last executing test programs:

4.144045987s ago: executing program 4 (id=2106):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
close(0x3) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async, rerun: 64)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) (async, rerun: 32)
write(r1, &(0x7f0000000000)="1c0000", 0x4000) (rerun: 32)

4.001697967s ago: executing program 4 (id=2109):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x228, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1f2, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {}, {0x0, 0x4, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e"}]}}}}}}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r1])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
r3 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x61d8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

3.776578688s ago: executing program 1 (id=2113):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec6138ced26654e47f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae974dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec54", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0xe0}], 0x1}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
listen(0xffffffffffffffff, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x800)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00')

3.296888228s ago: executing program 1 (id=2121):
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
socket(0x2, 0x3, 0xff)
r0 = socket(0x2a, 0x2, 0xfffffffe)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x40800)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x100, 0x70b92b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0xfff1, 0xffea}, {0x10, 0xd}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001580)=@newtfilter={0x4c, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0xfff3}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x652f}, @TCA_FLOW_XOR={0x8, 0x7, 0xfe}]}}]}, 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0060000", @ANYRES16=r4, @ANYBLOB="00032bbd7000fcdbdf25010000005c000c800c000b800800090050320b200c000b800800090079462e1d14000b80080009007bb9f73e08000a0095fe00002c000b8008000900e4eda06508000a004e4c00000800090024857c3f08000a00590000000800090015b37b7d"], 0x70}, 0x1, 0x0, 0x0, 0x2400c041}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.095672033s ago: executing program 1 (id=2122):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
read(r0, &(0x7f00000017c0)=""/4090, 0xffa)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r6}, 0x18)
connect$can_j1939(r3, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x10}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000400)={@loopback, @multicast2, @local}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r9=>0x0})
bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
ioctl$BTRFS_IOC_ADD_DEV(r10, 0x5000940a, &(0x7f00000027c0)={{r1}, "c171ef7fa07265c2f5b5de0ab5529fb663863b93a4e4ae9732cf3f059c78a8ab5dff8f78fce3714200fb01756a9f8d31c3a332647157d70cfecca697a5b6aab8bf59a2ac6eb37f35d2063bd70853b458f1f6b1ff4d19f043192eece2527e058a755e27b3b4fd409d7293f2e9ef6dba1d593de44c6bb5a21486f00f6a555509f9462b0c1caf7ceea6bc2d8bbefcc78e767230f077794b288534bab9071c65da01c0d59589e43fab2f27b313f8360c8016ae2942cf686ab3b7783d935795a693b731289c6f8316b619f7b4fb14f3a23a99b198985ade14b0e54ceb8ba72be621abcb592a9052931aa4faeb1178effbe975791e3253ff9c70f0f7729525c84f1a3377382581ad2008a527fe060ab07071e70f01274fd64226893ccb0fee530d61e6f7167aac50d8be6233e019cf70a51c8a4902650be2b48e009da0cc171926f2dd937335ea076e5ad48fe7a379b60c504341964d6f187f106a8eb66315a188377d5bd2343ffbad3ffd54b63c68afa1393d55fd48bfecd940ac530af86ef7505ce72a12da1efbba0f6b9ad5ce90eae509a03a793b8405d0b8f419