last executing test programs:

29.950278978s ago: executing program 2 (id=6565):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000080), 0x12)
close(r2)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1000005, 0xfffffffffffffe95)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4000000)
r6 = socket$isdn(0x22, 0x3, 0x21)
r7 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(r7, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0)
connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @local}, 0x0, 0x2, 0x2}}, 0x26)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

29.130853099s ago: executing program 3 (id=6567):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x400, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x5}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000300)={@rand_addr=0x64010102, @loopback, @remote}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000044)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@multicast, @local, @val={@void, {0x8100, 0x3, 0x1, 0x4}}, {@canfd={0xd, {{0x1, 0x0, 0x1, 0x1}, 0x22, 0x2, 0x0, 0x0, "ae602ab70a0bf5fb6e02757464e230ddd920f329be2c2357d6217df68443bb4021e5b9a271edc8490508e1ecdab9bdda9c1375660c6c059efd3a72335b555f6e"}}}}, &(0x7f00000002c0)={0x1, 0x3, [0xb57, 0x412, 0x7bf, 0xa27]})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELCHAIN={0x84, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x66a64dc3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3e5709f5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x54, 0xe, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWCHAIN={0x150, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x4b, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4d}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xfd, 0xc, "62e33e944e5a964757b0f0f61223a566b4553c294b4f9ed6d511abbd9b203e4c28703c1f906381a1a76ccd6f7d9bf5c787554e425f731a9a3e972dbe0adb8dcc7f344b1a0d6a1fc79276c1b1d53acb18b35627b7c0795cdadfca8d41008d7da1f889f59c07f774095232ede624c3475ce811fa55cd9ba4f50852779a08452731fe18dbeb7da919a621e5ea6dc7a6b977a514d785ed6a2446c8c7a52ddbeb2777dc81207b6d4dbb8f1d5274d104c2daa9cfe56b5937fbc139f266e079a2060ba88afdc25c1d3f454bd47a5e71124877c051ef0a08120992e679681cc9ac508feda898724b1b9a3532dcb129ac611d5630c90e68f275b123a342"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x279210dd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2d8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

28.84708932s ago: executing program 0 (id=6568):
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x128}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="882388e57e6098aea3b01988b246b45117"], 0x20}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newaddr={0x11, 0x14, 0xca1}, 0x18}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7, 0xc, 0x7}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x11c, r14, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4f3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x355}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x38, 0x8, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x48d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0x8, 0xff, 0xdcc, 0x4, 0x6, 0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x64]}]}, @NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2f83f2b4}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2e}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6843}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)

26.23015924s ago: executing program 4 (id=6572):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r3 = socket(0x1e, 0x4, 0x0) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000000)=0x1, 0x4)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async)
recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) (async)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) (async)
close(0x4)

25.807659295s ago: executing program 3 (id=6573):
r0 = socket$netlink(0x10, 0x3, 0xa)
writev(r0, &(0x7f0000000080), 0x0)

25.718638516s ago: executing program 2 (id=6574):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)

25.709026529s ago: executing program 1 (id=6575):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0) (async)
socket(0x2a, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa)
sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x8, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
close(0x4)

25.364924596s ago: executing program 0 (id=6576):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0)

25.023365757s ago: executing program 4 (id=6577):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r1, 0x80089000)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0)
mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0)
mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @random="3d4f1250b43a"}]}]}}}]}, 0x50}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

24.830405578s ago: executing program 2 (id=6578):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xc83417c22f980b3c}, {0x4}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480))
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="000126bd7000fddbdf25030000000800040000000000580003801400020067656e65766531000000000000000000060004000000000014000600fe8000000000000000000000000000bb0600040002000000060007004e20000014000600fe88000000000000000000000000000108000400090000001c000400070000000800060006000000"], 0x8c}}, 0x8000001)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000040)={<r8=>r7, 0x100000000, 0x7, 0x101})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000300000000000000000018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008900000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r10, 0x6, 0x8, &(0x7f0000000000)="6a0ea48a", 0x4)
getsockopt$inet_tcp_int(r10, 0x6, 0x8, 0x0, &(0x7f0000001b80))
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0)
getsockopt$inet6_tcp_int(r8, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

24.720923589s ago: executing program 3 (id=6579):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c)
recvmmsg(r1, &(0x7f0000000100), 0x3f, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000ac0)={{'\x00', 0x1}, {0x5}, 0x86, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)="1a74d9ddfefee2f38d0625fec723c9da329d1eed02fc5ab05fd90726fddc28931a6e9ac932580f5ccb47db85a49889997a8e08709af1b53ec1060cc53dcabd7792610c442bb6a925cec6bc0d340962702ecfcda8f1b24338a6b24fa1a36ae1a3ca05f14a6f16e91ee1d4bbbdca11be293fbdfa41557e6fed3e8c84cbbe08bd485fe1d347fdc429221e51d7da0d925082e962e4547d3217c2e7cda68f03ea130bd0e4c14ffc5619665525d45a58579f3301cf6c78d614f4452f8bca1ecfbca3b183600722893734030ded6c25b83c067e67bfb7b886aa945a22f4ac38abdfc209563d9050fd11fbb1d2fb3f21590836a2d1f4c1dcdde29efe283243cf24e53a47778f2c94abb9fe4794858f706fc98f92d37f248371bc42db421de1924e2c1df6b61264a0f85dacaed43f8e989f40fd085182b5e5d9fe3234e9347710fcc31bc62636bc110ceb8a5487859b040df09e94ae49e944306b703278f3e62780f350b1ad7f6e5411ff1b7a365746bb08f4fc9e1970c92c367010bb228071ab48d59dd21b629f6c649e0afdcbdadb48ad961e721baf5ee3fc8ebddc944159b6763c8ac1fe8ea88d7f603ef3b9d9eaa73391d5a84808fda24aeada8b0ace44c9a14b554ca130576203d63100c49c30c500e083972cf3135ccf14df57442658433560c7bdbc8e30", 0x1e3, 0x0, &(0x7f00000009c0)=ANY=[], 0xe0})
bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000080000000100000000000008010000000100000000000008030000000e0000000000000c030000000100000005000006e09e00000b000000ff01000004000000070000000f00000007000900000000000000ffff1000000000000000080000000000000905000000005f5f303f"], 0x0, 0x84}, 0x20)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63", 0x8}], 0x1}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="110000006a"], 0xfe33)
sendmsg$can_j1939(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x1d, r4, 0x0, {0x0, 0x1, 0x1}}, 0x18, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8c1}, 0x41)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dffbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff2, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macsec0\x00'})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
getpeername(r7, 0x0, 0x0)

24.157295044s ago: executing program 4 (id=6580):
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x70, "4dc0952a7225740a729a51664752a6af85887b87631ce93e02fb17dc83368b16895bfea557076d9c50a84b0a3736443127eb803b0a3db9f7f0bebe2027309bc3f8a1e2a46639099860b051a7fd8bb7ec1edda827b2b8545ea16d1e278497e45cd3c80100976800"/112}, &(0x7f00000000c0)=0x78) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x70, "4dc0952a7225740a729a51664752a6af85887b87631ce93e02fb17dc83368b16895bfea557076d9c50a84b0a3736443127eb803b0a3db9f7f0bebe2027309bc3f8a1e2a46639099860b051a7fd8bb7ec1edda827b2b8545ea16d1e278497e45cd3c80100976800"/112}, &(0x7f00000000c0)=0x78)
socket(0x10, 0x803, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = accept4(r5, &(0x7f00000006c0)=@alg, &(0x7f0000000740)=0x80, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000780)={r4, 0x3ff}, 0x8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf25120000000500e400000000000600b500ea04000006001000c60700000a0006000802110000000000180011800400020004000200040004000400060004000300"], 0x50}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r6, @ANYBLOB="46060900000000002400128009000100626f6e6400000400140002800800040088"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x7, 0xe2d7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r3, 0x7, 0xe2d7}, 0x8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0)

23.977092758s ago: executing program 1 (id=6581):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x8, [@const={0xd, 0x0, 0x0, 0xa, 0x1}, @fwd={0xb}, @datasec={0x3, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x6, 0xf19}, {0x5, 0x3, 0x6}, {0x2, 0x8001, 0x3}, {0x5, 0x24000000, 0x9}], "f3"}, @datasec={0x3, 0x8, 0x0, 0xf, 0x3, [{0x2, 0xb716, 0xa000000}, {0x1, 0x5, 0x10}, {0x5, 0x2, 0xc32b}, {0x2, 0x0, 0x4}, {0x3, 0x80, 0x4}, {0x3, 0x82c, 0x3}, {0x2, 0xb55e, 0xf6b}, {0x2, 0xc, 0x401}], "298296"}, @restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30, 0x61, 0x0, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000640)=""/169, 0xfc, 0xa9}, 0x28) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 32)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "3ac3014a9fe5b5be", "1f0111f25415d92e72c8263e63f2bdd8", "9f78339f", "72ea5413bc718716"}, 0x28) (async)
recvfrom$inet6(r4, 0x0, 0x0, 0x10023, 0x0, 0x0) (async)
shutdown(r4, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, <r7=>0xffffffffffffffff}, 0x4) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%pI4   \x00'}, 0x20) (async)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x26, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x1, 0x3, 0x3, 0x7, 0x8, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @jmp={0x5, 0x0, 0x7, 0xb, 0x1, 0x80, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}]}, &(0x7f0000000440)='syzkaller\x00', 0x8, 0xad, &(0x7f0000000480)=""/173, 0x41000, 0x33, '\x00', 0x0, @fallback=0x35, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0xc, 0x81, 0xffffffff}, 0x10, 0xffffffffffffffff, r2, 0x3, &(0x7f0000000900)=[r3, r7, r8, r9], &(0x7f0000000940)=[{0x2, 0x1, 0x0, 0x9}, {0x5, 0x4, 0xe, 0x4}, {0x1, 0x2, 0x5, 0x7}], 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

22.964946699s ago: executing program 1 (id=6582):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async)
r1 = accept(r0, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1)
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf25020000003c00018038000400200001002ad03b380000bd78fe8000000000000000000000339369755d7700000024050000001400020002004e24ac1e010100000000000000002e34c2c29f8583519f681c410700000000000000d5eaeef4ac2fd9aba5cc65b8a116f677ef096f41aac016fb407052e504c1deb03b7fb6fdc920a21eaa05f8757032d5bb5728c7d98ec8de43059bbe40e6c0d2d93d0be09da65e64b0832dd903df3b05842551876dd0418c8aa27bb6282b53b25a6b0138e2dbead8f14316e6ef269fdd0d0f249eade94138c640c9d8000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40)

22.860396379s ago: executing program 0 (id=6583):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
bind$netrom(r0, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async)

22.451496889s ago: executing program 0 (id=6584):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) (fail_nth: 3)
socket$inet6_sctp(0xa, 0x1, 0x84)

22.263520348s ago: executing program 3 (id=6585):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300)
syz_80211_join_ibss(&(0x7f0000000640)='wlan0\x00', &(0x7f0000000680)=@default_ap_ssid, 0x6, 0x2)
r4 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="b6d7554830b2ab675f5b9c242a76702e3e551b463b8baad9a9e28b3ad4faacafcadaf1fa294390e74dc9ddd34b64615c793758412120a5badbbd792ec9b2f7e7d98b46b60baf6ed77f98220b712d359c5ee0a6d7e58148fd1bd45de3a3988b7fee60518c9b5a3391d148b4ca97032bb4d5b4a2b3f14a6e3b5b9e153fa2de3000f697f4629cd1afa2a15043c4d1c6f8d1ce355f6ba1aa5597b584532ed94184d39106fa710ff2b90ce8acf327e5cf6d51a1a4e91d3b8a91170c240dce988f9aa7ee7239250b71c63aaa8374", 0xcb}, {&(0x7f0000000240)="7aa490844ee02c785b1ca33dd9ef158f0796d524a9905c30ab2c583a60654e504f70176807b5649d87e450edd976adfc2bb269f13c0c7ca3419e9bfdddaa0b3f6659c836544255d6a568a0d0b1c3f4e67d7f6d4640f1a4a1fb5529a373b213f69903d5644ace9074f9d886a2571dd57af9659b72c448e47faba8959cf8bd1b0446605b4362dc00b46128eccabea849d7c1fa6a2a025dab0c44ae144fea6cbe759cf9f64110589bd62b9e4d79f4315ed7f213d09c7d16269734bb473cf6b06f4eb33a3b0ea6c58ae7fc0d907d4755c32c2ecda9819e04b5e28ebce41af06661b2c87587b58f2e331323e1ea5cfa65f84c158f988ab2c7ccd8", 0xf8}], 0x2, &(0x7f0000000380)=[{0xa0, 0xff, 0xc31, "a65301f5c47ccb3435357c56889e446461d494643c450c5777ea4b0313396c6bfde1e1ec187545f2981f96de1c6fff7ab2e3a3b1e25f4d5f74f3d098a7ab53bbbb8cff2fcfbefc3c1f09ab6f29d74e2350e15507a60ce0e2613ed5542c30be3de86cb3331580cb2e786a18901642bfe4e94ae2e99875aae405d90cba107a1055a074bba0bb6383edcffc37"}, {0x100, 0x1, 0x2, "e81eba05004f85703de955e6ed90a08abf676a2566d3e73c399b2bbe79672b4d4096c0336b4b28dd9e36cb520f79c06bbf6267358cc581c4b175f8be7ba6b388b883f9c88dad4f588385fde0a99042fe94feec32b7d5d9412a8867a5f5299e2692692300ea433b3ea3123b1349e30eef2c95ece998c6969ad05c7f2e47a444b99543c405046bdcc22a489afc1758e8921686912a08f14574232b2577e68ed414fd44b2443ac37ffb58f99091bf07b17f7aeee706636509bdb21c1af6660f746205b776e1af8efa4f564fa93ff41f2ff7bc9ce87937637fe589616a6940a7149963d11a9f90d220467adf46c83937"}, {0x30, 0x10b, 0x10001, "51f43c71994ac6a3ea4697328bf3e0693415bb91344be3cf9c39734690"}, {0x80, 0x113, 0xb02, "faca1eb5ccae9504441bbf4922ba8f26cfdd0f71c21ee273e7ac717d86c3a9c790d0285ec566d621ab45645bd28f44f332b7afad0390caacf4f97baebc099ae528f8e631dc01b405f26e1ecf85695b37d087c051643b46f65b86d9be5f7a492624a66c5c24b8588cbec5eb9a7d"}], 0x250}, 0x45)

22.029149707s ago: executing program 4 (id=6586):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x34, r1, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]})

21.995115926s ago: executing program 1 (id=6587):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff01000000000000000000000000000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0)
socket$netlink(0x10, 0x3, 0xc) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff01000000000000000000000000000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001000000000008000740000000001800068014000400ff010000000000000000000000000001"], 0xac}}, 0x0) (async)

21.83079324s ago: executing program 2 (id=6588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000480)={r0})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a010200000000000000000a0000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)

21.145012433s ago: executing program 2 (id=6589):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x4, &(0x7f0000001940)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000005500000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)

21.144514271s ago: executing program 1 (id=6590):
r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80000)
ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000048000000090a17ff00000000000000000700000008000a400000000208000340000001250900010073797a3000000000080005400000001c08000640ffffff00080003400000002c140000001000010000000000000000000084000a"], 0x90}}, 0x4000000)

21.04963295s ago: executing program 3 (id=6591):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

20.963356437s ago: executing program 0 (id=6592):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f00000002c0)={0x0, 0x1, 0x18000000000000, 0x0, 0x8, 0xfff}) (async)
ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f00000002c0)={0x0, 0x1, 0x18000000000000, 0x0, 0x8, 0xfff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, r2, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x27}, @void, @val={0xc, 0x99, {0x3, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0xab, 0xc5, "a2301593a3bd596b5f771b826e6acd01632b67ec3df5e180ffa5e5f94919d35f0c2b0913cd3a8b7f98087916cf6da29f5d9c86e4a02fec29b3d477afb1a544792835d749879d8d007c62037e5e2d70d99d8d9431e51593418e40da96d01ef4fe0ac4a3a17c94e15c24368d4b2f9c166a871439f42f7aa0f166c379613861b55c27812e6df4ceae5fe18280e1e21cdaab0f6d363d1614c1a7faa3b08bcc6def892d0a58e43957db"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf62}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x250, 0xffffffff, 0x380, 0x250, 0x6a0, 0x6a0, 0xffffffff, 0x6a0, 0x6a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1], 0x9}}, @common=@unspec=@pkttype={{}, {0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@eui64, @common=@rt={{}, {0x7fff, [0xffffffff, 0x5], 0xf1a, 0x20, 0x0, [@empty, @empty, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}], 0x4}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4cc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', <r5=>0x0})
socket$caif_stream(0x25, 0x1, 0x3) (async)
r6 = socket$caif_stream(0x25, 0x1, 0x3)
ioctl$FITHAW(r6, 0xc0045878) (async)
ioctl$FITHAW(r6, 0xc0045878)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0xfffffffd, 0x73, 0x11, 0x9f}, [], {0x95, 0x0, 0x1200}}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r5, @fallback=0x13, r3}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00'], 0x50)

20.954614377s ago: executing program 4 (id=6593):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000200))

