1: entered promiscuous mode
[  451.812467][T17788] debugfs: 'hsr0' already exists in 'hsr'
[  451.819853][T17788] Cannot create hsr debugfs directory
[  451.918189][T17978] netlink: 4928 bytes leftover after parsing attributes in process `syz.2.3073'.
[  452.075413][T17991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3074'.
[  452.295223][ T2991] IPVS: stop unused estimator thread 0...
[  452.327132][T18001] can: request_module (can-proto-5) failed.
[  452.565756][T18013] netlink: 'syz.0.3079': attribute type 1 has an invalid length.
[  452.574486][T18013] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3079'.
[  452.751822][T18019] netlink: 'syz.4.3082': attribute type 13 has an invalid length.
[  452.763999][T18019] netlink: 'syz.4.3082': attribute type 17 has an invalid length.
[  452.875876][T18019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  452.917160][T17788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  452.942800][T17788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  452.970152][T17788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  452.995749][T17788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  453.005074][T18024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3084'.
[  453.054079][T18024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'.
[  453.167516][T17788] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.197881][T17788] 8021q: adding VLAN 0 to HW filter on device team0
[  453.224622][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.231937][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.241816][T18042] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.249080][T18042] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.267460][T18040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.318557][T13943] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.325848][T13943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.355314][T18040] syzkaller0: entered promiscuous mode
[  453.370860][T18040] syzkaller0: entered allmulticast mode
[  453.460976][T18040] tipc: Resetting bearer <eth:syzkaller0>
[  453.468613][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3087'.
[  453.479595][T18047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.505310][T18037] tipc: Resetting bearer <eth:syzkaller0>
[  453.525377][T18037] tipc: Disabling bearer <eth:syzkaller0>
[  453.560260][T18047] syzkaller0: entered promiscuous mode
[  453.566218][T18047] syzkaller0: entered allmulticast mode
[  453.613145][T18046] tipc: Resetting bearer <eth:syzkaller0>
[  453.665468][T18060] netlink: 'syz.1.3095': attribute type 39 has an invalid length.
[  453.685701][ T5854] Bluetooth: hci4: command tx timeout
[  455.236910][T18046] tipc: Disabling bearer <eth:syzkaller0>
[  455.612119][T18086] Bluetooth: MGMT ver 1.23
[  455.770842][T17788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.787483][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3103'.
[  455.814294][T18092] IPv6: sit1: Disabled Multicast RS
[  455.820848][T18092] sit1: entered allmulticast mode
[  455.883274][T17788] veth0_vlan: entered promiscuous mode
[  455.924587][T17788] veth1_vlan: entered promiscuous mode
[  455.991342][T17788] veth0_macvtap: entered promiscuous mode
[  456.019533][T17788] veth1_macvtap: entered promiscuous mode
[  456.047043][T17788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.061638][T17788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.109875][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.134788][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.160457][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.191449][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.256962][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3107'.
[  456.266813][T13942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.275342][T13942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.314218][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.330394][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.477515][T18114] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3109'.
[  456.543966][T18117] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3109'.
[  456.553311][T18117] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3109'.
[  456.596054][T18123] netlink: 'syz.4.3109': attribute type 1 has an invalid length.
[  456.614111][T18122] !
: renamed from dummy0 (while UP)
[  456.655710][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3109'.
[  456.657200][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'.
[  456.674397][T18126] Unsupported xt match
[  456.674413][T18126] unable to load match
[  457.817031][T18172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3118'.
[  457.860109][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  457.863596][T18169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3118'.
[  457.876982][T18132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3111'.