b233cccc285e3b54daba662d2db25217b5734f26f21d89b5dfeea3db763ad89193487d5d9afb2ce2fa015a38d16f6b4424ce2738916bac2d393d9894ca45dff66fac64ea4ddece8410f6ee2e515fb26cb58c45daa49f182c1059502f1abeac7c1163eff2cad98b7f327ed1a30d54698394fd098f4b2b108d4bad23a785f7253c4f7638da097a3ca9524e84d58388fafd77cfab5b16de905574b9cc8b9fd828b749d5f3b80031508571874b5fc28ff1b3991b87fa88398cee8ef7da58f42f3192a5b2bf2b016c11b53115eee17e4205206cc11967413e9a039765d823aa4572cc93bbd9e1574c973de57545a25e1c40a7557f630d8581208a5c764c76d3c70e37406c7446959dc8fadd25aa3785068bfb54893c208181503105d907801d71cb810497c5ce2c7d92e8dc92a3a11c13ad6c837d38ea18b7546ac6466c0fdbe5f65b548f247c418bb1d83a56ec148370020d822da92c78c450ff75876f3957d7936d25bda8aab4a65fedc2993d8fda4ae6608f0a9afc73e187b5c201e73b57c5cca717ec93b023035c3829bb30395d9fefd938646ada14a32cd541ad2c998569d5e5881ffb917cc2aae980040c5fa643d313c9c1c4eea176ab6fb7c586e8d0b2876449bfe4d715bbb1c41310a4fb619a563098af63309de97c13dc81ec3008087ed12f5b1527c92735b07e43b6b0e10d7953e6632b7efde29599a2f058f9305fb9e0736d9989ff621493bf477dbbd1a756f5dbb9228097d9df5e484c3d2a47f094415f6a2ac457fedc226544d4b5c01ac581be6c47660869d390309c7f7de1c866b764f2748847ffe26644e542261f467fcb2ae57a0a85e2c52a14be5bbdcd788ab4414efad18bb3192ab9dcb59deba9ee49e075e39bc83e5b3fdc6675b3c9b3db7aa90c6734f7a0c381b61d3ab8abc309f1763f24241bcf309676c250fa7f3d955e869d4eb8b9e3283ccb30db7ef838d58b72cef99f3194eeba42d034271e52c0e477b8b48fc82df5ddee8869943c3a361c62524f30022548fc7237b72af286d7a5a7d1896daad993ce6161566fb90205f6a1dbb62b05597daa6a4bcf558909c5c228da1b2caf4e670620ee501b89221253fcfb6722c28c50a38a9aa072ea033afba89ae524eda98e1173362ebb6c4d10010278d16b03f20273883e677efa32e7593d974d9eb29fa7b805753fdd992270bc37c7fffa0a67893fdd915c15ee2d7ebf389e2c0fa84edda24fbff6e1c35873df3d7d6f7b53dbe51f03c05cd20eb72af3e1a6430f195b2637d1800791c6761f5ff7e1f780ec4b0a8ac8222d169ea11f5e819abb66afcca86bed63d6d46b814b188c2fcac77d09e29dc43b6932558ca5fa481b78ae459182b154805f0e7105b34fee11b427704fe2b8dfd5c4c05909e14e08f50372335f5e72b7a27014c9e2600f0a11ac9e10d6afd57b8dfadcd88ee88e159c6d32edaf42fdaf76ab75995c1d8e84ecc8bda25bbd1fcba7d621ce10875c13e0d27ddd735064b32f95020d4033d2ab0bca830e69bc6b925f6736c3eb1f405c189f9b9339a381b73fef498c7485cebc69154b80483849a95d6f703c5302e329d151ff5d1ffb49875b4c2dbd442359795a1fc3e888ac25ee8de93ed1589ad2496841c77a2ffe4a63d8751dedd439e85f280d4c79eceb57d451fde95a2d2e84516c6a3e7fcfb24f6f0b494c5d1d6d4944fba5414875f7bc2a4820a44cf6368c668701557b96349b7979d855dc44d6866f2cb741eca0d05f17c93429c14d7f5c5c5646acc734d198d51a8e708463fb588d2d1a1e4264f6d434089df0525f40e6ad59ca658138127a05570bf315ad1a5b5c0f3c9ec7dc6a85cee39ec9c85a419547387c90eb9839aba7343c125c052ce9af6211d4a22670c29b6a598889e4e6daa43579745ca1381dcde9cf2039c9e2c01b1243a5f410e30dcd869578535137ada8d896c599e84e5938f979f8934fa7fedf90f3148badc285e327ce3731f73fccf45f7f0c6c77991f5c1c49568be2599d4b1bd344b97da38789cb57704fd52d7680adc6bfeb20a4f1cd142e960bcae9664c516674a6090e90e0cb20377adbdda5e8700b4d8f2517477b202ae4fdc0d57309d602543160b5375bd64ce70c0637b72cb33bd09d12d8a2df1e5bfaa0e1ac773d54d633f8d2be99bb02302d11a3c27cf24993caebeacfe3370bdc09729d77cd167720476f63d6d6b66f896080baa86276d5bd8130498dbe062ef20fcf7ba930a7fc5fede0cd5019816cf5951c3e5334deb2d54433009928650c7f226ae9f3f0ec50d38a4a0c77b4abc8c5a8af2157f75c89453155370e938478fc2ed571dfbb9a7196392156071a010e1b47091aacbadfb10ed188dc1276b5782adb7764caebd8bee28d7629e32b7fc3530c42aa22b6b5ebb6667d5cfe5ac67815e3e4d5a4eadf95f84708246a4d4f3c846bea0dae12389d51c393a15295eb2df9de7b9e3557000734f3d63c4b05d4645efb3c97931fdc4b9d7c8430ab1910d0f33abb45ef96df39ffb5bc886aadf3dc08b628ce65fee3a8935602aa212da4044f8e4a7eec0678988bdb3fe3a6f92b58af28ffa829de5417cd9bdea3fe4f4f8fc466a45640178e2e16aa2200a9a5883a57b35d4ed80686eda82721b166263310dc79