20.860551944s ago: executing program 1 (id=6594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0x800}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0xfd, {@mac=@local, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast1, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r2 = socket$kcm(0x2, 0x1, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400050010000100000000003a000000000500000a480000000c0a010100000000000000000a0000060900020073797a3100000000090001006202bbcefe572083e0fe87248273797a31000000001c000380180000800c0001800600010012ad0000080003400000000114000000110001936f469f60690c908c580b35f67806def5c628269b4e97e212a6a905dd30bdd4b6d3dd08661a07786a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000200)={{<r7=>r2, &(0x7f0000000000)='batadv0\b', 0x22000, &(0x7f0000000040)={@_ha_fsid={[0x3ff, 0xf]}, {0x9242, 0x8, 0x1000, 0x80000001}}, 0xe, &(0x7f0000000180), &(0x7f0000000140)=0x400b}, {[0x10, 0x4, 0xd, 0xfffffff9]}, 0x85, 0x44, &(0x7f0000000480)=""/68})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r7, &(0x7f0000000280)="6e55fc6a0380c77e5b3a4066e7c3822267828d794cf282454b0e8409e487b3f442350ad06ab221ed3067fa1f6661214b11c89321fffa", &(0x7f0000000380)=""/163}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f00000020c0)="9f", 0x1}], 0x1}, 0x1)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r8})
pipe(&(0x7f00000016c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001700)=<r10=>0x0)
ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000001740)=<r11=>0x0)
r12 = getgid()
sendmsg$netlink(r0, &(0x7f0000001800)={&(0x7f0000000580)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)=[{&(0x7f00000005c0)={0x18, 0x1a, 0x10, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x104, 0x0, 0x0, @str='\',\x91\x00'}]}, 0x18}, {&(0x7f00000008c0)={0x178, 0x10, 0x4, 0x70bd2d, 0x25dfdbff, "", [@generic="736a3b6c97d9ae800f1c633ddfcd5173fbaf118f3d0745a1bf4ee3d6dcc7c0ec06e5296d3081d9fc4f1bc0464268a35430b0a0f1bd8d727574841f8e05eea16e", @typed={0xc, 0x7e, 0x0, 0x0, @u64=0xfff}, @nested={0x11a, 0x0, 0x0, 0x1, [@typed={0x14, 0x20, 0x0, 0x0, @ipv6=@mcast1}, @generic="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", @typed={0x8, 0x10f, 0x0, 0x0, @uid}]}]}, 0x178}, {&(0x7f0000000a40)={0x2e0, 0x2e, 0x1, 0x70bd27, 0x25dfdbff, "", [@generic="993d8e0adcf5efe78433e08dc5e8bcff45a9b1f309f00fa2025f6cf231705e0012e47c069b623f0180d3ecaeef263da2dd9131c287cd8ee77630503bc2b81a7508e20649b9aa7dbcb86409c46a4d22b67a0e190802de375e0d7923c8794cddcda5cc84479b3eee2341969655b9f22661b0fdf1bfe201d3886f1446f9bdeb0424310093e7267b5fc172895231f01798d42757b903a8e2f8d52f5b93ad4ea5c36a9d2293df8804a597e8228ea874", @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="c459b1e2d553030e69f3fe80ae86e6b52c06801500d80098e85e2c4bf13f53540aac6fa6dcba21190fc5debbf35ae936eb15ceafa9b7a20073fcf56fc5bf4f70ae4a3526f8da1066a9a6c2d2d77087df5b385ef8dd9ae8562b1ed9e9e1e899ae7920f1f0ae77c16777b13a5349ffdf4baa370d16f56f36ff8a760aed907d8ea3be74fe3cdce31163b254efa814d6a56750b0eba274cda341d2c972349239eec52379d651c38be341454cde0e32", @typed={0x8, 0xab, 0x0, 0x0, @u32=0xffff}, @generic="ffcb10e9ae44aa805e4078e5dd1930c599a20a8a8ee8fe064a0202fb15b1ac554e23a7102d9c0d6b1ae4f59c24f24a19409101b5f26bca28c2148d4c6f0bd0d1b2ec7cb0768525dff3b7c3e9338320dcfe2660543a60c95d909d1e6e030167709eefb1e4378a289a0fbaf325a374a0891489e3c88d4b6533b94a88ccaec817a73bcf8c902c02ba2a194effbdabc3bc1babf61cf8866a07160e94017624f93a2fc099453be70fd10df1f089374851d7fe9f43ebb03604cedd5a57e6fd9fff81", @generic="869e7f992de35cdea07758eeab9a0cf57367897c4ef1bc31e598fc5bd847de76d45f73134cf3c5d26243353b4e3116aa47afc49ec8bd4be8404d342ddf692053a99c7f7479f57f0171d9db4b610bfbc2842b5eb626b1c917ebf5a2957d398a04ef2d4108f6180f4de03a5a232acf1dc77085ded26891b3b523e4bf6688e16ef9832716a268bbe7a41660d4df1f17ca6fd881d5a786b9c61932"]}, 0x2e0}, {&(0x7f0000000d40)={0xa0, 0x13, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x82, 0xd9, 0x0, 0x1, [@typed={0x4, 0x21}, @generic="3b9bdaadb69274140e84dfe9598715cc8ecc70fb", @nested={0x4, 0xaa}, @typed={0x8, 0xf6, 0x0, 0x0, @fd=r5}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @nested={0x4, 0x3d}, @nested={0x4, 0x4}, @generic="6bccafb44bdde3b56e220759bf702b1679f89e31402c7fd71677364818d27ffff0ff6d92ef677f0ad50a379e673cc1687ba0722bc29a09e52e252d78bcd0"]}, @typed={0xc, 0x153, 0x0, 0x0, @u64=0x8}]}, 0xa0}, {&(0x7f0000000e00)={0xb4, 0x2b, 0x1, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r1}, @generic="304c404d3feacca27c8e0839a590ec125fd395852bd7f7b7630a35863c2de306d0c4f2639833fe4689c54ac43161bad1a9651a08ea2d61853e2b26700d520dadf03782cedf44e2f90afe7d2666ace36f41fcaa2778d7894f2483e448ecec2b74b980073489b6052d4f5a0a77aaec113b7e19d72f5b56e6fc9db5e254b20eb78fc43f0970d1de9cd13fadd27bb0fed5c8b200625b"]}, 0xb4}, {&(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="04008400eee3a288a1adc4db69df77e518449c3998cda2e8d96678f0545310b000a26dacd701d4edd62f8a800a85c37d960daddc85d0177d7722e2fc58b13ab05d1f62e3f5d594b4817254dda393dbafc8c21840baf3ddc46f8e50f50e63ae3b2ee78db6900f521b58c30e65b940f3369862ff122d96ffc672c55eb24199a63ed9e1e4ed620293f6eaefa1219df7494e855a0ac780a9ee551b165ed65bbc5283abaed118abb5f826ac46bf85ba83f342afc3b713264a703121cfc3855de481d57eb6e39b64242244b5ed6f431b2e5dbc43af2936473368253538c97ac40000"], 0x4b8}], 0x6, &(0x7f0000001780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r9, r6, r2, r6, r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x60, 0x24008000}, 0x4010)
syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa000000000000007f0800450000180000000000aa5613e79800"/38], 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r13=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r13], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x4008001)

20.860235342s ago: executing program 2 (id=6595):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16, @ANYBLOB="0100000000003fc14d"], 0x134}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9", 0x7}], 0x1)

20.554078365s ago: executing program 4 (id=6596):
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) (async, rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64)
r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', <r2=>0x0, 0x700, 0x80, 0x0, 0xfffffffb, {{0x8, 0x4, 0x1, 0x3b, 0x20, 0x9, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0xc, 0x2b, 0x0, 0x8, [0x4, 0x5]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sk_msg}, 0x94)

20.529271134s ago: executing program 3 (id=6597):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x401c5820, &(0x7f00000004c0)={0x0, 0x0, 0x5})
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128-generic\x00'}, 0x58)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

14.374837168s ago: executing program 0 (id=6598):
unshare(0x22020600) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x20000) (async)
mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xbb}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 32 (id=6594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0x800}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0xfd, {@mac=@local, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast1, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r2 = socket$kcm(0x2, 0x1, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400050010000100000000003a000000000500000a480000000c0a010100000000000000000a0000060900020073797a3100000000090001006202bbcefe572083e0fe87248273797a31000000001c000380180000800c0001800600010012ad0000080003400000000114000000110001936f469f60690c908c580b35f67806def5c628269b4e97e212a6a905dd30bdd4b6d3dd08661a07786a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000200)={{<r7=>r2, &(0x7f0000000000)='batadv0\b', 0x22000, &(0x7f0000000040)={@_ha_fsid={[0x3ff, 0xf]}, {0x9242, 0x8, 0x1000, 0x80000001}}, 0xe, &(0x7f0000000180), &(0x7f0000000140)=0x400b}, {[0x10, 0x4, 0xd, 0xfffffff9]}, 0x85, 0x44, &(0x7f0000000480)=""/68})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r7, &(0x7f0000000280)="6e55fc6a0380c77e5b3a4066e7c3822267828d794cf282454b0e8409e487b3f442350ad06ab221ed3067fa1f6661214b11c89321fffa", &(0x7f0000000380)=""/163}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f00000020c0)="9f", 0x1}], 0x1}, 0x1)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r8})
pipe(&(0x7f00000016c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001700)=<r10=>0x0)
ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000001740)=<r11=>0x0)
r12 = getgid()
sendmsg$netlink(r0, &(0x7f0000001800)={&(0x7f0000000580)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)=[{&(0x7f00000005c0)={0x18, 0x1a, 0x10, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x104, 0x0, 0x0, @str='\',\x91\x00'}]}, 0x18}, {&(0x7f00000008c0)={0x178, 0x10, 0x4, 0x70bd2d, 0x25dfdbff, "", [@generic="736a3b6c97d9ae800f1c633ddfcd5173fbaf118f3d0745a1bf4ee3d6dcc7c0ec06e5296d3081d9fc4f1bc0464268a35430b0a0f1bd8d727574841f8e05eea16e", @typed={0xc, 0x7e, 0x0, 0x0, @u64=0xfff}, @nested={0x11a, 0x0, 0x0, 0x1, [@typed={0x14, 0x20, 0x0, 0x0, @ipv6=@mcast1}, @generic="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", @typed={0x8, 0x10f, 0x0, 0x0, @uid}]}]}, 0x178}, {&(0x7f0000000a40)={0x2e0, 0x2e, 0x1, 0x70bd27, 0x25dfdbff, "", [@generic="993d8e0adcf5efe78433e08dc5e8bcff45a9b1f309f00fa2025f6cf231705e0012e47c069b623f0180d3ecaeef263da2dd9131c287cd8ee77630503bc2b81a7508e20649b9aa7dbcb86409c46a4d22b67a0e190802de375e0d7923c8794cddcda5cc84479b3eee2341969655b9f22661b0fdf1bfe201d3886f1446f9bdeb0424310093e7267b5fc172895231f01798d42757b903a8e2f8d52f5b93ad4ea5c36a9d2293df8804a597e8228ea874", @typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="c459b1e2d553030e69f3fe80ae86e6b52c06801500d80098e85e2c4bf13f53540aac6fa6dcba21190fc5debbf35ae936eb15ceafa9b7a20073fcf56fc5bf4f70ae4a3526f8da1066a9a6c2d2d77087df5b385ef8dd9ae8562b1ed9e9e1e899ae7920f1f0ae77c16777b13a5349ffdf4baa370d16f56f36ff8a760aed907d8ea3be74fe3cdce31163b254efa814d6a56750b0eba274cda341d2c972349239eec52379d651c38be341454cde0e32", @typed={0x8, 0xab, 0x0, 0x0, @u32=0xffff}, @generic="ffcb10e9ae44aa805e4078e5dd1930c599a20a8a8ee8fe064a0202fb15b1ac554e23a7102d9c0d6b1ae4f59c24f24a19409101b5f26bca28c2148d4c6f0bd0d1b2ec7cb0768525dff3b7c3e9338320dcfe2660543a60c95d909d1e6e030167709eefb1e4378a289a0fbaf325a374a0891489e3c88d4b6533b94a88ccaec817a73bcf8c902c02ba2a194effbdabc3bc1babf61cf8866a07160e94017624f93a2fc099453be70fd10df1f089374851d7fe9f43ebb03604cedd5a57e6fd9fff81", @generic="869e7f992de35cdea07758eeab9a0cf57367897c4ef1bc31e598fc5bd847de76d45f73134cf3c5d26243353b4e3116aa47afc49ec8bd4be8404d342ddf692053a99c7f7479f57f0171d9db4b610bfbc2842b5eb626b1c917ebf5a2957d398a04ef2d4108f6180f4de03a5a232acf1dc77085ded26891b3b523e4bf6688e16ef9832716a268bbe7a41660d4df1f17ca6fd881d5a786b9c61932"]}, 0x2e0}, {&(0x7f0000000d40)={0xa0, 0x13, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x82, 0xd9, 0x0, 0x1, [@typed={0x4, 0x21}, @generic="3b9bdaadb69274140e84dfe9598715cc8ecc70fb", @nested={0x4, 0xaa}, @typed={0x8, 0xf6, 0x0, 0x0, @fd=r5}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @nested={0x4, 0x3d}, @nested={0x4, 0x4}, @generic="6bccafb44bdde3b56e220759bf702b1679f89e31402c7fd71677364818d27ffff0ff6d92ef677f0ad50a379e673cc1687ba0722bc29a09e52e252d78bcd0"]}, @typed={0xc, 0x153, 0x0, 0x0, @u64=0x8}]}, 0xa0}, {&(0x7f0000000e00)={0xb4, 0x2b, 0x1, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r1}, @generic="304c404d3feacca27c8e0839a590ec125fd395852bd7f7b7630a35863c2de306d0c4f2639833fe4689c54ac43161bad1a9651a08ea2d61853e2b26700d520dadf03782cedf44e2f90afe7d2666ace36f41fcaa2778d7894f2483e448ecec2b74b980073489b6052d4f5a0a77aaec113b7e19d72f5b56e6fc9db5e254b20eb78fc43f0970d1de9cd13fadd27bb0fed5c8b200625b"]}, 0xb4}, {&(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="b4fbab2e5cb56594433123014ce1a85e6b30967b675b8941dc3020bb88ae0204d741e2ca869a9e6e367ec917925df0470834d18acbb7d0ae11320292de30af87e765e51ec203d48d5325b7ac1b8a394347db06c9a0cb1bb5312d3acb5c224e14e664bb599c962db4197dde32d5dfbabe2debfcf01250c212c7285339cd1b0915b4b3d67e333fcdc25e9c04001f80a3005900b3637e13f2e7a312b1c1242f98c2f5d7752e8598203f091dbae42a850e4b2ee3ab32e5ed8e3de4993741d619da6097811b3770cd84217cb49ea030e86e50961b0550d83c38e9497032619e870d58942471a8b3ce2ccb15566e50c542fa4e8b33b0109134b65227b84344d53dfe5ee552324f24e6d80ecb0dc3829013d71c415a4bffedf500755f3867fe78cfcbbb9defb4b941c371d4c66ccf3e14ef93bfc2004ada30565e6804f1a7066c7b8a1b6051d99b8657c9d8680ecb7e5fe58e79e0e32fbaf617bb37cdd20d75da3410ceccf116f8fb90d0128afa22a85006c627b6324f8c2b99048caee8bceb92f012bb0ad56b1fdc06ebd433f61863f4b93744202242f5c5be0748bc39b6b3ac2645885283b01da0c9040054805b1eeca021c89973edfaed5c369fa922b9a8dbcf522bfa6935a51649a149a799d521485a2d61208a581c9898677311bb71de151990f8a24ef189c2bd4e9380cb32995398c6f2e8829b84c69fbef9a36df1a83de02371c28dfec0cbd491ae109afefe1e65f9f44dca7f87d57b70d0c1d5f9dbf1b998718d1dbff732e72b4237ee149ee99fd6cee3e659baebce753e0509b01d0c699b57bc05f73085c78fae8e001a9bfafb6a5aad26be50bf105b4b8b4437f3ec57895abb78df0b51b19778b1966ac64fdba18d7f98980efbf940fd075ddaab378e40040019800800c800", @ANYRES32, @ANYBLOB="04008400eee3a288a1adc4db69df77e518449c3998cda2e8d96678f0545310b000a26dacd701d4edd62f8a800a85c37d960daddc85d0177d7722e2fc58b13ab05d1f62e3f5d594b4817254dda393dbafc8c21840baf3ddc46f8e50f50e63ae3b2ee78db6900f521b58c30e65b940f3369862ff122d96ffc672c55eb24199a63ed9e1e4ed620293f6eaefa1219df7494e855a0ac780a9ee551b165ed65bbc5283abaed118abb5f826ac46bf85ba83f342afc3b713264a703121cfc3855de481d57eb6e39b64242244b5ed6f431b2e5dbc43af2936473368253538c97ac40000"], 0x4b8}], 0x6, &(0x7f0000001780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r9, r6, r2, r6, r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x60, 0x24008000}, 0x4010)
syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa000000000000007f0800450000180000000000aa5613e79800"/38], 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r13=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r13], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x4008001)

kernel console output (not intermixed with test programs):