[  457.897613][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  457.907404][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  457.917415][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  457.927323][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  458.040372][T18167] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.248053][T18194] vlan2: entered promiscuous mode
[  458.268169][T18194] bond0: entered promiscuous mode
[  458.273250][T18194] bond_slave_0: entered promiscuous mode
[  458.290778][T18194] bond_slave_1: entered promiscuous mode
[  458.445701][T18167] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.573514][T18167] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.678532][T18209] pim6reg1: entered promiscuous mode
[  458.687309][T18209] pim6reg1: entered allmulticast mode
[  458.900626][T18167] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.065090][T18232] tipc: Failed to remove unknown binding: 66,1,1/819903124:3151736683/3151736685
[  459.074932][T18232] tipc: Failed to remove unknown binding: 66,1,1/819903124:3151736683/3151736685
[  459.171736][T18175] chnl_net:caif_netlink_parms(): no params data found
[  459.200333][T17503] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  459.246647][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  459.260724][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.288889][T18243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  459.308568][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.317511][T18243] syzkaller0: entered promiscuous mode
[  459.322989][T18243] syzkaller0: entered allmulticast mode
[  459.391104][T18243] tipc: Resetting bearer <eth:syzkaller0>
[  459.399167][T18175] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.410413][T18175] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.418646][T18175] bridge_slave_0: entered allmulticast mode
[  459.427282][T18175] bridge_slave_0: entered promiscuous mode
[  459.436613][T18242] tipc: Resetting bearer <eth:syzkaller0>
[  459.455772][T18242] tipc: Disabling bearer <eth:syzkaller0>
[  459.466922][T18175] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.474832][T18175] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.483069][T18175] bridge_slave_1: entered allmulticast mode
[  459.492537][T18175] bridge_slave_1: entered promiscuous mode
[  459.577521][T18175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.604950][T18175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.689463][T18175] team0: Port device team_slave_0 added
[  459.699470][T18175] team0: Port device team_slave_1 added
[  459.764410][T18175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.793541][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.831402][T18175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.849832][T18175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.867192][T18261] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  459.879545][T18175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.921978][T18175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.005429][ T5854] Bluetooth: hci0: command tx timeout
[  460.044248][T18175] hsr_slave_0: entered promiscuous mode
[  460.051194][T18175] hsr_slave_1: entered promiscuous mode
[  460.059043][T18175] debugfs: 'hsr0' already exists in 'hsr'
[  460.064935][T18175] Cannot create hsr debugfs directory
[  460.093363][T18265] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode
[  460.110575][T18265] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  460.492075][T18293] tipc: Started in network mode
[  460.506380][T18293] tipc: Node identity 92b96be4a6a5, cluster identity 4711
[  460.520870][T18293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  460.549472][T18300] syzkaller0: entered promiscuous mode
[  460.555370][T18300] syzkaller0: entered allmulticast mode
[  460.577441][T18293] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  460.595263][T18301] syzkaller1: entered promiscuous mode
[  460.601341][T18301] syzkaller1: entered allmulticast mode
[  460.622657][T18292] tipc: Resetting bearer <eth:syzkaller0>
[  460.645193][T18292] tipc: Disabling bearer <eth:syzkaller0>
[  460.799372][T18311] netlink: 'syz.3.3156': attribute type 49 has an invalid length.
[  461.059545][T18320] netlink: 'syz.3.3159': attribute type 7 has an invalid length.
[  461.061338][T18175] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  461.130221][T18175] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  461.173638][T18175] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  461.201952][T18175] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  461.362756][T18175] 8021q: adding VLAN 0 to HW filter on device bond0
[  461.371687][T18338] wg1 speed is unknown, defaulting to 1000
[  461.385180][T18338] wg1 speed is unknown, defaulting to 1000
[  461.396659][T18175] 8021q: adding VLAN 0 to HW filter on device team0
[  461.404598][T18338] wg1 speed is unknown, defaulting to 1000
[  461.439825][T18338] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  461.466844][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.474323][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.511156][T18338] wg1 speed is unknown, defaulting to 1000
[  461.521482][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.529422][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.558035][T18338] wg1 speed is unknown, defaulting to 1000
[  461.567024][T18338] wg1 speed is unknown, defaulting to 1000
[  461.577698][T18338] wg1 speed is unknown, defaulting to 1000
[  461.592348][T18338] wg1 speed is unknown, defaulting to 1000
[  461.664580][T18340] __nla_validate_parse: 5 callbacks suppressed
[  461.664598][T18340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3163'.
[  461.676274][T18338] wg1 speed is unknown, defaulting to 1000
[  461.735677][T18338] wg1 speed is unknown, defaulting to 1000
[  462.067957][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'.
[  462.081279][T18360] bridge_slave_1: left allmulticast mode
[  462.088111][ T5854] Bluetooth: hci0: command tx timeout
[  462.094923][T18360] bridge_slave_1: left promiscuous mode
[  462.100782][T18360] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.116994][T18360] bridge_slave_0: left allmulticast mode
[  462.143200][T18360] bridge_slave_0: left promiscuous mode
[  462.150315][T18360] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.151092][T18367] netlink: 'syz.3.3168': attribute type 1 has an invalid length.
[  462.182030][T18367] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3168'.
[  462.241455][T18175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  462.252381][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3171'.
[  462.263269][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3171'.
[  462.327497][T18372] wg1 speed is unknown, defaulting to 1000
[  462.346949][T18371] wg1 speed is unknown, defaulting to 1000
[  462.444881][T18175] veth0_vlan: entered promiscuous mode
[  462.530814][T18175] veth1_vlan: entered promiscuous mode
[  462.590858][T18175] veth0_macvtap: entered promiscuous mode
[  462.611220][T18175] veth1_macvtap: entered promiscuous mode
[  462.632093][T18175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  462.660936][T18175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.700027][   T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.720368][   T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.737815][T18379] netlink: 'syz.4.3173': attribute type 10 has an invalid length.