f91796e062f9d017a829d5ce3003fcd182abcfa149b6b654c25d877d0bb7bbda56c97cb30798270c0ebfbddc772242c489170727f4170281d15a02af4f3d21774c35035b1df185b0f8f89faee00e00b3bf5e3f6e2051333f2faf47b0144fe48cd5246b3ec9f991ab77616acce15bf169341b834dc2765b922f567ea247c83518bb910c8da32bb2dd71552735bdb9642ad5bb6a29b77f14a06b6f5ba7221dbbeadd9634de3baf8f56fa27b834e56740430fe9bc6f44a6f9ebd6617a37c1227313801235b2504a1c395f113a01f9c53bca6a2824d47683e51b01562a2119563cace9d51c33b4576cfffb94db5a269b76d16ddb0d6ccacafeb3bdfba388c4e435f7950ac5165b5d21a0f9df4b2229643dee1dbb94892af5c3bc01770c0cd90d0c6e6ff978e6196afe25b899333dec95183b95fe2cf388c51a58569c7ec30a6a3211403347ae235404e24f2273841b45d33db69f6ae20df335b9b1922004ba60316b9cb34e2bbef3db7d4ba664f278daf793ae2d1cc8c70e2ae6e285f5ee44dd8ac7da14d71ebe58af7ce9367180b0620f3e32674cec3eb1fd3aba84cbddaee795db8f9fa642e8990c8bca4e9bdb6b762afd94004ce9caf1160db3f8827eadfa4a2518b4d39c053ded011040aeca73468e5e202f246d50a20eafdbb2a6262ef3a3b7689f8024dcaa77bc574c5cff86785178447cf4f87e51d3f030a6aeeb2b19d632175c72eda6ca7fbb3c27a89765cc9a5dc6fb08a9beeeb4234b1a0def2679f2886d09c20c21b5d1039fa771386589350b1799d7cdfee606ddc9b7e983ccb1fcbc92d616bb229f6f3d58ff4207fd621d8f601839ce9ccc7b2594b648a794f8bfcc554c80ccdbde0adde386605107b732b4166c5498e274489edbd32370a934b54d5c2be02460ef1b39a69f616d1187a213dee13bcb35c0da80d7ece5c1bdd2da5c7435c26addc462f5325932acecaf9b543ace0ec7931bd93c3a11feb02b4f030022003e15e25b9c8d6f1ec464da9e637f419c01961261cf1d588fe3f692a95e4aef2dbcc8980280800503e764e0921d7973d3c937a3f14be22bb3f47f1c42622f0e785b2fa80ea8ce18e8db93536b5ce51bd4ccb7939fb5561db75e6ab9d9df1a6ffbad59f4da281334861c06b562435cb191de398f07d0d259c9c98a8fa1361fe033cc8c246ae60271a4110f1f43826998a043e08521532c39fc8806eb325ab399262f942cbd6c7505dfd8710cd1e7dc88e9d6aac19f9a0c55f093395e1326a1ad8f526d03e09a00370f101005c1704a4c891f69e97b4772d625636cd74399e34626905f1f39a329a34b700106900f90fbde18d05d127e1487535eed0c1d1a370789facdba6f9925e29e04778a22e3b12d3fc805240d417f13640c094165653e9418babfefc1deb954c90f9459a2e790b23c19fb7a963c3a05d1e0964c756ead191a15b2d1b07c1630c78e60f54740f7305b622521be1b5cc69b67888e9e91759aef70d2f481a0c696cb81d1b1483700499469fdfc028a03c5dbad4af9591aacfc31b6bae406c3281fb6c85003e1197a9bd42b4adef85b16a91f903c28f5759ac60b8de9ab05dc8f53e293eed2868f20aea2cfed83e0e0b89012cfffebff5a54e64bf6f75f93a239b4c628f8c3941f3d3a855c515409be63b82092dcc1027e02206244410858b9a072182c60cef5d3f9fb80f42c2b9b5f38dfebf204fac55d65dd7cabf4ae68f0619ae7a566a53ed230a45c21dd42030d74f8060eaeab407040dc0d6329f54047e81f74d11e91e4794420d0e4f080c942b5a53a8acc6633fe5bc675a6f7bfdc8b6f94377ecc45e7c9a87c27e1a9cdabedb7272f77b9b0f84762f76e704480bd4c8a7a8bff4127f21dd2129b858333c49ef9557ac2147b0f92262d065d02007c839006ad3f8ddd17d38d7fc6685aab2fe8efdb1436e592651028f2f704d35986c674fe84b3e3a885db916e92c22088615bf947b14c4dc7b2a1ff1c5bfbc3c8abf4153eac1985612e5b0be6c48485ff3065fc037d51b899f9b4ff71071180bb3a0b2f08ca2fb21f446b17a26343ca625b84f29cfa1e189328a86c1f2b1521ea98106417b85dfed6e1a2e64eb3266d93487446512e21047acbe07fbff7ca25bedc034583091714701b8abcc9fb764ca43cb21d0d82e0a9612ac7bf6ab12f032a24f3e500153c915d76c4fa3ade45030a3ef013c3f3258aea601fd13176f49c1867d0d0562ca602dc93aa74a2bf749552c23d5fef879541a68c30b2eacc5b7444127df3c2640f1bb762a044624701d7983db78862e6448c024bc4eca895783a0b284619b669742b2cd25c4083551c259274e38d0f650d418139fb7580de65b6a22927f2c5c883fd96feb2eb948659f8c653afb9f1ebf713de7bdb583d9c7f688cc35885b3ccce5499b3734fd49c51ef781751b44f990658a895de31222f4deed03febd8d430e8f19e2349560eef189801cb50a177e7b748fd3136883144ab86003682280d7a27e49899091a051b481e2e7c40bc6516e5d816ef1eab1e0e3d7ea45edd24353ae3ae9e3524c3405fdd"})
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r9, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