as an invalid length.
[  726.499814][T24839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5076'.
[  726.535096][T24839] bond0: entered promiscuous mode
[  726.540459][T24842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5077'.
[  726.540458][T24844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5077'.
[  726.561666][T24839] bond_slave_0: entered promiscuous mode
[  726.567765][T24839] bond_slave_1: entered promiscuous mode
[  726.575086][T24839] bridge_slave_1: entered promiscuous mode
[  726.583644][T24839] bond0: left promiscuous mode
[  726.588634][T24839] bond_slave_0: left promiscuous mode
[  726.596119][T24839] bond_slave_1: left promiscuous mode
[  726.602030][T24839] bridge_slave_1: left promiscuous mode
[  726.744582][T24850] netlink: 'syz.3.5078': attribute type 1 has an invalid length.
[  726.836362][T24855] netlink: 'syz.0.5080': attribute type 10 has an invalid length.
[  726.845127][T24850] can: request_module (can-proto-0) failed.
[  728.085982][T24936] IPVS: Error connecting to the multicast addr
[  728.206972][T24945] netlink: 'syz.1.5099': attribute type 8 has an invalid length.
[  728.831796][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  728.887231][T24983] netlink: 'syz.0.5108': attribute type 25 has an invalid length.
[  728.919843][T24987] netlink: 'syz.4.5109': attribute type 1 has an invalid length.
[  728.993786][T24987] 8021q: adding VLAN 0 to HW filter on device bond3
[  729.028990][T24987] bond3: (slave geneve3): making interface the new active one
[  729.041931][T24987] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  729.051398][  T133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  729.064048][  T133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  729.078586][  T133] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  729.101286][  T133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  729.292167][T24995] netlink: 'syz.1.5112': attribute type 1 has an invalid length.
[  729.292843][T25002] vlan0: entered promiscuous mode
[  729.401997][T24995] 8021q: adding VLAN 0 to HW filter on device bond5
[  729.417909][T25003] vlan0 (unregistering): left promiscuous mode
[  729.444147][T25004] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  729.478115][T24995] GUP no longer grows the stack in syz.1.5112 (24995): 200000003000-20000000a000 (200000001000)
[  729.489426][T24995] CPU: 1 UID: 0 PID: 24995 Comm: syz.1.5112 Not tainted syzkaller #0 PREEMPT(full) 
[  729.489457][T24995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  729.489472][T24995] Call Trace:
[  729.489481][T24995]  <TASK>
[  729.489492][T24995]  dump_stack_lvl+0xe8/0x150
[  729.489535][T24995]  __get_user_pages+0x2453/0x29d0
[  729.489589][T24995]  ? __gup_longterm_locked+0xc4e/0x1630
[  729.489619][T24995]  ? down_read_killable+0x1bb/0x340
[  729.489649][T24995]  ? try_get_folio+0xec/0x650
[  729.489683][T24995]  __gup_longterm_locked+0xdcf/0x1630
[  729.489749][T24995]  gup_fast_fallback+0x1d82/0x22e0
[  729.489814][T24995]  ? __pfx_gup_fast_fallback+0x10/0x10
[  729.489847][T24995]  ? is_valid_gup_args+0x11f/0x200
[  729.489878][T24995]  ? get_user_pages_fast+0x4d/0xb0
[  729.489910][T24995]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  729.489943][T24995]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  729.489982][T24995]  iov_iter_get_pages2+0x5e/0xa0
[  729.490008][T24995]  __se_sys_vmsplice+0x7b3/0x1490
[  729.490062][T24995]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  729.490098][T24995]  ? __pfx_futex_wake+0x10/0x10
[  729.490200][T24995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.490226][T24995]  do_syscall_64+0x15f/0xf80
[  729.490253][T24995]  ? trace_irq_disable+0x3b/0x140
[  729.490278][T24995]  ? clear_bhb_loop+0x40/0x90
[  729.490306][T24995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.490329][T24995] RIP: 0033:0x7fafc819c819
[  729.490350][T24995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.490371][T24995] RSP: 002b:00007fafc9134028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  729.490397][T24995] RAX: ffffffffffffffda RBX: 00007fafc8415fa0 RCX: 00007fafc819c819
[  729.490414][T24995] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c
[  729.490429][T24995] RBP: 00007fafc8232c91 R08: 0000000000000000 R09: 0000000000000000
[  729.490443][T24995] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  729.490456][T24995] R13: 00007fafc8416038 R14: 00007fafc8415fa0 R15: 00007fffc61c53f8
[  729.490493][T24995]  </TASK>
[  729.864566][T25023] IPVS: set_ctl: invalid protocol: 2 172.20.20.64:20000
[  730.156951][T25045] __nla_validate_parse: 10 callbacks suppressed
[  730.156972][T25045] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5126'.
[  730.341506][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5131'.
[  730.365239][T25057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5131'.
[  730.375063][T25060] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5130'.
[  730.387301][T25059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5131'.
[  730.697731][T25078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5138'.
[  730.800542][T25085] netlink: 'syz.0.5142': attribute type 1 has an invalid length.
[  730.874129][T25085] 8021q: adding VLAN 0 to HW filter on device bond0
[  730.884395][T25094] openvswitch: netlink: IP tunnel dst address not specified
[  730.907975][T25095] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048)
[  731.106552][T25108] netlink: 'syz.0.5147': attribute type 1 has an invalid length.
[  731.225246][T25108] bond8: entered promiscuous mode
[  731.237487][T25108] 8021q: adding VLAN 0 to HW filter on device bond8
[  731.265746][T25122] netlink: 30 bytes leftover after parsing attributes in process `syz.3.5152'.
[  731.276565][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5151'.
[  731.290559][T25113] ipvlan3: entered allmulticast mode
[  731.304643][T25113] bond8: entered allmulticast mode
[  731.324545][T25119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5149'.
[  731.353999][T25108] bond8: (slave bridge8): making interface the new active one
[  731.362328][T25108] bridge8: entered promiscuous mode
[  731.368756][T25108] bridge8: entered allmulticast mode
[  731.376266][T25108] bond8: (slave bridge8): Enslaving as an active interface with an up link
[  731.932546][T25156] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.5160'.
[  732.435624][T25165] netlink: 'syz.0.5161': attribute type 33 has an invalid length.
[  732.499492][T25165] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  732.517065][T25165] bond9 (unregistering): Released all slaves
[  732.736570][T25180] ÿ
: renamed from bond_slave_1
[  732.989225][T25198] netlink: 'syz.2.5174': attribute type 1 has an invalid length.
[  733.004816][T25198] netlink: 'syz.2.5174': attribute type 2 has an invalid length.
[  733.012987][T25198] netlink: 'syz.2.5174': attribute type 1 has an invalid length.
[  733.086199][T25204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  733.364872][T25225] netlink: 'syz.2.5181': attribute type 1 has an invalid length.
[  733.406615][T25225] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  733.816620][T25241] bond3: option mode: unable to set because the bond device has slaves
[  733.830114][T25241] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  734.169723][T25253] netlink: 'syz.0.5191': attribute type 1 has an invalid length.
[  735.110035][T25314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  735.132569][T25314] syzkaller0: MTU too low for tipc bearer
[  735.143157][T25314] tipc: Disabling bearer <eth:syzkaller0>
[  735.313901][T25327] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication
[  735.406385][T25333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  735.572744][T25344] netlink: 'syz.2.5222': attribute type 1 has an invalid length.
[  736.002037][T25368] netlink: 'syz.1.5229': attribute type 10 has an invalid length.
[  736.038473][T25373] __nla_validate_parse: 9 callbacks suppressed
[  736.038493][T25373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5230'.
[  736.054631][T25368] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  736.210686][ T9246] lec:lec_start_xmit: lec0:No lecd attached
[  736.239141][T25380] openvswitch: netlink: Duplicate key (type 2).
[  736.410574][T25398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5240'.
[  736.435733][T25398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5240'.
[  736.470595][T25394] syzkaller0: entered allmulticast mode
[  736.572539][T25405] netlink: 'syz.2.5243': attribute type 21 has an invalid length.
[  736.588275][T25409] x_tables: duplicate underflow at hook 1
[  736.720486][T25414] netlink: 'syz.2.5247': attribute type 16 has an invalid length.
[  736.729902][T25414] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5247'.
[  736.744020][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5246'.
[  736.796359][T25416] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  736.807881][T25416] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  736.911109][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  736.938933][T25427] bond4: (slave gretap1): making interface the new active one
[  737.004034][T25427] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  737.117040][T25416] macvlan2: entered promiscuous mode
[  737.126874][T25441] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5252'.
[  737.139276][T25416] macvlan2: entered allmulticast mode
[  737.172888][T25416] bond4: entered promiscuous mode
[  737.174103][T25441] netlink: Conntrack attr has 4 unknown bytes
[  737.202361][T25416] gretap1: entered promiscuous mode
[  737.229645][T25416] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  737.273324][T25416] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  737.296342][T25416] bond4: left promiscuous mode
[  737.302736][T25416] gretap1: left promiscuous mode
[  737.416899][T25454] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.5255'.
[  737.551142][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  737.874069][T25475] bridge5: the hash_elasticity option has been deprecated and is always 16
[  738.105586][T25488] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5264'.
[  738.143314][T25488] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5264'.
[  738.179914][T24893] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2
[  738.579523][T25513] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5273'.
[  738.810182][T25526] netdevsim netdevsim4: Direct firmware load for . failed with error -2
[  738.840366][T25526] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  738.893814][T25531] netdevsim netdevsim4 
: renamed from netdevsim0
[  739.401387][T25555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  739.445333][T25557] validate_nla: 3 callbacks suppressed
[  739.445358][T25557] netlink: 'syz.3.5288': attribute type 1 has an invalid length.
[  740.121962][T25594] netlink: 'syz.1.5298': attribute type 4 has an invalid length.
[  741.357645][T25673] __nla_validate_parse: 83 callbacks suppressed
[  741.357666][T25673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5319'.
[  741.446146][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5321'.
[  741.530559][T25677] netlink: 'syz.0.5321': attribute type 62 has an invalid length.
[  741.603965][T25650] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  741.697377][T24900] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  741.737183][T25692] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5324'.
[  741.790918][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms
[  741.799014][    C1] lec:lec_tx_timeout: lec0
[  741.802234][T25691] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5324'.
[  742.120562][T25713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5330'.
[  742.221217][T25719] lo: Caught tx_queue_len zero misconfig
[  742.432365][T25727] veth0: entered promiscuous mode
[  742.496223][T25732] C: renamed from lo
[  742.643707][T25732] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  742.644362][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5335'.
[  742.668006][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5335'.
[  742.679255][T25735] veth0: left promiscuous mode
[  742.692302][T25741] syzkaller1: left promiscuous mode
[  742.697660][T25741] syzkaller1: left allmulticast mode
[  742.787767][T25750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5341'.
[  742.802199][T25750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5341'.
[  742.812183][T25751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5341'.
[  742.988583][T25761] bond7: Invalid ad_actor_system MAC address.
[  742.996216][T25761] bond7: option ad_actor_system: invalid value (1)
[  743.019373][T25761] bond7 (unregistering): Released all slaves
[  743.108992][T25775] netlink: 'syz.3.5348': attribute type 10 has an invalid length.
[  743.314367][T25783] ip6gre2: entered allmulticast mode
[  743.440599][T25792] sctp: [Deprecated]: syz.3.5351 (pid 25792) Use of int in max_burst socket option.
[  743.440599][T25792] Use struct sctp_assoc_value instead
[  743.606700][T25800] netlink: 'syz.1.5354': attribute type 22 has an invalid length.
[  743.617185][T25799] netlink: 'syz.0.5352': attribute type 10 has an invalid length.
[  743.665218][T25799] geneve3: entered promiscuous mode
[  743.676730][T25799] geneve3: entered allmulticast mode
[  743.685392][T25800] netlink: 'syz.1.5354': attribute type 22 has an invalid length.
[  743.713453][   T48] netdevsim netdevsim0 
: set [1, 0] type 2 family 0 port 6081 - 0
[  743.783584][   T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  743.794908][   T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  743.804983][   T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.961650][T25816] netlink: 'syz.1.5355': attribute type 1 has an invalid length.
[  744.326990][T25833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  744.476331][T25845] xt_hashlimit: size too large, truncated to 1048576
[  744.546847][T25853] syzkaller0: entered promiscuous mode
[  744.552657][T25853] syzkaller0: entered allmulticast mode
[  744.614199][T25853] netlink: 'syz.4.5363': attribute type 1 has an invalid length.
[  744.826398][T25868] ip6erspan0: entered promiscuous mode
[  744.878049][T25873] ip6_vti0: entered promiscuous mode
[  745.128086][T23888] IPVS: starting estimator thread 0...
[  745.235048][T25887] IPVS: using max 27 ests per chain, 64800 per kthread
[  745.429684][T25906] netlink: 'syz.2.5378': attribute type 1 has an invalid length.
[  745.611812][T25910] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address
[  745.628373][T25910] bond15: (slave vxcan1): Error -95 calling set_mac_address
[  745.941330][T25944] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  747.173900][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  749.008412][T25973] netlink: 'syz.1.5394': attribute type 9 has an invalid length.
[  749.109683][T25975] netlink: 'syz.4.5395': attribute type 4 has an invalid length.
[  749.169865][T25982] syzkaller1: entered promiscuous mode
[  749.197710][T25982] syzkaller1: entered allmulticast mode
[  749.291908][T25989] __nla_validate_parse: 23 callbacks suppressed
[  749.291930][T25989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5400'.
[  749.451198][T26000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5404'.
[  749.504226][T26000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5404'.
[  749.525470][T26000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5404'.
[  749.763707][T26018] sctp: [Deprecated]: syz.4.5411 (pid 26018) Use of int in maxseg socket option.
[  749.763707][T26018] Use struct sctp_assoc_value instead
[  749.791328][T26023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5412'.
[  749.831336][T26023] 8021q: adding VLAN 0 to HW filter on device bond5
[  749.865791][T26023] macvlan2: entered promiscuous mode
[  749.871412][T26023] macvlan2: entered allmulticast mode
[  749.898895][T26023] bond5: (slave vti0): refused to change device type
[  749.934745][T26026] syzkaller1: entered promiscuous mode
[  749.956734][T26026] syzkaller1: entered allmulticast mode
[  749.976225][T26034] pimreg: left allmulticast mode
[  749.981479][T26034] lo: left allmulticast mode
[  750.000267][T26026] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  750.011179][T26033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5415'.
[  750.138167][   T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  750.151995][   T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  750.161373][T21824] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  750.401363][T26056] netlink: 'syz.2.5421': attribute type 1 has an invalid length.
[  750.434660][T26056] 8021q: adding VLAN 0 to HW filter on device bond16
[  750.611188][T21824] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  750.676990][T26064] syzkaller1: entered promiscuous mode
[  750.693336][T21824] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  750.699659][T26064] syzkaller1: entered allmulticast mode
[  750.725540][T26071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5425'.
[  750.747431][T26074] erspan0: Device is already in use.
[  750.856833][T26064] bond7 (unregistering): Released all slaves
[  750.952835][T26081] netlink: zone id is out of range
[  751.006733][T26081] netlink: zone id is out of range
[  751.024743][T26081] netlink: zone id is out of range
[  751.063908][T26081] netlink: zone id is out of range
[  751.081101][T26081] netlink: zone id is out of range
[  751.093509][T26081] netlink: del zone limit has 4 unknown bytes
[  751.310247][T26097] syzkaller0: entered promiscuous mode
[  751.319655][T26102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5434'.
[  751.334717][T26097] syzkaller0: entered allmulticast mode
[  751.367935][T26097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5432'.
[  751.438560][T26100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5432'.
[  752.751872][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms
[  752.760070][    C1] lec:lec_tx_timeout: lec0
[  753.967231][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  754.191038][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  754.325072][T26131] netlink: 'syz.0.5440': attribute type 4 has an invalid length.
[  754.353692][T26131] __nla_validate_parse: 3 callbacks suppressed
[  754.353714][T26131] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5440'.
[  754.415226][T26137] sctp: [Deprecated]: syz.4.5442 (pid 26137) Use of int in maxseg socket option.
[  754.415226][T26137] Use struct sctp_assoc_value instead
[  754.437728][T26136] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5441'.
[  754.471210][T26136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5441'.
[  754.502136][T26136] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5441'.
[  754.521601][T26136] netlink: 'syz.2.5441': attribute type 2 has an invalid length.
[  754.538810][T26136] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5441'.
[  754.596260][T26138] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5443'.
[  754.598852][T26150] vcan0: entered promiscuous mode
[  754.622883][T26150] vcan0: entered allmulticast mode
[  754.773429][T26162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5448'.
[  754.779588][T26163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5447'.
[  754.852370][T26163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5447'.
[  754.868927][T26166] netlink: 'syz.0.5449': attribute type 1 has an invalid length.
[  754.878371][T26166] netlink: 'syz.0.5449': attribute type 1 has an invalid length.
[  755.161694][T26189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5455'.
[  755.204553][T26189] xfrm1: entered promiscuous mode
[  755.222565][T26189] xfrm1: entered allmulticast mode
[  755.279703][T26193] syzkaller1: entered promiscuous mode
[  755.293718][T26193] syzkaller1: entered allmulticast mode
[  755.372047][T26192] macsec1: entered promiscuous mode
[  755.385408][T26192] batadv0: entered promiscuous mode
[  755.405688][T26192] 8021q: adding VLAN 0 to HW filter on device macsec1
[  755.437220][T26192] batadv0: left promiscuous mode
[  755.497985][T26206] ±ÿ: renamed from team_slave_1
[  755.970322][T26230] netlink: 'syz.2.5466': attribute type 1 has an invalid length.
[  756.041562][T26230] 8021q: adding VLAN 0 to HW filter on device bond17
[  756.123126][T26241] x_tables: duplicate underflow at hook 2
[  756.159015][T26244] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  756.238883][T26244] bond0: left allmulticast mode
[  756.250270][T26244] 8021q: adding VLAN 0 to HW filter on device bond0
[  756.666624][T26270] netlink: 'syz.0.5476': attribute type 25 has an invalid length.
[  756.676930][T26270] netlink: 'syz.0.5476': attribute type 28 has an invalid length.
[  756.743152][T26246] infiniband syz0: set down
[  756.749296][T26246] infiniband syz0: added veth0_vlan
[  756.809834][T26246] RDS/IB: syz0: added
[  756.815368][T26246] smc: adding ib device syz0 with port count 1
[  756.822605][T26246] smc:    ib device syz0 port 1 has no pnetid
[  756.928204][T26276] Cannot find del_set index 49151 as target