[  462.757311][   T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.769211][T18379] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.782752][T18379] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.790072][T18379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.801746][T18379] bridge0: entered promiscuous mode
[  462.803916][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  462.809092][T18379] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  462.823353][T18379] netlink: 'syz.4.3173': attribute type 10 has an invalid length.
[  462.838195][   T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.850820][T18379] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.861964][T18379] netlink: 'syz.4.3173': attribute type 10 has an invalid length.
[  462.911587][T18379] netlink: 'syz.4.3173': attribute type 10 has an invalid length.
[  462.942323][T18379] netlink: 'syz.4.3173': attribute type 10 has an invalid length.
[  462.991114][T18379] netlink: 'syz.4.3173': attribute type 10 has an invalid length.
[  463.041052][T18379] netlink: 'syz.4.3173': attribute type 10 has an invalid length.
[  463.062209][T13943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.080898][T13943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.093607][T18379] netlink: 'syz.4.3173': attribute type 10 has an invalid length.
[  463.119504][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'.
[  463.144668][T18379] netlink: 'syz.4.3173': attribute type 10 has an invalid length.
[  463.162740][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.207288][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.229230][ T8741] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  463.237437][ T8741] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  463.247610][ T8741] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  463.365045][T18396] wg1 speed is unknown, defaulting to 1000
[  463.372076][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3178'.
[  463.444583][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'.
[  463.812059][T18410] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3181'.
[  463.850664][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  463.866543][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  463.901860][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  463.939244][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  464.164877][ T5854] Bluetooth: hci0: command tx timeout
[  464.258326][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  464.271547][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  464.281777][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  464.318807][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  464.330199][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  464.349063][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'.
[  464.555622][T13943] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  464.574675][T13943] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  464.593976][T18427] Bluetooth: MGMT ver 1.23
[  464.608549][T13943] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  464.624844][T13943] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  464.681247][T18419] wg1 speed is unknown, defaulting to 1000
[  465.109316][T18419] chnl_net:caif_netlink_parms(): no params data found
[  465.542792][T18419] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.556000][T18419] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.563382][T18419] bridge_slave_0: entered allmulticast mode
[  465.595954][T18419] bridge_slave_0: entered promiscuous mode
[  465.622643][T18468] syz_tun: entered allmulticast mode
[  465.637235][T18419] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.662170][T18419] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.672200][T18419] bridge_slave_1: entered allmulticast mode
[  465.690051][T18419] bridge_slave_1: entered promiscuous mode
[  465.690786][T18473] delete_channel: no stack
[  465.706966][T18467] syz_tun: left allmulticast mode
[  466.108372][T18419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.138322][T18419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  466.181924][T18477] team0: Port device dummy0 added
[  466.209173][T18478] team0: Port device dummy0 removed
[  466.225278][T18478] dummy0: entered promiscuous mode
[  466.245153][ T5854] Bluetooth: hci0: command tx timeout
[  466.255506][T18478] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  466.413883][ T5854] Bluetooth: hci5: command tx timeout
[  466.455817][T18419] team0: Port device team_slave_0 added
[  466.475881][T18419] team0: Port device team_slave_1 added
[  466.562773][T18419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  466.580417][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.644904][T18419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  466.673044][T18419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  466.683426][T18419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  466.751318][T18419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.945613][T18419] hsr_slave_0: entered promiscuous mode
[  466.961901][T18419] hsr_slave_1: entered promiscuous mode
[  466.984065][T18419] debugfs: 'hsr0' already exists in 'hsr'
[  466.991421][T18419] Cannot create hsr debugfs directory
[  467.450838][T18523] ipvlan2: entered promiscuous mode
[  467.753044][T18540] __nla_validate_parse: 5 callbacks suppressed
[  467.753073][T18540] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3213'.
[  468.226076][T18550] validate_nla: 29 callbacks suppressed
[  468.226096][T18550] netlink: 'syz.0.3217': attribute type 1 has an invalid length.
[  468.243443][T18550] netlink: 'syz.0.3217': attribute type 2 has an invalid length.
[  468.253357][T18550] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3217'.