2.872536361s ago: executing program 3 (id=2126):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0)
r8 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r10, &(0x7f00000005c0)={&(0x7f0000000180), 0x1, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000000000000800000000220000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000006e03ff95"], 0x48}, 0x2}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40)

2.678578314s ago: executing program 0 (id=2128):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xe}]}}}]}, 0x3c}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x20, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6f5}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0xff, 0xc, 0x3, 0xcc, 0xff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x56, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x101, 0x1ff}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0xffffffffffffffff, r4], &(0x7f0000000440)=[{0x4, 0x3, 0xa, 0x9}, {0x1, 0x1, 0x8, 0xd}, {0x4, 0x5, 0x7, 0xf}, {0x1, 0x2, 0x7, 0xa}, {0x0, 0x3, 0xb, 0x3}, {0x0, 0x2, 0xf, 0x4}], 0x10, 0x7f}, 0x94)

2.516238966s ago: executing program 4 (id=2129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/159, 0x9f}, {0x0}], 0x4}}], 0x2, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2)
sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f35c25bd7000fedbdf251600000008000300", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000080)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x80800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a801400"], 0x78}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

2.423400247s ago: executing program 3 (id=2131):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0xffe}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0)

2.420985721s ago: executing program 0 (id=2132):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c010}, 0xc004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000880)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/155, 0x9b}], 0x3, 0x400, 0x8000)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x24}}, 0x8005)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r1, 0xe987c000)
ioctl$int_out(r1, 0x0, &(0x7f0000000640))
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000680)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000006c0)=0x28)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r1)
sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x8c, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x5}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40084)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%+9llu \x00'}, 0x20)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000009c0)=@o_path={&(0x7f00000008c0)='./file0\x00', r5, 0x4000, r2}, 0x18)
close(r1)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)=0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a80)={'wg1\x00'})
socket$kcm(0x29, 0x5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x118, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb92}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xdcd0}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x378}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x87d5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7726}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7c80}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r6)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000e40)='cpuacct.usage_user\x00', 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, 0x1412, 0x2, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000fc0)=0x1)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r6)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r9, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x1c0c0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x40000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'veth1_virt_wifi\x00'})

2.341884934s ago: executing program 4 (id=2133):
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)="33429ab8305cafbec72631f9ed45fc4a6870c1d57385680943c2fd295ad08ad386bc9b68a134c98e329dc56f59738c8d9890657d8ead655581e674fa8136e62014101fe5e1a4476719d1b0bbca8ae23fd6697923bccb1947f2d77c213e262a8ad08715bc0dc07833666bb4", 0x0}, 0x20)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) (async)
close(r1) (async, rerun: 64)
socket(0x10, 0x3, 0x0) (rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0xc) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x24a46, 0x601}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c6) (rerun: 32)

2.246525408s ago: executing program 0 (id=2135):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000006c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2caa000000000000711012000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
setsockopt$WPAN_SECURITY(r1, 0x0, 0x21, 0x0, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40042}, [@IFLA_IFALIASn={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x38}}, 0x8000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) (async)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000f33bdc97a8d29ebcae76e05f43000000", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800a500000000000400a6804000a6800a00060008021100000100000a0006000844da00000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000800a50001"], 0x7c}, 0x1, 0x0, 0x0, 0x48048}, 0x44001)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8)
sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x44, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfffffffc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x44}}, 0x0) (async)
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)={0x74, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x1, 0xff, 0xffff, 0x6}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) (async)
r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r11)
bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r11}, 0x8)
write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001001100fe88a4"], 0xfdef)

2.245627659s ago: executing program 3 (id=2136):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x1bd, 0x9ffffd}) (async)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x1bd, 0x9ffffd})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x0)
r5 = socket(0x10, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x24}}, 0x0)

2.079841472s ago: executing program 2 (id=2138):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x150, 0x1a, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x4, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x3501, 0xa, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x150, 0x1a, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x4, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x32}, @in=@loopback, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x3501, 0xa, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) (async)
sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffec9, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x230, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000004480), 0x10)
connect$inet6(r9, &(0x7f0000004980)={0xa, 0x4e23, 0x6, @private0, 0x7fff}, 0x1c) (async)
connect$inet6(r9, &(0x7f0000004980)={0xa, 0x4e23, 0x6, @private0, 0x7fff}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x1, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFCTH_TUPLE={0xc8, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x1, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFCTH_TUPLE={0xc8, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001280), 0x2, 0x0) (async)
r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001280), 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f00000012c0)={[{0x2d, 'cpu'}]}, 0x5)
r12 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r12, 0x113, 0x4, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008881}, 0x0)

2.072562953s ago: executing program 3 (id=2139):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x29d, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x267, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0xe, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e2718"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "b8a3e100906e61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015c883747357a027450004000000"}, {}, {0x0, 0x4, "d5170000dce9674a36da018dff16e7ff6f50ca0ee2ebcac4da3574ab0b8f14c4b7a94fe18e"}]}}}}}}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r1])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
r3 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x61d8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.995887827s ago: executing program 1 (id=2140):
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

1.792895838s ago: executing program 0 (id=2141):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@bridge_setlink={0x17, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES]}, 0x2c}}, 0x0)
getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000030000004b00000008000300", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000000)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800)