[  756.967546][T26280] netlink: 'syz.0.5478': attribute type 10 has an invalid length.
[  756.988989][T26280] bridge_slave_1: left allmulticast mode
[  757.003366][T26280] bridge_slave_1: left promiscuous mode
[  757.016360][T26280] bridge0: port 2(bridge_slave_1) entered disabled state
[  757.303329][T26288] IPv6: sit2: Disabled Multicast RS
[  757.513406][T26300] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  759.519018][T26261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  759.766833][T26346] __nla_validate_parse: 4 callbacks suppressed
[  759.766853][T26346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5495'.
[  759.838629][T26355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5499'.
[  759.909356][T26358] netlink: 'syz.3.5501': attribute type 9 has an invalid length.
[  760.057406][T26365] 8021q: adding VLAN 0 to HW filter on device bond18
[  760.186278][T26379] netlink: 'syz.4.5507': attribute type 10 has an invalid length.
[  760.243172][T26379] netlink: 396 bytes leftover after parsing attributes in process `syz.4.5507'.
[  760.287431][T26383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5509'.
[  760.383324][T26383] 8021q: adding VLAN 0 to HW filter on device bond19
[  760.455754][T26391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5512'.
[  760.465140][T26391] block nbd1: Unsupported socket: should be TCP or UNIX.
[  760.693154][T26398] syzkaller0: entered promiscuous mode
[  760.712921][T26398] syzkaller0: entered allmulticast mode
[  760.851311][T26398] netlink: 'syz.4.5514': attribute type 1 has an invalid length.
[  760.859320][T26411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5517'.
[  760.877660][T26398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5514'.
[  760.899961][T26407] 8021q: VLANs not supported on lo
[  760.918918][T26398] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  761.043747][T26418] netlink: 'syz.3.5518': attribute type 1 has an invalid length.
[  761.082779][T26420] xt_limit: Overflow, try lower: 604147548/4200216962
[  761.105296][T26418] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  761.116802][T26418] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  761.218663][T26422] macvlan3: entered promiscuous mode
[  761.234132][T26422] macvlan3: entered allmulticast mode
[  761.249978][T26422] bond6: entered promiscuous mode
[  761.256791][T26422] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  761.272307][T26422] bond6: left promiscuous mode
[  761.399887][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5523'.
[  761.539529][T26446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5527'.
[  761.570118][T26451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5528'.
[  761.583848][T26446] sch_tbf: burst 12 is lower than device bridge2 mtu (1514) !
[  764.212138][T26427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  764.948839][T26522] netlink: 'syz.3.5545': attribute type 10 has an invalid length.
[  764.965303][T26522] __nla_validate_parse: 3 callbacks suppressed
[  764.965321][T26522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5545'.
[  764.985210][T26522] dummy0: entered promiscuous mode
[  764.993259][T26522] bridge0: port 2(dummy0) entered blocking state
[  764.999920][T26522] bridge0: port 2(dummy0) entered disabled state
[  765.009447][T26522] dummy0: entered allmulticast mode
[  765.024725][T26526] set match dimension is over the limit!
[  765.245494][T26541] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5554'.
[  765.408457][T26554] netlink: 'syz.1.5559': attribute type 2 has an invalid length.
[  765.416529][T26554] netlink: 'syz.1.5559': attribute type 2 has an invalid length.
[  765.461363][T26551] bond0: Caught tx_queue_len zero misconfig
[  765.495443][T26557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5559'.
[  765.617381][T26563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5561'.
[  765.647396][T26563] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5561'.
[  765.657658][T26563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5561'.
[  765.776552][T26570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5564'.
[  765.787874][T26572] ip6tnl0: Caught tx_queue_len zero misconfig
[  765.919312][T26584] netlink: 'syz.3.5569': attribute type 1 has an invalid length.
[  765.919834][T26586] netlink: 'syz.3.5569': attribute type 1 has an invalid length.
[  765.980689][T26586] 8021q: adding VLAN 0 to HW filter on device bond7
[  766.230522][T26597] bond8: entered promiscuous mode
[  766.390229][T26597] macvlan3: entered promiscuous mode
[  766.395787][T26597] macvlan3: entered allmulticast mode
[  766.404153][T26597] bond8: (slave macvlan3): Opening slave failed
[  766.466613][T26617] netlink: 'syz.2.5577': attribute type 1 has an invalid length.
[  766.519399][T26617] bond20: (slave bridge10): Enslaving as a backup interface with an up link
[  766.547700][T26617] macvlan0: entered promiscuous mode
[  766.553672][T26617] macvlan0: entered allmulticast mode
[  766.560494][T26617] bond20: entered promiscuous mode
[  766.567329][T26617] bridge10: entered promiscuous mode
[  766.576584][T26617] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  766.585602][T26617] bond20: left promiscuous mode
[  766.590690][T26617] bridge10: left promiscuous mode
[  766.728057][T26622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5579'.
[  766.744871][T26623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5579'.
[  766.834695][T26622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5579'.
[  766.917461][T26631] netlink: 'syz.2.5581': attribute type 9 has an invalid length.
[  766.930632][T26632] netlink: 'syz.2.5581': attribute type 9 has an invalid length.
[  767.166314][T26638] wireguard0: entered promiscuous mode
[  767.172319][T26638] wireguard0: entered allmulticast mode
[  767.305866][T26653] ip6t_rpfilter: unknown options
[  767.324117][T26653] netlink: 'syz.4.5588': attribute type 9 has an invalid length.
[  768.160699][T26705] batadv_slave_0: Caught tx_queue_len zero misconfig
[  768.179905][T26706] netlink: 'syz.4.5607': attribute type 2 has an invalid length.
[  768.382963][T26721] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode
[  768.398038][T26716] wg1 speed is unknown, defaulting to 1000
[  768.412888][T26721] netlink: 'syz.2.5613': attribute type 11 has an invalid length.
[  768.977319][T26757] netlink: 'syz.0.5621': attribute type 16 has an invalid length.
[  769.286196][T26724] dvmrp8: entered allmulticast mode
[  769.648778][T26784] netlink: 'syz.1.5629': attribute type 21 has an invalid length.
[  769.803599][T26794] netlink: 'syz.2.5632': attribute type 1 has an invalid length.
[  769.943927][T26794] 8021q: adding VLAN 0 to HW filter on device bond21
[  770.003239][T26805] syzkaller0: entered promiscuous mode
[  770.037919][T26805] syzkaller0: entered allmulticast mode
[  770.803100][T26831] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  770.951749][T26853] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  771.101748][T26856] netlink: 'syz.2.5646': attribute type 1 has an invalid length.
[  771.179979][T26867] __nla_validate_parse: 13 callbacks suppressed
[  771.180002][T26867] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5649'.
[  771.205726][T26867] netlink: 'syz.4.5649': attribute type 12 has an invalid length.
[  771.218426][T26869] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5646'.
[  771.251524][T26867] bond4: option primary_reselect: invalid value (255)
[  771.260320][T26867] bond4 (unregistering): Released all slaves
[  771.319708][T26858] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5647'.
[  771.553941][T26881] validate_nla: 1 callbacks suppressed
[  771.553962][T26881] netlink: 'syz.1.5654': attribute type 2 has an invalid length.
[  771.578572][T26882] netlink: 'syz.1.5654': attribute type 2 has an invalid length.
[  771.988440][T26909] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  772.056120][T26908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5662'.
[  772.110126][T26908] nbd: must specify a size in bytes for the device
[  772.155083][T26919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5664'.
[  772.655115][T26941] netlink: 'syz.4.5670': attribute type 4 has an invalid length.
[  772.695056][T26937] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5670'.
[  772.723541][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5670'.
[  772.765376][T26937] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5670'.
[  772.785773][T26937] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5670'.
[  772.906730][T26951] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5673'.
[  772.969675][T26950] syzkaller0: entered allmulticast mode
[  773.215477][T26964] netlink: 'syz.0.5676': attribute type 1 has an invalid length.
[  773.316711][T26970] netlink: 'syz.3.5677': attribute type 11 has an invalid length.
[  773.410226][T26966] bond10: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  773.434793][T24900] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  773.463426][T26972] 8021q: adding VLAN 0 to HW filter on device bond10
[  773.488254][T26979] syzkaller1: left promiscuous mode
[  773.501147][T26979] syzkaller1: left allmulticast mode
[  773.648711][T24900] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  773.706990][T26982] netlink: set zone limit has 4 unknown bytes
[  773.790426][T26992] netlink: 'syz.0.5683': attribute type 7 has an invalid length.
[  774.390141][T26992] netlink: 'syz.0.5683': attribute type 7 has an invalid length.
[  774.435305][T26999] bond4 (unregistering): Released all slaves
[  774.601965][T27019] macsec0: entered promiscuous mode
[  774.611611][T27019] macsec0: entered allmulticast mode
[  774.639953][T27021] veth1_macvtap: entered allmulticast mode
[  774.665881][T27021] macsec0: left promiscuous mode
[  774.685372][T27021] macsec0: left allmulticast mode
[  774.704888][T27021] veth1_macvtap: left allmulticast mode
[  774.890337][T27039] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  774.998005][T27031] netlink: set zone limit has 4 unknown bytes
[  775.341664][   T30] audit: type=1107 audit(1776432764.117:9): pid=27058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›'
[  775.410502][   T30] audit: type=1804 audit(1776432764.187:10): pid=27066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5698" name="/newroot/530/cgroup.controllers" dev="tmpfs" ino=2712 res=1 errno=0
[  775.472178][   T30] audit: type=1800 audit(1776432764.187:11): pid=27066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5698" name="cgroup.controllers" dev="tmpfs" ino=2712 res=0 errno=0
[  775.567324][T27072] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode
[  775.604520][T27074] nbd: must specify at least one socket
[  775.671629][T27076] ip6t_srh: unknown srh invflags 4000
[  775.877859][T27089] netlink: 'syz.2.5704': attribute type 21 has an invalid length.
[  776.591105][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  776.813508][T27150] IPv6: sit3: Disabled Multicast RS
[  776.946589][T27162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  777.224293][T27180] __nla_validate_parse: 4 callbacks suppressed
[  777.224315][T27180] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5731'.
[  777.295656][T27180] syzkaller0: entered promiscuous mode
[  777.302116][T27164] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5725'.
[  777.340937][T27180] syzkaller0: entered allmulticast mode
[  777.520249][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  777.537352][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  777.552837][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  777.564961][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  777.573876][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  777.649377][T27196] wg1 speed is unknown, defaulting to 1000
[  778.024798][ T7771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  778.061127][ T7771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.276871][ T7771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  778.291001][ T7771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.425249][T27221] netlink: 'syz.3.5743': attribute type 3 has an invalid length.
[  778.429201][T27224] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5743'.
[  778.466105][ T7771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  778.490704][ T7771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.595550][T27223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5744'.
[  778.639803][T27233] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5745'.
[  778.797016][T27226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5744'.
[  778.813744][ T7771] bond0: (slave netdevsim0): Releasing backup interface
[  778.838409][ T7771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  778.849011][ T7771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.914396][T27242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  779.124269][T27251] xt_TCPMSS: Only works on TCP SYN packets
[  779.138364][T27247] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  779.167007][T27247] bond11 (unregistering): Released all slaves
[  779.204145][T27253] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  779.496383][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  779.623608][ T7763] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  779.633129][ T5144] Bluetooth: hci0: command tx timeout
[  779.645716][ T7763] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  779.750469][   T48] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  780.105167][ T7771] bond6 (unregistering): (slave gretap1): Releasing active interface
[  780.119147][ T7771] batman_adv: batadv0: Removing interface: gretap2
[  780.143594][ T7771] bond10 (unregistering): (slave geneve2): Releasing active interface
[  780.275092][ T7771] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  780.326949][ T7771] bond5 (unregistering): (slave bridge3): Releasing active interface
[  780.372828][ T7771] bond7 (unregistering): (slave bridge4): Releasing backup interface
[  780.381627][ T7771] bridge4 (unregistering): left promiscuous mode
[  780.676596][ T7771] bond20 (unregistering): (slave bridge10): Releasing backup interface
[  780.730106][ T7771] bond0 (unregistering): Released all slaves
[  780.742033][ T7771] bond1 (unregistering): Released all slaves
[  780.759648][ T7771] bond2 (unregistering): Released all slaves
[  780.783971][ T7771] bond3 (unregistering): Released all slaves
[  780.802326][ T7771] bond4 (unregistering): (slave veth3): Releasing active interface
[  780.814544][ T7771] bond4 (unregistering): Released all slaves
[  780.838430][ T7771] bond5 (unregistering): Released all slaves
[  780.855334][ T7771] bond6 (unregistering): Released all slaves
[  780.872005][ T7771] bond7 (unregistering): Released all slaves
[  780.897942][ T7771] bond8 (unregistering): Released all slaves
[  780.914959][ T7771] bond9 (unregistering): Released all slaves
[  780.932684][ T7771] bond10 (unregistering): Released all slaves
[  780.949019][ T7771] bond11 (unregistering): Released all slaves
[  780.979968][ T7771] bond12 (unregistering): Released all slaves
[  780.997003][ T7771] bond13 (unregistering): Released all slaves
[  781.014260][ T7771] bond14 (unregistering): Released all slaves
[  781.041496][ T7771] bond15 (unregistering): Released all slaves
[  781.058488][ T7771] bond16 (unregistering): Released all slaves
[  781.077166][ T7771] bond17 (unregistering): Released all slaves
[  781.095947][ T7771] bond18 (unregistering): Released all slaves
[  781.114488][ T7771] bond19 (unregistering): Released all slaves
[  781.146287][ T7771] bond20 (unregistering): Released all slaves
[  781.162687][ T7771] bond21 (unregistering): Released all slaves
[  781.205712][T27298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5762'.
[  781.369424][T27196] chnl_net:caif_netlink_parms(): no params data found
[  781.627540][ T7771] tipc: Disabling bearer <eth:syzkaller0>
[  781.695850][ T7771] tipc: Left network mode
[  781.711077][ T5144] Bluetooth: hci0: command tx timeout
[  781.736394][T27319] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5768'.
[  781.875207][T27196] bridge0: port 1(bridge_slave_0) entered blocking state
[  781.891160][T27196] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.898615][T27196] bridge_slave_0: entered allmulticast mode
[  781.907436][T27196] bridge_slave_0: entered promiscuous mode
[  781.916709][T27196] bridge0: port 2(bridge_slave_1) entered blocking state
[  781.924256][T27196] bridge0: port 2(bridge_slave_1) entered disabled state
[  781.931786][T27196] bridge_slave_1: entered allmulticast mode
[  781.939730][T27196] bridge_slave_1: entered promiscuous mode
[  782.115141][T27196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  782.152133][T27341] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5774'.
[  782.167866][T27196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  782.344144][T27196] team0: Port device team_slave_0 added
[  782.378341][T27196] team0: Port device team_slave_1 added
[  782.644188][T27196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  782.680223][T27196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.792321][T27196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  782.832335][T27196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  782.853908][T27196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.938797][T27196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  783.097927][T27373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  783.199788][T27385] sctp: [Deprecated]: syz.0.5780 (pid 27385) Use of int in max_burst socket option deprecated.
[  783.199788][T27385] Use struct sctp_assoc_value instead
[  783.259228][T27388] netlink: 'syz.3.5781': attribute type 1 has an invalid length.
[  783.305596][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1
[  783.558658][T27385] wg1 speed is unknown, defaulting to 1000
[  783.599355][T27411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5785'.
[  783.632328][T27196] hsr_slave_0: entered promiscuous mode
[  783.651975][T27196] hsr_slave_1: entered promiscuous mode
[  783.793756][ T5144] Bluetooth: hci0: command tx timeout
[  783.838140][T27418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5787'.
[  784.091618][T27397] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  784.124213][T27397] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  784.176972][ T7771] hsr_slave_0: left promiscuous mode
[  784.202957][ T7771] hsr_slave_1: left promiscuous mode
[  784.973465][T27455] vcan1: entered promiscuous mode
[  784.978707][T27455] vcan1: entered allmulticast mode
[  784.994338][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2
[  785.332930][T27476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5796'.
[  785.467266][T27466] vlan6: entered allmulticast mode
[  785.498023][T27466] bridge_slave_0: entered allmulticast mode
[  785.561510][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  785.871557][ T5144] Bluetooth: hci0: command tx timeout
[  785.976743][ T7771] IPVS: stop unused estimator thread 0...
[  785.995822][T27196] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.218915][T27196] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.352894][T27513] xt_socket: unknown flags 0x50
[  786.575682][T27196] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.742557][T27536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5808'.
[  786.851563][T27196] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  787.114859][T27555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5814'.
[  787.124117][T27556] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5814'.
[  787.182662][T27562] xt_connbytes: Forcing CT accounting to be enabled
[  787.268615][T27562] xt_CT: No such helper "netbios-ns"
[  787.340337][T27559] mac80211_hwsim hwsim42 syzkaller0: entered promiscuous mode
[  787.366418][T27559] mac80211_hwsim hwsim42 syzkaller0: entered allmulticast mode
[  787.386368][T27570] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5816'.
[  787.398176][T27556] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  787.407521][T27555] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  787.446303][T27568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5817'.
[  787.499822][T27196] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  787.537904][T27196] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  787.584504][T27196] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  787.609420][T27196] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  787.651334][T27196] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  787.687249][T27196] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  787.726498][T27196] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  787.790479][T27196] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  787.853752][T27593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5822'.
[  787.881592][T27595] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  787.917019][T27596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5823'.