[  468.407805][ T5885] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI
[  468.419820][ T5885] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f]
[  468.428429][ T5885] CPU: 1 UID: 0 PID: 5885 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) 
[  468.437898][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  468.448151][ T5885] Workqueue: events l2cap_info_timeout
[  468.453616][ T5885] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  468.459513][ T5885] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 37 12 09 cc 66 66 66 66 66 66 2e
[  468.479290][ T5885] RSP: 0018:ffffc9000482f7a8 EFLAGS: 00010206
[  468.485962][ T5885] RAX: dffffc0000000000 RBX: ffffffff8919b8b8 RCX: 43403dc28a4cb700
[  468.493949][ T5885] RDX: 0000000000000000 RSI: ffffffff8919b8b8 RDI: 000000000000004b
[  468.501929][ T5885] RBP: ffffffff8a449805 R08: 0000000000000001 R09: 0000000000000000
[  468.509919][ T5885] R10: dffffc0000000000 R11: ffffffff8a4497c0 R12: 0000000000000000
[  468.518334][ T5885] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001
[  468.526392][ T5885] FS:  0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000
[  468.535307][ T5885] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  468.541891][ T5885] CR2: 00007f98a21a6440 CR3: 0000000063b24000 CR4: 00000000003526f0
[  468.549904][ T5885] Call Trace:
[  468.553355][ T5885]  <TASK>
[  468.556553][ T5885]  __kasan_check_byte+0x12/0x40
[  468.561505][ T5885]  lock_acquire+0x8d/0x360
[  468.565921][ T5885]  ? lockdep_hardirqs_on+0x9c/0x150
[  468.571145][ T5885]  ? __cancel_work+0x254/0x2e0
[  468.575919][ T5885]  lock_sock_nested+0x48/0x100
[  468.581046][ T5885]  ? l2cap_sock_ready_cb+0x45/0x140
[  468.586252][ T5885]  l2cap_sock_ready_cb+0x45/0x140
[  468.591278][ T5885]  l2cap_conn_start+0x76d/0xe50
[  468.596209][ T5885]  ? __pfx_l2cap_conn_start+0x10/0x10
[  468.601597][ T5885]  ? __lock_acquire+0xab9/0xd20
[  468.607096][ T5885]  ? __pfx___mutex_lock+0x10/0x10
[  468.612134][ T5885]  ? process_scheduled_works+0x9ef/0x17b0
[  468.617961][ T5885]  l2cap_info_timeout+0x68/0xa0
[  468.622887][ T5885]  ? process_scheduled_works+0x9ef/0x17b0
[  468.628770][ T5885]  process_scheduled_works+0xade/0x17b0
[  468.634406][ T5885]  ? __pfx_process_scheduled_works+0x10/0x10
[  468.640380][ T5885]  worker_thread+0x8a0/0xda0
[  468.645049][ T5885]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  468.651389][ T5885]  ? __kthread_parkme+0x7b/0x200
[  468.656409][ T5885]  kthread+0x711/0x8a0
[  468.660472][ T5885]  ? __pfx_worker_thread+0x10/0x10
[  468.665600][ T5885]  ? __pfx_kthread+0x10/0x10
[  468.670274][ T5885]  ? _raw_spin_unlock_irq+0x23/0x50
[  468.675468][ T5885]  ? lockdep_hardirqs_on+0x9c/0x150
[  468.680758][ T5885]  ? __pfx_kthread+0x10/0x10
[  468.685423][ T5885]  ret_from_fork+0x436/0x7d0
[  468.690001][ T5885]  ? __pfx_ret_from_fork+0x10/0x10
[  468.695100][ T5885]  ? __switch_to_asm+0x39/0x70
[  468.699887][ T5885]  ? __switch_to_asm+0x33/0x70
[  468.704729][ T5885]  ? __pfx_kthread+0x10/0x10
[  468.709336][ T5885]  ret_from_fork_asm+0x1a/0x30
[  468.714108][ T5885]  </TASK>
[  468.717124][ T5885] Modules linked in:
[  468.722605][ T5885] ---[ end trace 0000000000000000 ]---
[  468.727046][T18419] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  468.753003][ T5854] Bluetooth: hci5: command tx timeout
[  468.758678][ T5885] RIP: 0010:kasan_byte_accessible+0x12/0x30
[  468.775807][ T5885] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 37 12 09 cc 66 66 66 66 66 66 2e
[  468.811904][ T5885] RSP: 0018:ffffc9000482f7a8 EFLAGS: 00010206
[  468.818181][ T5885] RAX: dffffc0000000000 RBX: ffffffff8919b8b8 RCX: 43403dc28a4cb700
[  468.826245][ T5885] RDX: 0000000000000000 RSI: ffffffff8919b8b8 RDI: 000000000000004b
[  468.834685][ T5885] RBP: ffffffff8a449805 R08: 0000000000000001 R09: 0000000000000000
[  468.842699][ T5885] R10: dffffc0000000000 R11: ffffffff8a4497c0 R12: 0000000000000000
[  468.847425][T18419] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  468.850837][ T5885] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001
[  468.883313][ T5885] FS:  0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000
[  468.892486][ T5885] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  468.913755][ T5885] CR2: 00007ffe18e95ff8 CR3: 000000007bbb4000 CR4: 00000000003526f0
[  468.915236][T18419] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  468.921773][ T5885] Kernel panic - not syncing: Fatal exception
[  468.922069][ T5885] Kernel Offset: disabled