1.79251018s ago: executing program 2 (id=2142):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000200)=@updpolicy={0x27c, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x7}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x8000}, [@tmpl={0x1c4, 0x5, [{{@in=@loopback}, 0x0, @in=@broadcast}, {{@in6=@mcast2}, 0x0, @in=@dev}, {{@in=@multicast2}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x12f}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in6=@dev}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@loopback}, {{}, 0x0, @in6=@rand_addr=' \x01\x00'}, {{@in6=@dev}, 0x0, @in=@local}]}]}, 0x27c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.669187301s ago: executing program 1 (id=2143):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'team0\x00', {}, 0x2})
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=0xffffffffffffffff)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000140)={'veth1_to_team\x00'})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000200)=0x5)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x3, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c841}, 0x2000000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000380)=0x4, 0x4)
sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f00000003c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x101}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000400)="f131b5e5bf630a7fee158a4fe103d55900651643c2ba2a17b6d889c2cac810b9b20a494c51b019a49b7c2b245962313c30998655f2db8a80644aadb36178", 0x3e}, {&(0x7f0000000440)="0c93960c5dcf6d89f121ef51fac8ac87a29d149f8d356b0c70585461ce9d4b0c1d12b71638712048d00c417a659de4fdece85192bcd81a98af89ae8f218966144ec8b7b230066c268da7213250d63000fd96c0be73b4b7c9b51c41a697152559428d7b509340869c4cf117070eecdcef4aab", 0x72}, {&(0x7f00000004c0)="e7cc78e0c60c96f14f0c84598da1e737a9dc69d78702e8767f086d4c117e008d5a24bc8be140b78113c7b7827dc6ef43029f81db055226da7cc8954b3f971db0f2e52ae9943e3ce6dc55f89b013fde654ef1c5e78ef03e6a451c2360b83c29fd9e69b1dd62f6c79c17ca9250773214431b4ad2fc0c11a1cc56b5eebff31d267655c62c81d604ffa7b866e6278e15f94a4110ccd9d642", 0x96}, {&(0x7f0000000580)="66ef0ea1ca7be2dcacd6d3ee5962c542dca66987b66196f9a8af5940ca18c79180c9c065e6047ab8d4be2722133447114d42773c42af05435144c0ab1fcf75bd51df76cae466", 0x46}, {&(0x7f0000000600)="a8964d774678b92e4013e8a374765b162bad632733734952a27ecdaad7fa60210dd6b6aeb2d0c223a9bd35e7baef878836c6c50df394dd42d488566922be8d24e6a096f3d225b9cd821486f9f7e8ebec61165b985cd146fb925df676610a29eb0a2094857c82e8a9c3db41c872e4855dcd13c7a43547b9c7711f0e6ae2039de9ec1dc4197bc4c359f65a7466c6bbb505e5944a5a192dc62f59a90211260aa0773d4611cc2c730acf794002dbe06d38294460c4f638ab12a27ef8e27e7079b1e4530f331772c93d3898a4f3602e85", 0xce}, {&(0x7f0000000700)="6122d05c381f4341bdac49708cadaf80391c0b922980448b120cb7971e1e5451e94c7c76658441e6c9cc2f1e3985a89cf2730c970c872f5d730cd642356a32bfc9869f720e2440d0dd278730aae168878302c4f5d0bf556fb535e4e3491aa9f11a1730144fb5c010920ec8a392092038bf75552e7cfaf2909d3f0899292ab3b28dc2c843a955baca19d4446caca0b4a17d57012f71f7a03e1fd94709a191c538fb389b93685fd8f46ec4e65f5ab0fe3e931f5e9684543d21ffc0f6a28cdf07c07420", 0xc2}], 0x6}, 0x24004801)
ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f00000008c0)={0x80})
ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000000980)={0x0, 0x4b9771d7, @status={[0x7, 0x400, 0x9, 0xfffffffffffffff8, 0x7, 0x99b]}, [0x200, 0xd1ea, 0x6, 0x7, 0xfffffffffffffeff, 0x4, 0x9, 0x8e7, 0x10, 0x5, 0xb0e, 0x8, 0x7fff, 0xfff, 0x9, 0x40, 0xc5e2, 0x1, 0x7fa0, 0x9, 0x3, 0x6, 0xce69, 0x7, 0x9, 0x6, 0xb662, 0x189e, 0x0, 0x0, 0xa8, 0x3, 0x5, 0x2, 0x0, 0x6, 0x3, 0x80000000000, 0x40, 0xc, 0x6, 0x8, 0x2, 0x4, 0x5, 0x7, 0xcb2f, 0x4, 0xe7f9, 0x6, 0x4, 0xf33, 0x6, 0x7f8, 0x1, 0x75e, 0x80000001, 0xffffffffffffffd1, 0x0, 0x4, 0x7, 0x1, 0x8, 0x3]})
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000008, 0x810, r1, 0x0)
connect$inet6(r1, &(0x7f00000013c0)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r6)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0x4010, r4, 0x80000000)
sendto$inet(r2, &(0x7f0000001440)="b07b845b7d1a68466d4042e1a4b50f6fb4963813599dd4fd71ec428ca6a38969cbb33d8b770376b6e59582abc8b886629b7df45a9e0db15632ca89203f744f585660f6011f6b81d2118726e6e5", 0x4d, 0x35ce06c9cfdc00e1, &(0x7f00000014c0)={0x2, 0x4e24, @multicast2}, 0x10)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000001500)={0x0, 0x1, 0x2cbc, 0x0, 0x7ff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x68, r5, 0x501, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x50}}}}, [@key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbd78}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x81)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001840)={'team0\x00', <r8=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x10, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x3, 0x4, 0x8, 0x8, 0x10, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001700)='syzkaller\x00', 0x9, 0xcb, &(0x7f0000001740)=""/203, 0x41000, 0x3a, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001880)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000018c0)={0x1, 0x7, 0x43, 0xfffffffb}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001900)=[{0x4, 0x3, 0x3, 0x2}, {0x4, 0x3, 0x8, 0x1}, {0x0, 0x2, 0x9, 0xb}, {0x4, 0x2, 0x1, 0xa}, {0x0, 0x4, 0xc, 0xb}], 0x10, 0xa}, 0x94)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000001a40)=0x1, 0x4)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x10, 0x3f5, 0x4, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x10)

1.592102464s ago: executing program 2 (id=2144):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x3, {0x0, 0x0, 0x4}, 0x1}, 0x18)
read(r1, &(0x7f00000002c0)=""/199, 0xc7)