[  788.016640][T27604] : entered promiscuous mode
[  788.266667][T27605] syzkaller0: entered promiscuous mode
[  788.272706][T27605] syzkaller0: entered allmulticast mode
[  788.733437][T27651] sctp: [Deprecated]: syz.3.5829 (pid 27651) Use of struct sctp_assoc_value in delayed_ack socket option.
[  788.733437][T27651] Use struct sctp_sack_info instead
[  789.231339][ T5144] Bluetooth: hci1: command 0x0406 tx timeout
[  791.320943][ T5144] Bluetooth: hci1: command 0x0406 tx timeout
[  791.774776][T27196] 8021q: adding VLAN 0 to HW filter on device bond0
[  791.823934][T27196] 8021q: adding VLAN 0 to HW filter on device team0
[  791.868233][T24900] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.875670][T24900] bridge0: port 1(bridge_slave_0) entered forwarding state
[  791.891687][T27687] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  791.959184][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.966497][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  791.998242][T27689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5834'.
[  792.018092][T27693] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5835'.
[  792.107816][T27694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  792.183319][T27698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5838'.
[  792.197414][T27694] syzkaller0: MTU too low for tipc bearer
[  792.218953][T27694] tipc: Disabling bearer <eth:syzkaller0>
[  792.344259][T27700] pimreg3: entered allmulticast mode
[  792.413907][T27709] bridge_slave_1: Caught tx_queue_len zero misconfig
[  792.580585][T27720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5843'.
[  792.660320][T27727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5845'.
[  792.706859][T27196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  792.847141][T27196] veth0_vlan: entered promiscuous mode
[  792.885685][T27196] veth1_vlan: entered promiscuous mode
[  792.978247][T27196] veth0_macvtap: entered promiscuous mode
[  793.014384][T27196] veth1_macvtap: entered promiscuous mode
[  793.099697][T27196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  793.170249][T27196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  793.239662][ T1156] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.259606][ T1156] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.284285][ T1156] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.305856][ T1156] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.333761][T27759] netlink: 'syz.3.5852': attribute type 4 has an invalid length.
[  793.374610][T27759] netlink: 'syz.3.5852': attribute type 4 has an invalid length.
[  793.565305][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.592543][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.674724][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.689023][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.892713][T27776] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  793.918147][T27776] bond10 (unregistering): Released all slaves
[  794.035266][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5858'.
[  795.430736][T27847] netlink: 'syz.3.5872': attribute type 1 has an invalid length.
[  795.488647][T27847] xt_bpf: check failed: parse error
[  795.982242][T27871] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5879'.
[  796.001656][T27868] netlink: 'syz.1.5878': attribute type 2 has an invalid length.
[  796.028300][T27868] netlink: 'syz.1.5878': attribute type 8 has an invalid length.
[  796.050916][T27868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5878'.
[  796.143332][T27875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5880'.
[  796.229387][T27875] macvlan1: entered allmulticast mode
[  796.259401][T27882] netlink: 'syz.1.5883': attribute type 32 has an invalid length.
[  796.449718][T27892] xt_ecn: cannot match TCP bits for non-tcp packets
[  796.868709][T27915] netlink: 'syz.3.5893': attribute type 1 has an invalid length.
[  796.884123][T27915] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5893'.
[  796.913123][T27915] netlink: 'syz.3.5893': attribute type 1 has an invalid length.
[  796.926071][T27915] netlink: 'syz.3.5893': attribute type 8 has an invalid length.
[  796.998252][T27915] netlink: 'syz.3.5893': attribute type 4 has an invalid length.
[  797.277826][T27933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  797.387329][T27940] __nla_validate_parse: 3 callbacks suppressed
[  797.387350][T27940] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5901'.
[  797.421199][T27940] netlink: Unknown conntrack attr (0)
[  797.428584][T27940] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  797.570535][T27944] IPVS: Error connecting to the multicast addr
[  797.999103][T27961] batadv0: entered promiscuous mode
[  798.018626][T27961] macsec1: entered promiscuous mode
[  798.038454][T27961] 8021q: adding VLAN 0 to HW filter on device macsec1
[  798.060282][T27961] batadv0: left promiscuous mode
[  798.085361][T27967] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5912'.
[  798.096025][T27969] x_tables: duplicate entry at hook 1
[  798.106631][T27970] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5911'.
[  798.431368][ T5826] Bluetooth: hci0: command 0x0405 tx timeout
[  798.632274][T28003] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20003
[  798.725176][T28014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5924'.
[  798.855654][T28019] netlink: 'syz.1.5926': attribute type 10 has an invalid length.
[  798.908994][T28022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5927'.
[  799.107179][T28031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  799.135474][T28031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5929'.
[  799.162469][T28031] openvswitch: netlink: Flow actions attr not present in new flow.
[  799.403203][T28045] bridge_slave_0 (unregistering): left allmulticast mode
[  799.410475][T28045] bridge_slave_0 (unregistering): left promiscuous mode
[  799.418609][T28045] bridge0: port 1(bridge_slave_0) entered disabled state
[  799.476531][T28042] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  799.855042][T28070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5940'.
[  799.909466][T28074] netlink: 'syz.4.5942': attribute type 1 has an invalid length.
[  800.149037][T28080] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  800.163566][T28094] netlink: 'syz.0.5946': attribute type 4 has an invalid length.
[  800.193031][T28094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5946'.
[  800.298325][T28101] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5947'.
[  800.417107][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5949'.
[  800.433164][T28110] netlink: 'syz.4.5950': attribute type 2 has an invalid length.
[  800.505612][ T9246] lec:lec_start_xmit: lec0:No lecd attached
[  800.556161][T28118] netlink: 'syz.0.5954': attribute type 3 has an invalid length.
[  800.894171][  T133] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  800.919026][  T133] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  800.941045][  T133] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  800.958653][  T133] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  800.983238][T28149] bridge0: entered allmulticast mode
[  801.181924][T28161] veth11: entered promiscuous mode
[  801.611204][T28196] netlink: 'syz.2.5975': attribute type 2 has an invalid length.
[  801.626741][T28196] �9: entered promiscuous mode
[  801.644513][T28199] netlink: 'syz.2.5975': attribute type 2 has an invalid length.
[  802.020339][T28220] erspan0: entered allmulticast mode
[  802.502382][T28257] __nla_validate_parse: 17 callbacks suppressed
[  802.502407][T28257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5993'.
[  802.896364][T28282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6003'.
[  802.914537][T28282] macvlan3: entered allmulticast mode
[  803.008211][T28290] bond3: (slave C): Releasing backup interface
[  803.031807][T28290] bond3: (slave C): last VLAN challenged slave left bond - VLAN blocking is removed
[  803.050233][T28290] batman_adv: batadv0: Removing interface: batadv_slave_0
[  803.059572][T28290] batman_adv: batadv0: Removing interface: batadv_slave_1
[  803.068521][T28290] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  803.108806][T28294] syzkaller0: entered promiscuous mode
[  803.125140][T28294] syzkaller0: entered allmulticast mode
[  803.258907][T28294] x_tables: duplicate underflow at hook 1
[  803.277746][T28294] syzkaller0: tun_net_xmit 14
[  803.284432][T28294] syzkaller0: tun_net_xmit 14
[  803.327781][T28306] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.6009'.
[  803.585651][T28315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6013'.
[  803.842054][T28333] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.6017'.
[  803.862575][T28331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  804.186039][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  804.213362][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  804.223149][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  804.238141][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  804.246468][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  804.434216][T28372] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6027'.
[  804.555272][T28354] wg1 speed is unknown, defaulting to 1000
[  804.712528][ T1156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.905791][ T1156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.203547][ T1156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.344714][ T1156] netdevsim netdevsim4 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.360613][T28415] netlink: 'syz.0.6034': attribute type 1 has an invalid length.
[  805.379426][T28415] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6034'.
[  805.491825][ T6049] IPVS: starting estimator thread 0...
[  805.611036][T28424] IPVS: using max 27 ests per chain, 64800 per kthread
[  805.763360][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  805.791309][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5280 ms
[  805.799426][    C1] lec:lec_tx_timeout: lec0
[  805.832456][T28441] x_tables: duplicate underflow at hook 1
[  805.862568][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  805.982725][T28453] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6042'.
[  806.069525][ T7771] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  806.165268][T14057] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  806.263068][ T1156] bridge_slave_0: left allmulticast mode
[  806.273444][ T1156] bridge_slave_0: left promiscuous mode
[  806.279468][ T1156] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.325450][ T1156] pimreg3: left allmulticast mode
[  806.348495][T28466] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6045'.
[  806.354860][ T5144] Bluetooth: hci5: command tx timeout
[  806.556723][T28477] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  806.620315][ T1156] tipc: Disabling bearer <eth:xfrm0>
[  806.701615][ T1156] gretap0 (unregistering): left promiscuous mode
[  806.782914][ T1156] gretap1 (unregistering): left allmulticast mode
[  806.793653][ T1156] team0: Port device gretap1 removed
[  806.847990][ T1156] bond3 (unregistering): (slave geneve3): Releasing active interface
[  807.215645][ T1156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  807.226165][ T1156] bond0 (unregistering): (slave ÿ
): Releasing backup interface
[  807.236111][ T1156] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  807.248617][ T1156] bond0 (unregistering): Released all slaves
[  807.260396][ T1156] bond1 (unregistering): Released all slaves
[  807.278982][ T1156] bond2 (unregistering): (slave veth1): Releasing active interface
[  807.289511][ T1156] bond2 (unregistering): Released all slaves
[  807.308601][ T1156] bond3 (unregistering): Released all slaves
[  807.330366][ T1156] bond4 (unregistering): Released all slaves
[  807.363812][T28354] chnl_net:caif_netlink_parms(): no params data found
[  807.407015][T28468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6044'.
[  807.451255][T28491] sit0: entered promiscuous mode
[  807.548374][ T1156] : left promiscuous mode
[  807.677826][T28491] __nla_validate_parse: 3 callbacks suppressed
[  807.677846][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6051'.
[  807.696732][T28502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6056'.
[  807.706058][T28502] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6056'.
[  807.717644][T28502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6056'.
[  807.719541][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6051'.
[  807.856677][T28502] tipc: Resetting bearer <eth:syzkaller0>
[  807.863296][T28502] tipc: Resetting bearer <eth:syzkaller0>
[  807.878993][ T1156] tipc: Left network mode
[  807.883651][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6051'.
[  807.894462][T28501] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6055'.
[  807.903692][T28508] netlink: 'syz.0.6054': attribute type 10 has an invalid length.
[  807.903717][T28508] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6054'.
[  807.924438][T28508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6054'.
[  808.431417][ T5144] Bluetooth: hci5: command tx timeout
[  808.465376][T28354] bridge0: port 1(bridge_slave_0) entered blocking state
[  808.500688][T28354] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.565544][T28354] bridge_slave_0: entered allmulticast mode
[  808.600237][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  808.617421][T28354] bridge_slave_0: entered promiscuous mode
[  808.780398][T28354] bridge0: port 2(bridge_slave_1) entered blocking state
[  808.799282][T28354] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.832053][T28354] bridge_slave_1: entered allmulticast mode
[  808.859949][T28354] bridge_slave_1: entered promiscuous mode
[  809.054907][T28354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  809.101255][T28354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  809.121860][T28571] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6066'.
[  809.297895][T28575] IPVS: length: 83 != 24
[  809.422082][T28585] IPVS: length: 239 != 24
[  809.525674][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1
[  809.667745][T28354] team0: Port device team_slave_0 added
[  809.691050][T28354] team0: Port device team_slave_1 added
[  809.935509][T28354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  809.954783][T28354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  810.023404][T28354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  810.039832][T28354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  810.047422][T28354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  810.089458][T28354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  810.117957][ T1156] hsr_slave_0: left promiscuous mode
[  810.134260][ T1156] hsr_slave_1: left promiscuous mode
[  810.505415][ T1156] team0 (unregistering): Port device 
2
6±ÿ removed
[  810.512554][ T5144] Bluetooth: hci5: command tx timeout
[  810.530420][ T1156] team0 (unregistering): Port device team_slave_0 removed
[  810.718509][T28618] bond12: entered promiscuous mode
[  810.724374][T28618] 8021q: adding VLAN 0 to HW filter on device bond12
[  810.752269][T28621] bridge11: entered promiscuous mode
[  810.758802][T28621] bond12: (slave bridge11): Enslaving as an active interface with an up link
[  811.061173][T28354] hsr_slave_0: entered promiscuous mode
[  811.068607][T28354] hsr_slave_1: entered promiscuous mode
[  811.076709][T28354] debugfs: 'hsr0' already exists in 'hsr'
[  811.084472][T28354] Cannot create hsr debugfs directory
[  811.095478][T28639] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  811.501603][T28660] syzkaller0: entered promiscuous mode
[  811.534180][T28660] syzkaller0: entered allmulticast mode
[  811.572260][ T1156] IPVS: stop unused estimator thread 0...
[  812.591284][ T5144] Bluetooth: hci5: command tx timeout
[  813.794021][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms
[  813.802113][    C1] lec:lec_tx_timeout: lec0
[  814.840061][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2
[  814.960201][T28702] Bluetooth: MGMT ver 1.23
[  815.101408][T28354] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.315270][T28354] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.653024][T28354] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.981703][T28354] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.095061][T28757] netlink: 'syz.0.6112': attribute type 1 has an invalid length.
[  816.146448][T28758] __nla_validate_parse: 68 callbacks suppressed
[  816.146470][T28758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6110'.
[  816.550069][T28772] netlink: 'syz.2.6116': attribute type 10 has an invalid length.
[  816.749135][T28772] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  817.127134][T28771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  817.232565][T28354] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  817.253853][T28354] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  817.271828][T28354] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  817.295737][T28354] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  817.313520][T28354] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  817.353231][T28354] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  817.372157][T28354] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  817.384731][T28799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6123'.
[  817.420417][T28354] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  817.587504][T28810] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  817.806999][T28827] netlink: 'syz.3.6126': attribute type 3 has an invalid length.
[  817.830916][T28354] 8021q: adding VLAN 0 to HW filter on device bond0
[  817.856456][T28827] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6126'.
[  817.907068][T28354] 8021q: adding VLAN 0 to HW filter on device team0
[  817.965290][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.972594][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  817.997053][T24900] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.004283][T24900] bridge0: port 2(bridge_slave_1) entered forwarding state
[  818.121856][T28837] bond1: Unable to set up delay as MII monitoring is disabled
[  818.144824][T28837] bond1 (unregistering): Released all slaves
[  818.496631][T28871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6132'.
[  818.792249][T28354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  818.895348][T28890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6134'.
[  818.927212][T28890] netlink: 'syz.0.6134': attribute type 12 has an invalid length.
[  819.332694][T28354] veth0_vlan: entered promiscuous mode
[  819.352299][T28354] veth1_vlan: entered promiscuous mode
[  819.419797][T28354] veth0_macvtap: entered promiscuous mode
[  819.433514][T28354] veth1_macvtap: entered promiscuous mode
[  819.457229][T28354] batman_adv: batadv0: Interface activated: batadv_slave_0
[  819.482702][T28354] batman_adv: batadv0: Interface activated: batadv_slave_1
[  819.500590][T24900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  819.525471][T24900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  819.554273][T24900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.579704][T24900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  820.605963][T28817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  820.781051][T24900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  820.806381][T24900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.906792][T28933] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  820.940065][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  820.949335][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  820.962846][T28941] netlink: 'syz.2.6141': attribute type 1 has an invalid length.
[  821.004775][T28933] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  821.015955][T28938] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6141'.
[  821.119967][T28941] 8021q: adding VLAN 0 to HW filter on device bond1
[  821.138001][T28941] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6141'.
[  821.199236][T28948] bond1: (slave veth0_to_bond): making interface the new active one
[  821.214774][T28948] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  821.240601][T28933] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  821.267988][T28957] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  821.287915][T28941] netlink: 'syz.2.6141': attribute type 1 has an invalid length.
[  821.318743][T28941] netlink: 'syz.2.6141': attribute type 2 has an invalid length.
[  821.443572][T28933] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  821.699960][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  821.723348][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  821.734773][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  821.746287][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  821.754569][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  821.862773][ T7771] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  821.905571][ T7771] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  821.920758][T28975] netlink: 'syz.0.6149': attribute type 21 has an invalid length.
[  821.946651][T28975] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6149'.
[  822.037632][T28975] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6149'.
[  822.066450][T28966] wg1 speed is unknown, defaulting to 1000
[  822.066475][  T133] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  822.135392][ T1156] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  822.366079][T14057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  822.385870][T14057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.573424][T28998] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6156'.
[  822.596964][T14057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  822.632679][T14057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  822.645813][T29004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6157'.
[  822.852519][T14057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  822.863805][T14057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.056609][T29019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6161'.
[  823.090215][T29019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6161'.
[  823.407021][  T133] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  823.445571][ T7763] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  823.509998][  T133] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  823.618130][T28966] chnl_net:caif_netlink_parms(): no params data found
[  823.669988][  T133] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  823.678560][T29046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6168'.
[  823.720546][T29041] batman_adv: batadv0: Adding interface: ipvlan2
[  823.748605][T29041] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.803612][T29054] netlink: 'syz.4.6170': attribute type 30 has an invalid length.
[  823.812074][T29041] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  823.841628][T29046] netlink: 'syz.0.6168': attribute type 3 has an invalid length.
[  823.874226][ T5144] Bluetooth: hci3: command tx timeout
[  824.077093][T29066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  824.118323][T29063] xt_CT: You must specify a L4 protocol and not use inversions on it
[  824.259585][T29077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6174'.
[  824.797514][T14057] bond4 (unregistering): (slave bridge3): Releasing active interface
[  825.037307][T14057] bond0 (unregistering): Released all slaves
[  825.050744][T14057] bond1 (unregistering): Released all slaves
[  825.067638][T14057] bond2 (unregistering): Released all slaves
[  825.088749][T14057] bond3 (unregistering): (slave veth9): Releasing active interface
[  825.099781][T14057] bond3 (unregistering): Released all slaves
[  825.118064][T14057] bond4 (unregistering): Released all slaves
[  825.135598][T14057] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface
[  825.147558][T14057] bond5 (unregistering): Released all slaves
[  825.168384][T14057] bond6 (unregistering): Released all slaves
[  825.184528][T14057] bond7 (unregistering): Released all slaves
[  825.201692][T29054] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  825.256443][T29076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6174'.
[  825.435460][T14057] vþ: left promiscuous mode
[  825.507944][T29092] netlink: 'syz.0.6177': attribute type 7 has an invalid length.
[  825.585774][T14057] tipc: Disabling bearer <udp:syz2>
[  825.612396][T14057] tipc: Left network mode
[  825.618350][T28966] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.652078][T28966] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.679115][T28966] bridge_slave_0: entered allmulticast mode
[  825.712138][T28966] bridge_slave_0: entered promiscuous mode
[  825.754299][T28966] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.801081][T28966] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.829996][T28966] bridge_slave_1: entered allmulticast mode
[  825.853573][T28966] bridge_slave_1: entered promiscuous mode
[  825.879541][T29106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6180'.
[  825.951170][ T5144] Bluetooth: hci3: command tx timeout
[  826.068699][T28966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  826.120478][T28966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  826.399478][T28966] team0: Port device team_slave_0 added
[  826.453622][T28966] team0: Port device team_slave_1 added
[  826.584037][T28966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  826.608045][T28966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.661775][T28966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  826.710770][T28966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  826.742562][T28966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  826.827228][T28966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  826.959635][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1
[  826.966694][T29153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6187'.
[  826.982020][T29153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6187'.
[  827.062559][T28966] hsr_slave_0: entered promiscuous mode
[  827.072135][T28966] hsr_slave_1: entered promiscuous mode
[  827.083993][T28966] debugfs: 'hsr0' already exists in 'hsr'
[  827.089861][T28966] Cannot create hsr debugfs directory
[  827.117697][T14057] hsr_slave_0: left promiscuous mode
[  827.124426][T14057] hsr_slave_1: left promiscuous mode
[  827.137453][T14057] veth0_macvtap: left promiscuous mode
[  827.146099][T14057] veth1_vlan: left promiscuous mode
[  827.152305][T14057] veth0_vlan: left promiscuous mode
[  827.949785][T28966] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.011781][T29171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6190'.
[  828.032792][ T5144] Bluetooth: hci3: command tx timeout
[  828.094421][T28966] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.172627][T28966] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.284893][T28966] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.334089][T29180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6192'.
[  828.458748][T29183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6193'.
[  828.834631][T29106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  828.997421][T29188] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9
[  829.011432][T28966] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  829.036818][T28966] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  829.054812][T29188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  829.062201][T29188] IPv6: NLM_F_CREATE should be set when creating new route
[  829.069533][T29188] IPv6: NLM_F_CREATE should be set when creating new route
[  829.076878][T29188] IPv6: NLM_F_CREATE should be set when creating new route
[  829.087128][T28966] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  829.120526][T28966] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  829.146425][T28966] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  829.177120][T28966] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  829.204400][T28966] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  829.233594][T29196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  829.244961][T28966] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  829.274819][T29198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  829.322426][T29197] pimreg3: entered allmulticast mode
[  829.409737][T29212] netlink: 'syz.2.6199': attribute type 1 has an invalid length.
[  829.615251][T28966] 8021q: adding VLAN 0 to HW filter on device bond0
[  829.698549][T29221] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6202'.
[  829.766379][T29229] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6203'.
[  829.776153][T28966] 8021q: adding VLAN 0 to HW filter on device team0
[  829.824728][T29225] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6203'.
[  829.846568][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[  829.853846][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  829.940138][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  829.947423][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  830.114338][ T5144] Bluetooth: hci3: command tx timeout
[  830.203659][T29239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6205'.
[  830.248816][T29236] syzkaller1: entered promiscuous mode
[  830.265388][T29236] syzkaller1: entered allmulticast mode
[  830.296070][T29236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6204'.
[  830.406569][T29236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  831.203137][T29259] bond13: entered promiscuous mode
[  831.564358][T29288] IPv6: NLM_F_REPLACE set, but no existing node found!
[  831.614355][T28966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  831.756552][T29262] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  831.836561][T29294] vlan2: entered allmulticast mode
[  831.848765][T29294] hsr0: entered allmulticast mode
[  831.873811][T29294] hsr_slave_0: entered allmulticast mode
[  831.888337][T29294] hsr_slave_1: entered allmulticast mode
[  832.015430][T28966] veth0_vlan: entered promiscuous mode
[  832.172883][T29294] bond1 (unregistering): Released all slaves
[  832.299684][T29309] __nla_validate_parse: 11 callbacks suppressed
[  832.299706][T29309] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6220'.
[  832.347444][T28966] veth1_vlan: entered promiscuous mode
[  832.427870][T29309] dummy0 (unregistering): left allmulticast mode
[  832.465268][T29309] bridge0: port 2(dummy0) entered disabled state
[  832.719916][T28966] veth0_macvtap: entered promiscuous mode
[  832.767423][T28966] veth1_macvtap: entered promiscuous mode
[  832.880225][T28966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  832.924467][T28966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  832.988327][   T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  833.009417][   T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  833.031612][   T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  833.048156][   T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  833.480191][T29338] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  833.543136][T29338] bond2 (unregistering): Released all slaves
[  833.672940][T29354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6232'.
[  833.708411][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.751558][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  833.920010][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.957014][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  834.169511][T29365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6236'.
[  834.728791][T29384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6242'.
[  834.892037][T29392] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6243'.
[  835.098653][T29397] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6245'.
[  835.137194][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  835.153710][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  835.167457][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  835.180043][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  835.189876][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  835.197853][T29397] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6245'.
[  835.240319][T29396] syzkaller0: entered promiscuous mode
[  835.310698][T29396] syzkaller0: entered allmulticast mode
[  835.379991][T29396] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6246'.
[  835.607030][T29411] nbd: must specify a size in bytes for the device
[  835.836346][T29398] wg1 speed is unknown, defaulting to 1000
[  836.006052][T29422] netlink: 'syz.1.6251': attribute type 11 has an invalid length.
[  836.037620][T29422] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6251'.
[  836.609744][T29443] syzkaller1: entered promiscuous mode
[  836.636507][T29443] syzkaller1: entered allmulticast mode
[  836.674912][T29443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6257'.
[  837.141270][T29458] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  837.311772][ T5826] Bluetooth: hci1: command tx timeout
[  837.427091][T29462] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.6261'.
[  837.647197][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6264'.
[  837.668168][T29473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6264'.
[  837.992677][T29480] netlink: 320 bytes leftover after parsing attributes in process `syz.3.6266'.
[  838.080610][T29488] netlink: 'syz.4.6268': attribute type 1 has an invalid length.
[  838.258222][T29488] 8021q: adding VLAN 0 to HW filter on device bond1
[  838.400093][T29491] bond1: (slave veth0_to_bond): making interface the new active one
[  838.416010][T29491] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  838.450651][T29493] 8021q: adding VLAN 0 to HW filter on device bond2
[  838.460740][T29493] bond1: (slave bond2): Enslaving as an active interface with a down link
[  838.544653][T29499] veth11: entered allmulticast mode
[  838.626451][T29398] chnl_net:caif_netlink_parms(): no params data found
[  838.862960][T29516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6276'.
[  838.941563][T29516] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6276'.
[  839.111652][T29516] netlink: 'syz.1.6276': attribute type 9 has an invalid length.
[  839.123050][T29398] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.137964][T29398] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.147293][T29398] bridge_slave_0: entered allmulticast mode
[  839.159035][T29398] bridge_slave_0: entered promiscuous mode
[  839.188387][T29530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6279'.
[  839.217486][T29398] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.243697][T29398] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.252358][T29398] bridge_slave_1: entered allmulticast mode
[  839.265068][T29398] bridge_slave_1: entered promiscuous mode
[  839.391032][ T5826] Bluetooth: hci1: command tx timeout
[  839.511525][T29398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  839.550091][T29398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  839.670057][T29398] team0: Port device team_slave_0 added
[  839.683560][T29398] team0: Port device team_slave_1 added
[  839.772303][T29398] batman_adv: batadv0: Adding interface: batadv_slave_0
[  839.780453][T29398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  839.810577][T29398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  839.826588][T29398] batman_adv: batadv0: Adding interface: batadv_slave_1
[  839.838131][T29398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  839.869482][T29398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  839.950315][T29398] hsr_slave_0: entered promiscuous mode
[  839.962587][T29398] hsr_slave_1: entered promiscuous mode
[  839.969517][T29398] debugfs: 'hsr0' already exists in 'hsr'
[  839.977559][T29398] Cannot create hsr debugfs directory
[  840.244317][T29398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  840.256425][T29398] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.351672][T29398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  840.363105][T29398] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.460450][T29398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  840.470971][T29398] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.565547][T29398] netdevsim netdevsim0 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  840.575540][T29398] netdevsim netdevsim0 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.788164][T29398] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  840.800325][T29398] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  840.809128][T29398] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  840.821525][T29398] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  840.829631][T29398] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  840.840723][T29398] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  840.848619][T29398] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  840.862776][T29398] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  840.976762][T29398] 8021q: adding VLAN 0 to HW filter on device bond0
[  841.003989][T29398] 8021q: adding VLAN 0 to HW filter on device team0
[  841.019901][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state
[  841.029808][ T7763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  841.049202][T14057] bridge0: port 2(bridge_slave_1) entered blocking state
[  841.056393][T14057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  841.354343][T29398] 8021q: adding VLAN 0 to HW filter on device batadv0
[  841.418047][T29398] veth0_vlan: entered promiscuous mode
[  841.436340][T29398] veth1_vlan: entered promiscuous mode
[  841.471078][ T5826] Bluetooth: hci1: command tx timeout
[  841.486739][T29398] veth0_macvtap: entered promiscuous mode
[  841.502361][T29398] veth1_macvtap: entered promiscuous mode
[  841.526399][T29398] batman_adv: batadv0: Interface activated: batadv_slave_0
[  841.545981][T29398] batman_adv: batadv0: Interface activated: batadv_slave_1
[  841.570004][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  841.580661][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  841.590247][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  841.603811][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  841.750300][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.788487][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.834151][  T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.843153][  T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.932600][T29557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6240'.
[  843.551154][ T5826] Bluetooth: hci1: command tx timeout
[  864.298701][ T9246] lec:lec_start_xmit: lec0:No lecd attached
[  865.068603][T14057] bond10 (unregistering): (slave ip6gretap0): Removing an active aggregator
[  865.087512][T14057] bond10 (unregistering): (slave ip6gretap0): Releasing backup interface
[  865.431869][T14057] bond5 (unregistering): (slave geneve2): Releasing active interface
[  865.579796][T14057] bridge0 (unregistering): left allmulticast mode
[  865.596158][T29575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6288'.
[  865.764806][T29582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  865.783428][T29582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  865.795272][T29582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  865.808083][T29582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  865.823358][T29582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  866.173906][T14057] bond8 (unregistering): (slave bridge8): Releasing backup interface
[  866.184028][T14057] bridge8 (unregistering): left promiscuous mode
[  866.192784][T14057] bridge8 (unregistering): left allmulticast mode
[  866.320712][T14057] bond12 (unregistering): (slave bridge11): Releasing backup interface
[  866.330707][T14057] bridge11 (unregistering): left promiscuous mode
[  866.380092][T14057] bond1 (unregistering): Released all slaves
[  866.407859][T14057] bond2 (unregistering): Released all slaves
[  866.430663][T14057] bond3 (unregistering): Released all slaves
[  866.454498][T14057] bond4 (unregistering): Released all slaves
[  866.477094][T14057] bond5 (unregistering): Released all slaves
[  866.509596][T14057] bond6 (unregistering): Released all slaves
[  866.534762][T14057] bond7 (unregistering): Released all slaves
[  866.557134][T14057] bond0 (unregistering): Released all slaves
[  866.585603][T14057] bond8 (unregistering): Released all slaves
[  866.618454][T14057] bond9 (unregistering): Released all slaves
[  866.636048][T14057] bond10 (unregistering): Released all slaves
[  866.659011][T14057] bond11 (unregistering): Released all slaves
[  866.687370][T14057] bond12 (unregistering): Released all slaves
[  866.706658][T14057] bond13 (unregistering): Released all slaves
[  866.756702][T29567] team0: entered promiscuous mode
[  866.764152][T29567] team_slave_0: entered promiscuous mode
[  866.772156][T29567] team_slave_1: entered promiscuous mode
[  866.817168][T29567] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  866.827261][T29567] team0: Device macvlan2 is already an upper device of the team interface
[  866.841352][T29567] team0: left promiscuous mode
[  866.847506][T29567] team_slave_0: left promiscuous mode
[  866.862220][T29567] team_slave_1: left promiscuous mode
[  866.970360][T14057] tipc: Disabling bearer <udp:syz2>
[  867.001628][T14057] tipc: Left network mode
[  867.246794][T29577] wg1 speed is unknown, defaulting to 1000
[  867.364861][T29579] wg1 speed is unknown, defaulting to 1000
[  867.830046][T29599] x_tables: duplicate underflow at hook 1
[  867.871326][ T5826] Bluetooth: hci4: command tx timeout