1.02415302s ago: executing program 3 (id=2145):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000300)=""/209, 0x0, 0xd1, 0x1}, 0x28)
r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES64=r5], 0x48}}, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000040), 0x4)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f00000000c0))
setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)

729.452846ms ago: executing program 2 (id=2146):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async)

612.120291ms ago: executing program 2 (id=2147):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}}, 0x4000000)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'macvlan0\x00', {}, 0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x10, 0x8})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x4a, 0x0, &(0x7f00000002c0))
syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500001c2000000000029078ac1e0001e00000011400060000000001"], 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x1a0, 0x30, 0x9, 0x0, 0x0, {}, [{0x18c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x100, 0x2, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x1a0}}, 0x0)

251.799141ms ago: executing program 1 (id=2148):
socket$kcm(0xa, 0x1, 0x106)
socket$netlink(0x10, 0x3, 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000700000000000000000800000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000300000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008900000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$key(0xf, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000200)=0x400, 0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000016000000080000007f00000000000000625e05b909e54ba2bc19cfda48d3220365e1cb21bc6ca960bd8ad5f972", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000380)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x0, 0xf0, 0x3}}, 0x18)
sendto$inet6(r3, &(0x7f0000000140)="46f8d3104456cb2b977845b82ff3cb12ccd5e8cbd638a05f0d35b547c3a081a6a8a2a496d823a70e55919241925faac2de382ac72f3039b6d97f2e078463ab4e7d0773854730a56a915c9590920d4d1ddac880f21ce73a33f3e468fe43178634d17c53ba3aff8cd0a180c656ccdaf85fc5d8f751039fb347c746371bfb3fbd21001a4e6f", 0x84, 0x44000, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000181000010000000000000000000000000a40000000060a010400000000000000000200050000000000000400000000000000796e7365740000180002800900010073797a3000000000080004400000000014000000110001000000000000000000"], 0x68}}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r5], 0x44}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))

241.28519ms ago: executing program 4 (id=2149):
r0 = socket(0x28, 0x5, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x38)
connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2711, @my=0x1}, 0x10)

139.861515ms ago: executing program 0 (id=2150):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800)

123.025953ms ago: executing program 3 (id=2151):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4243b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)

114.992521ms ago: executing program 0 (id=2152):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'gretap0\x00', <r0=>0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000130a01020000000000000000020000000900010073797a3000000000af8c7943d141df01fa4c37eb775aa1f12b0d9de737464f4444fb813a58f147a6e0e22fc8c9d5c6150180985bf0a79b1c1a28f5d869cd4910734f1a4ffc5dcc8382cfbdb0786b5e572d570a5b4e35741fe92e6da68fef7d54d6356cb7a97ad4735818933f6295d8ff563ae62405ff9507918bbab4"], 0x20}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r0, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=ANY=[@ANYBLOB="6400000010003904fcffd4b05e53acecc6dd0000", @ANYRES32=r4, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f00000108000d007f0000000800230002000000140014007665746830000000000000000000000008000400"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x845)

74.932205ms ago: executing program 2 (id=2153):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100)

0s ago: executing program 4 (id=2154):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @dev}})
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