[  868.508508][T29622] netlink: 'syz.1.6302': attribute type 3 has an invalid length.
[  868.535552][T29624] FAULT_INJECTION: forcing a failure.
[  868.535552][T29624] name failslab, interval 1, probability 0, space 0, times 0
[  868.570705][T29624] CPU: 1 UID: 0 PID: 29624 Comm: syz.4.6303 Not tainted syzkaller #0 PREEMPT(full) 
[  868.570741][T29624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  868.570754][T29624] Call Trace:
[  868.570763][T29624]  <TASK>
[  868.570772][T29624]  dump_stack_lvl+0xe8/0x150
[  868.570806][T29624]  should_fail_ex+0x412/0x560
[  868.570838][T29624]  should_failslab+0xa8/0x100
[  868.570863][T29624]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  868.570895][T29624]  ? __alloc_skb+0x186/0x7d0
[  868.570925][T29624]  ? __alloc_skb+0x1d0/0x7d0
[  868.570953][T29624]  ? __local_bh_enable_ip+0xd0/0x130
[  868.570989][T29624]  __alloc_skb+0x1d0/0x7d0
[  868.571025][T29624]  netlink_sendmsg+0x5d4/0xb40
[  868.571069][T29624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  868.571105][T29624]  ? aa_sock_msg_perm+0xf1/0x1b0
[  868.571137][T29624]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  868.571175][T29624]  ____sys_sendmsg+0x972/0x9f0
[  868.571209][T29624]  ? __might_fault+0xaf/0x130
[  868.571245][T29624]  ? __pfx_____sys_sendmsg+0x10/0x10
[  868.571287][T29624]  ? import_iovec+0x73/0xa0
[  868.571314][T29624]  ___sys_sendmsg+0x2a5/0x360
[  868.571346][T29624]  ? __lock_acquire+0x6b5/0x2cf0
[  868.571381][T29624]  ? __pfx____sys_sendmsg+0x10/0x10
[  868.571452][T29624]  ? __fget_files+0x2a/0x420
[  868.571481][T29624]  ? __fget_files+0x3a0/0x420
[  868.571520][T29624]  __x64_sys_sendmsg+0x1bd/0x2a0
[  868.571558][T29624]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  868.571603][T29624]  ? __pfx_ksys_write+0x10/0x10
[  868.571647][T29624]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.571672][T29624]  do_syscall_64+0x15f/0xf80
[  868.571706][T29624]  ? trace_irq_disable+0x3b/0x140
[  868.571730][T29624]  ? clear_bhb_loop+0x40/0x90
[  868.571758][T29624]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.571782][T29624] RIP: 0033:0x7f843a19c819
[  868.571804][T29624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.571825][T29624] RSP: 002b:00007f843b13b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  868.571851][T29624] RAX: ffffffffffffffda RBX: 00007f843a415fa0 RCX: 00007f843a19c819
[  868.571869][T29624] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  868.571885][T29624] RBP: 00007f843b13b090 R08: 0000000000000000 R09: 0000000000000000
[  868.571900][T29624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  868.571913][T29624] R13: 00007f843a416038 R14: 00007f843a415fa0 R15: 00007ffdfdd48f88
[  868.571961][T29624]  </TASK>
[  869.569499][T29653] xt_hashlimit: size too large, truncated to 1048576
[  869.791180][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms
[  869.799337][    C1] lec:lec_tx_timeout: lec0
[  869.953477][ T5826] Bluetooth: hci4: command tx timeout
[  870.054940][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[  871.217021][T14057] hsr_slave_0: left promiscuous mode
[  871.234647][T14057] hsr_slave_1: left promiscuous mode
[  871.243776][T14057] batman_adv: batadv0: Removing interface: ipvlan2
[  871.946777][T29696] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6319'.
[  872.011928][T29696] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6319'.
[  872.035498][ T5826] Bluetooth: hci4: command tx timeout
[  872.057453][T29696] netlink: 'syz.1.6319': attribute type 6 has an invalid length.
[  872.082828][T29696] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6319'.
[  872.165444][T29677] syzkaller1: entered promiscuous mode
[  872.181432][T29677] syzkaller1: entered allmulticast mode
[  872.334215][T29579] chnl_net:caif_netlink_parms(): no params data found
[  872.684885][T29579] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.692798][T29579] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.700259][T29579] bridge_slave_0: entered allmulticast mode
[  872.759168][T29579] bridge_slave_0: entered promiscuous mode
[  872.778363][T29579] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.811914][T29579] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.834205][T29579] bridge_slave_1: entered allmulticast mode
[  872.843703][T29579] bridge_slave_1: entered promiscuous mode
[  872.999016][T29720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6323'.
[  873.017278][ T7771] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  873.033524][T29720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6323'.
[  873.079191][T14057] IPVS: stop unused estimator thread 0...
[  873.086404][T29579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  873.189452][T29579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  873.400620][T29730] netlink: 320 bytes leftover after parsing attributes in process `syz.0.6323'.
[  873.504892][T29579] team0: Port device team_slave_0 added
[  873.520257][T29735] netlink: 'syz.1.6325': attribute type 1 has an invalid length.
[  873.566627][T29579] team0: Port device team_slave_1 added
[  873.596882][T29733] syzkaller0: entered allmulticast mode
[  873.736486][T29732] syzkaller0 (unregistering): left allmulticast mode
[  873.859288][T14057] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  874.010011][T29579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  874.036185][T29579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  874.112655][ T5826] Bluetooth: hci4: command tx timeout
[  874.118179][T29579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  874.140136][T29579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  874.175438][T29579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  874.319426][T29579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  874.525840][T29747] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  874.560141][T29747] bond1 (unregistering): Released all slaves
[  874.668910][T14057] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  874.919822][T29766] netlink: 'syz.1.6332': attribute type 8 has an invalid length.
[  874.960484][T14057] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  874.971958][T29766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6332'.
[  875.082130][T29766] bond0: entered promiscuous mode
[  875.101028][T29766] bond_slave_0: entered promiscuous mode
[  875.115511][T29766] bond_slave_1: entered promiscuous mode
[  875.165747][T29766] gretap0: entered promiscuous mode
[  875.194590][T29766] bond0: left promiscuous mode
[  875.213194][T29766] bond_slave_0: left promiscuous mode
[  875.229386][T29766] bond_slave_1: left promiscuous mode
[  875.238047][T29766] gretap0: left promiscuous mode
[  875.243021][T29770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6334'.
[  875.391914][T29768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6333'.
[  875.408596][T14057] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  875.523517][T29775] vlan2: entered allmulticast mode
[  875.639052][T29776] bond1 (unregistering): Released all slaves
[  875.785086][T29579] hsr_slave_0: entered promiscuous mode
[  875.795668][T29579] hsr_slave_1: entered promiscuous mode
[  875.802938][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  875.811125][    C1] lec:lec_tx_timeout: lec0
[  875.811293][T29579] debugfs: 'hsr0' already exists in 'hsr'
[  875.825887][T29579] Cannot create hsr debugfs directory
[  876.493348][T29810] netlink: 'syz.2.6342': attribute type 21 has an invalid length.
[  876.514396][ T7763] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  876.687673][T29799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6341'.
[  876.723251][T24900] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  876.898445][ T7771] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  877.118400][ T7771] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  877.215815][T14057] bond2: left allmulticast mode
[  877.222462][T14057] bond2: left promiscuous mode
[  877.228426][T14057] bridge0: port 1(bond2) entered disabled state
[  877.271127][T14057] dvmrp8: left allmulticast mode
[  877.599832][T14057] bond1 (unregistering): (slave xfrm1): Releasing backup interface
[  877.766983][T14057] bond4 (unregistering): (slave gretap1): Releasing active interface
[  878.215133][T14057] bond0 (unregistering): Released all slaves
[  878.230759][T14057] bond1 (unregistering): Released all slaves
[  878.285461][T14057] bond2 (unregistering): Released all slaves
[  878.350565][T14057] bond3 (unregistering): Released all slaves
[  878.400636][T14057] bond4 (unregistering): Released all slaves
[  878.484596][T14057] bond5 (unregistering): Released all slaves
[  878.507872][T14057] bond6 (unregistering): Released all slaves
[  878.534049][T14057] bond7 (unregistering): Released all slaves
[  878.558300][T14057] bond8 (unregistering): Released all slaves
[  878.580087][T14057] bond9 (unregistering): Released all slaves
[  878.604232][T14057] bond10 (unregistering): Released all slaves
[  878.814698][T29579] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.978243][T14057] tipc: Disabling bearer <udp:syz2>
[  878.984022][T14057] tipc: Disabling bearer <eth:syzkaller0>
[  879.003922][T14057] tipc: Left network mode
[  879.079570][T29579] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.090620][T29793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  879.389655][T29824] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.6345'.
[  879.490050][T29828] netlink: 'syz.4.6346': attribute type 1 has an invalid length.
[  879.543621][T29579] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  879.641422][T29834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6346'.
[  879.655263][T29833] netlink: 'syz.1.6348': attribute type 1 has an invalid length.
[  879.960329][T29831] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  879.974869][T29831] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  880.078023][T29833] 8021q: adding VLAN 0 to HW filter on device bond1
[  880.093855][T29579] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.142970][T29838] macvlan2: entered promiscuous mode
[  880.148610][T29838] macvlan2: entered allmulticast mode
[  880.156449][T29838] bond3: entered promiscuous mode
[  880.164766][T29838] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  880.187431][T29838] bond3: left promiscuous mode
[  880.315799][T29839] bond1: (slave geneve2): making interface the new active one
[  880.366094][T29839] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  880.853960][T29870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6352'.
[  881.099217][T29851] wg1 speed is unknown, defaulting to 1000
[  881.190434][T29877] openvswitch: netlink: Message has 4 unknown bytes.
[  881.289273][T29877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6354'.
[  882.330257][T29579] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  882.364903][T29579] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  882.393203][T29901] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6361'.
[  882.428385][T29904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  882.460611][T29579] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  882.491942][T29579] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  882.502002][T29579] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  882.527659][T29579] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  882.614549][T29579] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  882.652135][T29579] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  883.112520][T29923] netlink: 'syz.4.6366': attribute type 62 has an invalid length.
[  883.429796][T29935] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  884.251935][T29579] 8021q: adding VLAN 0 to HW filter on device bond0
[  884.366099][T29579] 8021q: adding VLAN 0 to HW filter on device team0
[  884.432723][ T7771] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.440016][ T7771] bridge0: port 1(bridge_slave_0) entered forwarding state
[  884.552708][ T7771] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.559982][ T7771] bridge0: port 2(bridge_slave_1) entered forwarding state
[  884.778579][T29961] netlink: 'syz.4.6371': attribute type 11 has an invalid length.
[  884.814087][T29961] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6371'.
[  884.981414][T29969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6372'.
[  884.997889][T14057] hsr_slave_0: left promiscuous mode
[  885.020364][T14057] hsr_slave_1: left promiscuous mode
[  885.044781][T14057] batman_adv: batadv0: Removing interface: ipvlan2
[  885.232740][T29979] openvswitch: netlink: VXLAN extension 78 out of range max 1
[  885.264305][T29979] netlink: 'syz.4.6375': attribute type 1 has an invalid length.
[  885.652866][T24900] smc: removing ib device syz0
[  886.294596][T29963] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  886.303569][T29963] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  886.657306][T29963] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  886.677627][T29963] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  887.051796][T30005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  887.124520][T30011] netlink: 'syz.4.6381': attribute type 16 has an invalid length.
[  887.148645][T30011] netlink: 'syz.4.6381': attribute type 17 has an invalid length.
[  887.441173][T29963] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  887.464607][T29963] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  887.649225][T30011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  887.765568][T30024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6382'.
[  888.346677][T30009] bridge0: port 2(bridge_slave_1) entered disabled state
[  888.358829][T30009] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.498841][T30009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  889.526728][T30009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  889.902692][T30009] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  889.951746][T30009] vlan2: left allmulticast mode
[  889.957479][T30009] hsr0: left allmulticast mode
[  889.964099][T30009] hsr_slave_0: left allmulticast mode
[  889.970322][T30009] hsr_slave_1: left allmulticast mode
[  890.100180][T24893] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  890.128130][T24893] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  890.213873][T29963] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  890.232981][T29963] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  890.303520][T24893] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  890.332184][T24893] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  890.469446][T29963] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  890.486040][T29963] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  890.548067][T29579] 8021q: adding VLAN 0 to HW filter on device batadv0
[  890.735219][T14057] IPVS: stop unused estimator thread 0...
[  890.815844][T30047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6389'.
[  890.869462][T29579] veth0_vlan: entered promiscuous mode
[  890.923712][T29579] veth1_vlan: entered promiscuous mode
[  891.040558][T29579] veth0_macvtap: entered promiscuous mode
[  891.065653][T21812] IPVS: starting estimator thread 0...
[  891.076864][T29579] veth1_macvtap: entered promiscuous mode
[  891.171299][T30058] IPVS: using max 27 ests per chain, 64800 per kthread
[  891.222026][T29579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  891.263039][T29579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  891.273086][T30060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6393'.
[  891.299359][T14057] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  891.311472][T30060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6393'.
[  891.334771][T14057] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  891.374374][T14057] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  891.396042][T14057] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  891.467927][T30067] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6395'.
[  891.502833][T30067] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6395'.
[  891.578833][T30067] netlink: 'syz.1.6395': attribute type 5 has an invalid length.
[  891.616436][T30067] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6395'.
[  891.750462][T24893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.799064][T24893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.840245][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'.
[  891.865213][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'.
[  891.879285][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  891.889712][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'.
[  891.900307][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  891.911576][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6399'.
[  891.957402][T30087] netlink: 'syz.1.6400': attribute type 21 has an invalid length.
[  891.980372][T30087] netlink: 'syz.1.6400': attribute type 1 has an invalid length.
[  892.343469][T30094] bridge0: port 1(bridge_slave_0) entered disabled state
[  892.422181][T30094] bridge_slave_0 (unregistering): left allmulticast mode
[  892.435301][T30094] bridge_slave_0 (unregistering): left promiscuous mode
[  892.457877][T30094] bridge0: port 1(bridge_slave_0) entered disabled state
[  892.959519][T30122] netlink: Conntrack attr has 4 unknown bytes
[  893.453666][T30141] syzkaller0: entered promiscuous mode
[  893.503303][T30141] syzkaller0: entered allmulticast mode
[  893.514481][T30146] netlink: 'syz.1.6418': attribute type 4 has an invalid length.
[  893.703916][T30154] netlink: 'syz.1.6421': attribute type 1 has an invalid length.
[  894.273943][T30168] wg1 speed is unknown, defaulting to 1000
[  894.798856][T30187] netlink: Unknown conntrack attr (type=2304, max=9)
[  895.303374][T30197] sctp: [Deprecated]: syz.4.6434 (pid 30197) Use of int in maxseg socket option.
[  895.303374][T30197] Use struct sctp_assoc_value instead
[  895.622703][T30223] netlink: 'syz.1.6443': attribute type 3 has an invalid length.
[  895.860262][T30236] netlink: 'syz.3.6447': attribute type 11 has an invalid length.
[  895.870992][T30236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  896.079761][T30242] rdma_rxe: rxe_newlink: failed to add gre0
[  896.200292][T30242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  896.248461][T30246] syzkaller0: entered promiscuous mode
[  896.268949][T30246] syzkaller0: entered allmulticast mode
[  896.427670][T30261] __nla_validate_parse: 39 callbacks suppressed
[  896.427697][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6454'.
[  896.713944][T30270] IPv6: addrconf: prefix option has invalid lifetime
[  896.832146][T30279] netlink: 'syz.4.6460': attribute type 10 has an invalid length.
[  896.851760][T30281] netlink: 640 bytes leftover after parsing attributes in process `syz.4.6460'.
[  896.866554][T30279] veth0_vlan: left promiscuous mode
[  896.896372][T30281] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  896.927938][T30279] veth0_vlan: entered promiscuous mode
[  896.957179][T30279] team0: Device veth0_vlan failed to register rx_handler
[  897.298250][T30301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6466'.
[  897.326838][T30301] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6466'.
[  897.337819][T30301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6466'.
[  897.864162][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6473'.
[  897.959071][T30330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6474'.
[  898.102945][T30342] Unsupported ieee802154 address type: 0
[  898.946886][T30376] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  898.957770][T30378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6489'.
[  899.690381][T30408] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6499'.
[  899.749889][T30413] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6500'.
[  899.790520][T30413] netlink: 'syz.2.6500': attribute type 1 has an invalid length.
[  899.810522][T30413] netlink: 'syz.2.6500': attribute type 7 has an invalid length.
[  899.840352][T30413] netlink: 'syz.2.6500': attribute type 8 has an invalid length.
[  899.861529][T30413] NCSI netlink: No device for ifindex 65584
[  900.018872][T30422] netlink: 'syz.2.6506': attribute type 1 has an invalid length.
[  900.124863][T30426] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  900.141085][T30426] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  900.155109][T30426] bond2: (slave ip6gre1): making interface the new active one
[  900.169136][T30426] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  900.264597][T30422] netlink: 'syz.2.6506': attribute type 1 has an invalid length.
[  902.644352][T30453] __nla_validate_parse: 3 callbacks suppressed
[  902.644406][T30453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6513'.
[  902.841187][T30453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6513'.
[  904.348500][T30458] syzkaller0: entered promiscuous mode
[  904.389464][T30458] syzkaller0: entered allmulticast mode
[  905.821135][T30476] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6520'.
[  906.570570][T30484] netlink: 'syz.1.6522': attribute type 1 has an invalid length.
[  906.603757][T30484] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6522'.
[  906.645042][T30487] netlink: 'syz.3.6523': attribute type 1 has an invalid length.
[  906.670121][T30484] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6522'.
[  907.830781][    C1] sched: DL replenish lagged too much
[  915.888650][T30495] syzkaller1: tun_chr_ioctl cmd 1074025677
[  916.105907][T30495] syzkaller1: Refused to change device type
[  917.756249][T30522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6534'.
[  918.143736][T30528] netlink: 'syz.4.6537': attribute type 1 has an invalid length.
[  918.250572][T30528] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  919.545249][T30555] netlink: 'syz.1.6542': attribute type 58 has an invalid length.
[  919.605203][T30555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6542'.
[  919.814642][T30558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6543'.
[  919.984836][T30562] netlink: 'syz.4.6543': attribute type 10 has an invalid length.
[  921.183985][T30574] netlink: 'syz.3.6548': attribute type 1 has an invalid length.
[  921.464005][T30579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6550'.
[  923.649694][T30609] xt_hashlimit: size too large, truncated to 1048576
[  924.486805][T30616] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.176790][T30616] bridge_slave_0 (unregistering): left allmulticast mode
[  925.185803][T30616] bridge_slave_0 (unregistering): left promiscuous mode
[  925.194496][T30616] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.164480][T30641] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved
[  926.507973][T30646] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.6567'.
[  926.587329][T30646] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6567'.
[  926.692943][T30647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6567'.
[  926.902241][T30619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  926.915519][T30651] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6568'.
[  928.134458][ T9246] lec:lec_start_xmit: lec0:No lecd attached
[  930.635028][T30677] netlink: 'syz.0.6576': attribute type 1 has an invalid length.
[  931.032355][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6579'.
[  931.327398][T30691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6579'.
[  931.496715][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079896400: rx timeout, send abort
[  931.509334][T30677] bond1: entered promiscuous mode
[  931.575436][T30677] bond1: entered allmulticast mode
[  931.667549][T30677] 8021q: adding VLAN 0 to HW filter on device bond1
[  931.892341][T30681] macvlan3: entered promiscuous mode
[  931.937948][T30681] macvlan3: entered allmulticast mode
[  931.977341][T30697] netlink: 'syz.4.6580': attribute type 1 has an invalid length.
[  931.997988][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807a715800: rx timeout, send abort
[  932.007642][    C0] vcan0: j1939_tp_rxtimer: 0xffff888079896400: abort rx timeout. Force session deactivation
[  932.433361][T30685] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  932.507507][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807a715800: abort rx timeout. Force session deactivation
[  932.917911][T30697] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  933.487804][T30718] FAULT_INJECTION: forcing a failure.
[  933.487804][T30718] name failslab, interval 1, probability 0, space 0, times 0
[  933.729282][T30718] CPU: 0 UID: 0 PID: 30718 Comm: syz.0.6584 Not tainted syzkaller #0 PREEMPT(full) 
[  933.729313][T30718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  933.729328][T30718] Call Trace:
[  933.729338][T30718]  <TASK>
[  933.729348][T30718]  dump_stack_lvl+0xe8/0x150
[  933.729387][T30718]  should_fail_ex+0x412/0x560
[  933.729425][T30718]  should_failslab+0xa8/0x100
[  933.729451][T30718]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  933.729486][T30718]  ? __alloc_skb+0x1d0/0x7d0
[  933.729515][T30718]  ? __local_bh_enable_ip+0xd0/0x130
[  933.729552][T30718]  __alloc_skb+0x1d0/0x7d0
[  933.729581][T30718]  ? atomic_notifier_call_chain+0x26/0x180
[  933.729602][T30718]  ? atomic_notifier_call_chain+0x26/0x180
[  933.729627][T30718]  mr6_netlink_event+0xb6/0x190
[  933.729673][T30718]  ip6mr_mfc_delete+0xebe/0x1350
[  933.729703][T30718]  ? ip6mr_mfc_delete+0xb0/0x1350
[  933.729739][T30718]  ? __pfx_ip6mr_mfc_delete+0x10/0x10
[  933.729781][T30718]  ? _copy_from_user+0x94/0xb0
[  933.729809][T30718]  ip6_mroute_setsockopt+0x98c/0xf90
[  933.729847][T30718]  ? __pfx_ip6_mroute_setsockopt+0x10/0x10
[  933.729912][T30718]  do_ipv6_setsockopt+0x37f/0x3150
[  933.729956][T30718]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  933.729989][T30718]  ? kstrtouint+0x6e/0xe0
[  933.730020][T30718]  ? aa_label_sk_perm+0x532/0x6e0
[  933.730046][T30718]  ? get_pid_task+0x20/0x1f0
[  933.730075][T30718]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  933.730103][T30718]  ? get_pid_task+0x20/0x1f0
[  933.730125][T30718]  ? get_pid_task+0x20/0x1f0
[  933.730144][T30718]  ? get_pid_task+0x20/0x1f0
[  933.730177][T30718]  ? __lock_acquire+0x6b5/0x2cf0
[  933.730228][T30718]  ? aa_sk_perm+0x6d5/0x900
[  933.730261][T30718]  ipv6_setsockopt+0x59/0x170
[  933.730298][T30718]  rawv6_setsockopt+0x276/0x5f0
[  933.730335][T30718]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  933.730366][T30718]  ? aa_sock_opt_perm+0xff/0x1a0
[  933.730398][T30718]  ? sock_common_setsockopt+0x36/0xc0
[  933.730426][T30718]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  933.730457][T30718]  do_sock_setsockopt+0x17c/0x1b0
[  933.730495][T30718]  __x64_sys_setsockopt+0x13d/0x1b0
[  933.730530][T30718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.730555][T30718]  do_syscall_64+0x15f/0xf80
[  933.730584][T30718]  ? clear_bhb_loop+0x40/0x90
[  933.730612][T30718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.730647][T30718] RIP: 0033:0x7f537a39c819
[  933.730669][T30718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  933.730689][T30718] RSP: 002b:00007f537b28a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  933.730714][T30718] RAX: ffffffffffffffda RBX: 00007f537a615fa0 RCX: 00007f537a39c819
[  933.730731][T30718] RDX: 00000000000000d3 RSI: 0000000000000029 RDI: 0000000000000003
[  933.730744][T30718] RBP: 00007f537b28a090 R08: 000000000000005c R09: 0000000000000000
[  933.730757][T30718] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  933.730771][T30718] R13: 00007f537a616038 R14: 00007f537a615fa0 R15: 00007ffde68a38b8
[  933.730808][T30718]  </TASK>
[  933.792019][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms
[  933.879269][T30723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6587'.
[  933.883049][    C1] lec:lec_tx_timeout: lec0
[  933.889897][T30723] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6587'.
[  933.914546][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  934.022848][T30720] netlink: 'syz.3.6585': attribute type 9 has an invalid length.
[  934.127461][T30723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6587'.
[  934.555948][T30740] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6593'.
[  934.707869][T30749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6594'.
[  934.750315][T30751] tipc: Started in network mode
[  934.755352][T30751] tipc: Node identity 2e06220ccfa4, cluster identity 4711
[  934.762656][T30751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  939.804707][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms
[  939.812820][    C1] lec:lec_tx_timeout: lec0
[  962.588032][T23890] tipc: Node number set to 3785499148
[ 1025.801827][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[ 1030.838891][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms
[ 1030.847019][    C1] lec:lec_tx_timeout: lec0
[ 1059.217015][ T1301] lec:lec_start_xmit: lec0:No lecd attached
[ 1064.762958][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms
[ 1064.771091][    C1] lec:lec_tx_timeout: lec0
[ 1113.142882][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1113.149905][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5489/1:b..l
[ 1113.158444][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=165041, q=1501 ncpus=2)
[ 1113.166391][    C0] task:dhcpcd          state:R  running task     stack:20984 pid:5489  tgid:5489  ppid:5488   task_flags:0x400140 flags:0x00080000
[ 1113.181303][    C0] Call Trace:
[ 1113.184633][    C0]  <TASK>
[ 1113.187616][    C0]  __schedule+0x17b4/0x5680
[ 1113.192167][    C0]  ? is_bpf_text_address+0x292/0x2b0
[ 1113.197552][    C0]  ? __kernel_text_address+0xd/0x30
[ 1113.202832][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1113.209064][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1113.214155][    C0]  ? __pfx___schedule+0x10/0x10
[ 1113.219082][    C0]  preempt_schedule_irq+0x4d/0xa0
[ 1113.224189][    C0]  irqentry_exit+0x14f/0x730
[ 1113.228833][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1113.233912][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1113.239944][    C0] RIP: 0010:deref_stack_reg+0x91/0x230
[ 1113.245447][    C0] Code: 00 00 74 16 4c 89 f7 e8 2d 9e ba 00 4c 8b 04 24 48 be 00 00 00 00 00 fc ff df 4c 89 74 24 08 4d 8b 77 10 4c 89 fd 48 c1 ed 03 <0f> b6 44 35 00 84 c0 0f 85 3c 01 00 00 41 83 3f 00 0f 95 c0 4c 39
[ 1113.265104][    C0] RSP: 0018:ffffc900026870e0 EFLAGS: 00000a06
[ 1113.271249][    C0] RAX: fffffffffffffff0 RBX: ffffc90002680000 RCX: 0000000000000000
[ 1113.279260][    C0] RDX: ffffc90002687248 RSI: dffffc0000000000 RDI: ffffc90002687208
[ 1113.287281][    C0] RBP: 1ffff920004d0e41 R08: ffffc900026875d0 R09: 0000000000000000
[ 1113.295307][    C0] R10: ffffc90002687258 R11: fffff520004d0e4d R12: 1ffff920004d0e42
[ 1113.303323][    C0] R13: 1ffff920004d0e43 R14: ffffc90002688000 R15: ffffc90002687208
[ 1113.311372][    C0]  unwind_next_frame+0x19d5/0x2550
[ 1113.316541][    C0]  ? unwind_next_frame+0xa6/0x2550
[ 1113.321702][    C0]  ? __slab_free+0x263/0x2b0
[ 1113.326372][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1113.332573][    C0]  arch_stack_walk+0x11b/0x150
[ 1113.337392][    C0]  ? qlist_free_all+0x97/0x100
[ 1113.342209][    C0]  stack_trace_save+0xa9/0x100
[ 1113.347014][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1113.352445][    C0]  save_stack+0x122/0x230
[ 1113.356850][    C0]  ? __pfx_save_stack+0x10/0x10
[ 1113.361756][    C0]  ? __free_frozen_pages+0xc2b/0xdb0
[ 1113.367097][    C0]  ? __slab_free+0x263/0x2b0
[ 1113.371843][    C0]  ? page_ext_put+0x97/0xc0
[ 1113.376411][    C0]  __reset_page_owner+0x71/0x1f0
[ 1113.381437][    C0]  __free_frozen_pages+0xc2b/0xdb0
[ 1113.386625][    C0]  __slab_free+0x263/0x2b0
[ 1113.391109][    C0]  ? qlist_free_all+0x8c/0x100
[ 1113.395953][    C0]  qlist_free_all+0x97/0x100
[ 1113.400596][    C0]  ? anon_vma_fork+0x14d/0x570
[ 1113.405419][    C0]  kasan_quarantine_reduce+0x148/0x160
[ 1113.410933][    C0]  __kasan_slab_alloc+0x22/0x80
[ 1113.415826][    C0]  kmem_cache_alloc_noprof+0x2bc/0x650
[ 1113.421349][    C0]  ? anon_vma_fork+0x14d/0x570
[ 1113.426160][    C0]  ? kmem_cache_alloc_noprof+0x15a/0x650
[ 1113.431851][    C0]  anon_vma_fork+0x14d/0x570
[ 1113.436505][    C0]  dup_mmap+0x991/0x1d90
[ 1113.440830][    C0]  ? __pfx_dup_mmap+0x10/0x10
[ 1113.445570][    C0]  ? copy_mm+0x130/0x4a0
[ 1113.449870][    C0]  ? copy_mm+0x130/0x4a0
[ 1113.454170][    C0]  copy_mm+0x13b/0x4a0
[ 1113.458288][    C0]  copy_process+0x1f1c/0x4450
[ 1113.463204][    C0]  ? copy_process+0xd87/0x4450
[ 1113.468034][    C0]  ? __pfx_copy_process+0x10/0x10
[ 1113.473128][    C0]  kernel_clone+0x284/0x8f0
[ 1113.477697][    C0]  ? __pfx_kernel_clone+0x10/0x10
[ 1113.482804][    C0]  __x64_sys_clone+0x1b6/0x230
[ 1113.487633][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[ 1113.492978][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1113.497833][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1113.503954][    C0]  do_syscall_64+0x15f/0xf80
[ 1113.508616][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1113.513695][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1113.518425][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1113.524361][    C0] RIP: 0033:0x7f6516314636
[ 1113.528833][    C0] RSP: 002b:00007ffea8090330 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1113.537290][    C0] RAX: ffffffffffffffda RBX: 00007ffea8090338 RCX: 00007f6516314636
[ 1113.545304][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1113.553333][    C0] RBP: 00007ffea80b0880 R08: 0000000000000000 R09: 0000000000000001
[ 1113.561344][    C0] R10: 00007f6516240a50 R11: 0000000000000246 R12: 00007ffea8090470
[ 1113.569349][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000557d366a3ac0
[ 1113.577392][    C0]  </TASK>
[ 1113.580456][    C0] rcu: rcu_preempt kthread starved for 3245 jiffies! g165041 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1113.591687][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1113.601740][    C0] rcu: RCU grace-period kthread stack dump:
[ 1113.607674][    C0] task:rcu_preempt     state:R  running task     stack:27544 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1113.621303][    C0] Call Trace:
[ 1113.624621][    C0]  <TASK>
[ 1113.627613][    C0]  __schedule+0x17b4/0x5680
[ 1113.632159][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1113.637183][    C0]  ? __pfx___schedule+0x10/0x10
[ 1113.642089][    C0]  ? schedule+0x90/0x360
[ 1113.646388][    C0]  schedule+0x164/0x360
[ 1113.650588][    C0]  schedule_timeout+0x158/0x2c0
[ 1113.655492][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1113.660928][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1113.666259][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1113.672112][    C0]  ? prepare_to_swait_event+0x340/0x370
[ 1113.677829][    C0]  rcu_gp_fqs_loop+0x312/0x11d0
[ 1113.682743][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1113.687992][    C0]  ? rcu_gp_init+0x1315/0x15b0
[ 1113.692811][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[ 1113.699011][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1113.704358][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1113.709662][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1113.715523][    C0]  rcu_gp_kthread+0x9e/0x2b0
[ 1113.720164][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1113.725409][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1113.731389][    C0]  ? __kthread_parkme+0x7a/0x1f0
[ 1113.736411][    C0]  ? __kthread_parkme+0x19c/0x1f0
[ 1113.741496][    C0]  kthread+0x388/0x470
[ 1113.745611][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1113.750855][    C0]  ? __pfx_kthread+0x10/0x10
[ 1113.755486][    C0]  ret_from_fork+0x514/0xb70
[ 1113.760131][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1113.765292][    C0]  ? __switch_to+0xc79/0x1410
[ 1113.770013][    C0]  ? __pfx_kthread+0x10/0x10
[ 1113.774648][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1113.779485][    C0]  </TASK>
[ 1113.782538][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1113.788901][    C0] CPU: 0 UID: 0 PID: 30031 Comm: kworker/0:21 Not tainted syzkaller #0 PREEMPT(full) 
[ 1113.798592][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1113.808701][    C0] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker
[ 1113.815273][    C0] RIP: 0010:stack_trace_consume_entry+0x51/0x280
[ 1113.821649][    C0] Code: 0f b6 44 15 00 84 c0 0f 85 09 01 00 00 44 8b 4f 10 4c 8d 77 08 4d 89 f5 49 c1 ed 03 41 0f b6 44 15 00 84 c0 0f 85 22 01 00 00 <45> 3b 0e 73 3a 48 8d 5f 0c 49 89 df 49 c1 ef 03 41 0f b6 04 17 84
[ 1113.841352][    C0] RSP: 0018:ffffc90000006ed8 EFLAGS: 00000246
[ 1113.847469][    C0] RAX: 0000000000000000 RBX: ffffc90000006fe0 RCX: 0000000080000100
[ 1113.855480][    C0] RDX: dffffc0000000000 RSI: ffffffff89775213 RDI: ffffc90000006fe0
[ 1113.863492][    C0] RBP: 1ffff92000000dfe R08: ffffc90000006ff0 R09: 0000000000000004
[ 1113.871515][    C0] R10: ffffc90000006f78 R11: ffffffff81b0a9b0 R12: ffff888036b05c40
[ 1113.879531][    C0] R13: 1ffff92000000dfd R14: ffffc90000006fe8 R15: ffffc90000006f28
[ 1113.887539][    C0] FS:  0000000000000000(0000) GS:ffff888125245000(0000) knlGS:0000000000000000
[ 1113.896507][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1113.903128][    C0] CR2: 00007f97a500dff8 CR3: 000000000e74a000 CR4: 00000000003526f0
[ 1113.911148][    C0] Call Trace:
[ 1113.914469][    C0]  <IRQ>
[ 1113.917342][    C0]  ? skb_release_data+0x6c3/0x8f0
[ 1113.922423][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1113.928638][    C0]  arch_stack_walk+0x10f/0x150
[ 1113.933454][    C0]  ? skb_release_data+0x6c3/0x8f0
[ 1113.938544][    C0]  stack_trace_save+0xa9/0x100
[ 1113.943371][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1113.948884][    C0]  kasan_save_track+0x3e/0x80
[ 1113.953639][    C0]  ? kasan_save_track+0x3e/0x80
[ 1113.958532][    C0]  ? kasan_save_free_info+0x46/0x50
[ 1113.963777][    C0]  ? __kasan_slab_free+0x5c/0x80
[ 1113.968762][    C0]  ? kfree+0x1c1/0x620
[ 1113.972928][    C0]  kasan_save_free_info+0x46/0x50
[ 1113.977991][    C0]  __kasan_slab_free+0x5c/0x80
[ 1113.982825][    C0]  kfree+0x1c1/0x620
[ 1113.986783][    C0]  ? skb_release_data+0x6c3/0x8f0
[ 1113.991859][    C0]  skb_release_data+0x6c3/0x8f0
[ 1113.996773][    C0]  __kfree_skb+0x5d/0x210
[ 1114.001148][    C0]  nft_synproxy_eval_v4+0x352/0x4e0
[ 1114.006388][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[ 1114.012147][    C0]  ? nf_ip_checksum+0x13c/0x510
[ 1114.017049][    C0]  nft_synproxy_do_eval+0x305/0x580
[ 1114.022294][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1114.028073][    C0]  nft_do_chain+0x467/0x19f0
[ 1114.032718][    C0]  ? chacha_permute+0x4e6/0xf00
[ 1114.037647][    C0]  ? unwind_next_frame+0xa6/0x2550
[ 1114.042799][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[ 1114.047911][    C0]  ? ipt_do_table+0x2b2/0x1630
[ 1114.052762][    C0]  ? nf_nat_inet_fn+0x95b/0xbf0
[ 1114.057677][    C0]  nft_do_chain_inet+0x360/0x4b0
[ 1114.062675][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1114.068188][    C0]  ? ipt_do_table+0x2b2/0x1630
[ 1114.073000][    C0]  ? nf_nat_ipv4_local_in+0x223/0x720
[ 1114.078435][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1114.083953][    C0]  nf_hook_slow+0xc5/0x220
[ 1114.088420][    C0]  NF_HOOK+0x21f/0x3c0
[ 1114.092556][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1114.098585][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1114.102796][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1114.107436][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[ 1114.112815][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1114.118853][    C0]  ? ip_local_deliver+0x12a/0x1b0
[ 1114.123930][    C0]  NF_HOOK+0x336/0x3c0
[ 1114.128051][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1114.133248][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1114.137451][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1114.142099][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1114.147271][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1114.151833][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1114.156394][    C0]  ? process_backlog+0x3eb/0x1950
[ 1114.161471][    C0]  process_backlog+0xaa3/0x1950
[ 1114.166416][    C0]  __napi_poll+0xae/0x340
[ 1114.170802][    C0]  ? skb_defer_free_flush+0x233/0x260
[ 1114.176231][    C0]  net_rx_action+0x627/0xf70
[ 1114.180885][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1114.186068][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[ 1114.191239][    C0]  ? try_to_wake_up+0x7f2/0x1380
[ 1114.196229][    C0]  handle_softirqs+0x22a/0x840
[ 1114.201050][    C0]  ? do_softirq+0x76/0xd0
[ 1114.205437][    C0]  ? wg_packet_encrypt_worker+0x2d2/0x1740
[ 1114.211289][    C0]  do_softirq+0x76/0xd0
[ 1114.215490][    C0]  </IRQ>
[ 1114.218512][    C0]  <TASK>
[ 1114.221492][    C0]  __local_bh_enable_ip+0xf8/0x130
[ 1114.226665][    C0]  wg_packet_encrypt_worker+0x2d2/0x1740
[ 1114.232406][    C0]  ? __pfx_wg_packet_encrypt_worker+0x10/0x10
[ 1114.238653][    C0]  ? process_scheduled_works+0xa70/0x1860
[ 1114.244424][    C0]  ? process_scheduled_works+0xa70/0x1860
[ 1114.250214][    C0]  ? process_scheduled_works+0xa70/0x1860
[ 1114.255974][    C0]  ? process_scheduled_works+0xa70/0x1860
[ 1114.261752][    C0]  process_scheduled_works+0xb5d/0x1860
[ 1114.267467][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1114.273548][    C0]  ? assign_work+0x3d5/0x5e0
[ 1114.278207][    C0]  worker_thread+0xa53/0xfc0
[ 1114.282877][    C0]  kthread+0x388/0x470
[ 1114.287001][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1114.292156][    C0]  ? __pfx_kthread+0x10/0x10
[ 1114.296794][    C0]  ret_from_fork+0x514/0xb70
[ 1114.301441][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1114.306603][    C0]  ? __switch_to+0xc79/0x1410
[ 1114.311334][    C0]  ? __pfx_kthread+0x10/0x10
[ 1114.315969][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1114.320811][    C0]  </TASK>