0
[   89.548488][ T5990] Zero length message leads to an empty skb
[   89.558312][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.568349][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.755097][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.809421][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.817506][ T5999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.824959][ T5999] IPv6: NLM_F_CREATE should be set when creating new route
[   89.832228][ T5999] IPv6: NLM_F_CREATE should be set when creating new route
[   89.957504][ T6007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'.
[   89.989243][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.997102][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.047359][ T6010] netlink: 'syz.3.4': attribute type 33 has an invalid length.
[   90.142491][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   90.239932][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'.
[   90.252910][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'.
[   90.262802][ T5863] Bluetooth: hci0: command tx timeout
[   90.420158][ T5863] Bluetooth: hci1: command tx timeout
[   90.425915][ T5873] Bluetooth: hci3: command tx timeout
[   90.499082][ T5873] Bluetooth: hci2: command tx timeout
[   90.590291][ T5873] Bluetooth: hci4: command tx timeout
[   90.651539][ T6040] netlink: 64 bytes leftover after parsing attributes in process `syz.2.20'.
[   90.717163][ T6040] tipc: Started in network mode
[   90.729495][ T6040] tipc: Node identity 86accc6ef4b3, cluster identity 4711
[   90.761775][ T6040] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.821296][ T6046] syzkaller0: entered promiscuous mode
[   90.847733][ T6046] syzkaller0: entered allmulticast mode
[   90.933013][ T6051] Bluetooth: MGMT ver 1.23
[   90.951575][ T6046] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   91.002075][ T5950] IPVS: starting estimator thread 0...
[   91.017979][ T6038] tipc: Resetting bearer <eth:syzkaller0>
[   91.134135][ T6056] IPVS: using max 29 ests per chain, 69600 per kthread
[   91.166504][ T6038] tipc: Disabling bearer <eth:syzkaller0>
[   91.394914][ T6074] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET)
[   91.413016][ T6073] syzkaller0: entered promiscuous mode
[   91.441237][ T6073] syzkaller0: entered allmulticast mode
[   91.463405][ T6083] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.546228][ T6087] netlink: 'syz.2.30': attribute type 1 has an invalid length.
[   91.567520][ T6083] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.576743][ T6083] bond0: (slave bond1): Enslaving as an active interface with an up link
[   91.722297][  T983] cfg80211: failed to load regulatory.db
[   91.892192][ T6105] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.943041][ T6106] netlink: 'syz.2.35': attribute type 4 has an invalid length.
[   92.013359][ T6110] netlink: 'syz.2.35': attribute type 4 has an invalid length.
[   92.132786][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'.
[   92.425731][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.43'.
[   92.467414][ T6135] warning: `syz.1.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.480958][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'.
[   92.521566][ T6137] dummy0: entered promiscuous mode
[   92.528428][ T6137] batadv_slave_1: entered promiscuous mode
[   92.712058][ T6150] netlink: 'syz.2.49': attribute type 101 has an invalid length.
[   92.721873][ T6150] netlink: 'syz.2.49': attribute type 10 has an invalid length.
[   92.781390][ T6150] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.865419][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807c126400: rx timeout, send abort
[   92.874307][    C0] vcan0: j1939_tp_rxtimer: 0xffff88814ecba000: rx timeout, send abort
[   92.883359][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c126400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   92.898085][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88814ecba000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   93.212120][ T6171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.372174][ T6178] netlink: 'syz.3.60': attribute type 1 has an invalid length.
[   93.431328][ T6178] netlink: 'syz.3.60': attribute type 1 has an invalid length.
[   93.828496][ T6206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   93.835837][ T6206] IPv6: NLM_F_CREATE should be set when creating new route
[   93.933982][ T6202] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   93.996228][ T6210] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   94.326984][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.379968][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.396406][ T6223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.416802][ T6223] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.503765][ T6238] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.745202][ T6243] __nla_validate_parse: 7 callbacks suppressed
[   94.745222][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'.
[   94.798880][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'.
[   94.808063][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'.
[   94.856138][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'.
[   94.869889][ T6246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'.
[   94.913038][ T3017] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.923788][ T3017] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.936114][ T6251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.80'.
[   94.952399][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.976652][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.118324][ T6256] netlink: 'syz.1.81': attribute type 1 has an invalid length.
[   95.284398][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.81'.
[   95.326564][ T6265] veth5: entered promiscuous mode
[   95.346063][ T6272] netlink: 'syz.1.81': attribute type 8 has an invalid length.
[   95.745909][ T6293] netlink: 'syz.1.92': attribute type 1 has an invalid length.
[   95.854846][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'.
[   95.873050][ T6299] netlink: 176 bytes leftover after parsing attributes in process `syz.4.94'.
[   95.875690][ T6294] gretap1: entered promiscuous mode
[   95.884185][ T6299] netlink: 'syz.4.94': attribute type 5 has an invalid length.
[   95.903936][ T6299] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.94'.
[   96.114973][ T6311] netlink: 'syz.4.96': attribute type 4 has an invalid length.
[   96.205872][ T6315] netlink: 'syz.3.98': attribute type 13 has an invalid length.
[   96.393619][ T6315] 8021q: adding VLAN 0 to HW filter on device team0
[   96.421922][ T6315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.544952][ T6320] tipc: Started in network mode
[   96.553483][ T6320] tipc: Node identity b23687e5518a, cluster identity 4711
[   96.583308][ T6320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.628327][ T6319] tipc: Disabling bearer <eth:syzkaller0>
[   96.694065][ T6333] vlan2: entered allmulticast mode
[   96.719243][ T6333] bridge0: entered allmulticast mode
[   96.834000][ T6341] netlink: 'syz.4.108': attribute type 1 has an invalid length.
[   96.860937][ T6342] netlink: 'syz.4.108': attribute type 1 has an invalid length.
[   97.036171][ T6345] veth3: entered promiscuous mode
[   97.045688][ T6345] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   97.057002][ T6353] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   97.063484][ T6341] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.249920][ T6365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.324769][ T6365] syzkaller0: entered promiscuous mode
[   97.331941][ T6365] syzkaller0: entered allmulticast mode
[   97.338373][ T6365] tipc: Resetting bearer <eth:syzkaller0>
[   97.354562][ T6363] tipc: Resetting bearer <eth:syzkaller0>
[   98.209098][ T6363] tipc: Disabling bearer <eth:syzkaller0>
[   98.235823][ T6385] tipc: Started in network mode
[   98.241447][ T6385] tipc: Node identity 3646af45d0a5, cluster identity 4711
[   98.248896][ T6385] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.438641][ T6387] syzkaller0: entered promiscuous mode
[   98.469785][ T6387] syzkaller0: entered allmulticast mode
[   98.478624][ T6387] tipc: Resetting bearer <eth:syzkaller0>
[   98.584938][ T1143] tipc: Resetting bearer <eth:syzkaller0>
[   98.816073][ T6376] tipc: Resetting bearer <eth:syzkaller0>
[   99.253936][ T5950] tipc: Node number set to 3873681221
[   99.344658][ T6422] netlink: 'syz.4.125': attribute type 1 has an invalid length.
[   99.353058][ T6422] netlink: 'syz.4.125': attribute type 3 has an invalid length.
[   99.852341][ T6376] tipc: Disabling bearer <eth:syzkaller0>
[   99.873560][ T6402] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[   99.883590][ T6402] __nla_validate_parse: 12 callbacks suppressed
[   99.883602][ T6402] netlink: 184 bytes leftover after parsing attributes in process `syz.3.121'.
[  100.095776][ T6428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.118272][ T6428] syzkaller0: entered promiscuous mode
[  100.149278][ T6428] syzkaller0: entered allmulticast mode
[  100.229648][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'.
[  100.239360][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'.
[  100.304656][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'.
[  100.363324][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'.
[  100.477335][ T6448] netlink: 'syz.3.128': attribute type 1 has an invalid length.
[  100.528516][ T6428] tipc: Resetting bearer <eth:syzkaller0>
[  100.580777][ T6428] tipc: Disabling bearer <eth:syzkaller0>
[  100.761268][ T6465] netlink: 'syz.1.138': attribute type 3 has an invalid length.
[  100.772044][ T6457] ieee802154 phy0 wpan0: encryption failed: -22
[  100.808887][ T6465] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.902677][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.140'.
[  100.925525][ T6476] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[  100.962398][ T6476] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[  100.997753][ T6476] netlink: 212 bytes leftover after parsing attributes in process `syz.0.141'.
[  101.046784][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[  101.078391][ T6483] trusted_key: syz.2.143 sent an empty control message without MSG_MORE.
[  101.150263][ T6485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.325748][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'.
[  101.751059][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'.
[  101.911687][ T6525] sctp: [Deprecated]: syz.3.157 (pid 6525) Use of int in maxseg socket option.
[  101.911687][ T6525] Use struct sctp_assoc_value instead
[  102.074523][ T6533] netlink: 'syz.2.158': attribute type 21 has an invalid length.
[  102.126311][ T6537] nbd: must specify a size in bytes for the device
[  102.425719][ T6548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.442866][ T6548] syzkaller0: entered promiscuous mode
[  102.448956][ T6548] syzkaller0: entered allmulticast mode
[  102.497363][ T6547] tipc: Resetting bearer <eth:syzkaller0>
[  102.601867][ T6559] syz.0.167: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  102.632810][ T6559] CPU: 1 UID: 0 PID: 6559 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT(full) 
[  102.632840][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  102.632858][ T6559] Call Trace:
[  102.632866][ T6559]  <TASK>
[  102.632874][ T6559]  dump_stack_lvl+0x189/0x250
[  102.632903][ T6559]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  102.632930][ T6559]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.632952][ T6559]  ? __pfx__printk+0x10/0x10
[  102.632978][ T6559]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.632999][ T6559]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  102.633028][ T6559]  warn_alloc+0x214/0x310
[  102.633057][ T6559]  ? stack_depot_save_flags+0x40/0x860
[  102.633086][ T6559]  ? __pfx_warn_alloc+0x10/0x10
[  102.633117][ T6559]  ? kasan_save_track+0x4f/0x80
[  102.633142][ T6559]  ? xskq_create+0x56/0x170
[  102.633164][ T6559]  ? xsk_init_queue+0xb0/0x110
[  102.633184][ T6559]  ? xsk_setsockopt+0x4dc/0x8d0
[  102.633204][ T6559]  ? do_sock_setsockopt+0x17c/0x1b0
[  102.633229][ T6559]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  102.633243][ T6559]  ? do_syscall_64+0xfa/0x3b0
[  102.633267][ T6559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.633290][ T6559]  __vmalloc_node_range_noprof+0x125/0x12f0
[  102.633343][ T6559]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  102.633374][ T6559]  ? __kasan_kmalloc+0x93/0xb0
[  102.633400][ T6559]  vmalloc_user_noprof+0xad/0xf0
[  102.633426][ T6559]  ? xskq_create+0xbf/0x170
[  102.633451][ T6559]  xskq_create+0xbf/0x170
[  102.633477][ T6559]  xsk_init_queue+0xb0/0x110
[  102.633503][ T6559]  xsk_setsockopt+0x4dc/0x8d0
[  102.633529][ T6559]  ? __pfx_xsk_setsockopt+0x10/0x10
[  102.633551][ T6559]  ? __pfx_aa_sk_perm+0x10/0x10
[  102.633581][ T6559]  ? aa_sock_opt_perm+0xff/0x1b0
[  102.633601][ T6559]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  102.633620][ T6559]  ? __pfx_xsk_setsockopt+0x10/0x10
[  102.633643][ T6559]  do_sock_setsockopt+0x17c/0x1b0
[  102.633676][ T6559]  __x64_sys_setsockopt+0x13f/0x1b0
[  102.633699][ T6559]  do_syscall_64+0xfa/0x3b0
[  102.633723][ T6559]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.633747][ T6559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.633764][ T6559]  ? clear_bhb_loop+0x60/0xb0
[  102.633787][ T6559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.633805][ T6559] RIP: 0033:0x7fd57578ebe9
[  102.633839][ T6559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.633860][ T6559] RSP: 002b:00007fd576548038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  102.633880][ T6559] RAX: ffffffffffffffda RBX: 00007fd5759b5fa0 RCX: 00007fd57578ebe9
[  102.633893][ T6559] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  102.633904][ T6559] RBP: 00007fd575811e19 R08: 0000000000000004 R09: 0000000000000000
[  102.633915][ T6559] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.633927][ T6559] R13: 00007fd5759b6038 R14: 00007fd5759b5fa0 R15: 00007ffe6c601c38
[  102.633956][ T6559]  </TASK>
[  102.633968][ T6559] Mem-Info:
[  102.634055][ T6547] tipc: Disabling bearer <eth:syzkaller0>
[  102.655503][ T6559] active_anon:5548 inactive_anon:0 isolated_anon:0
[  102.655503][ T6559]  active_file:2372 inactive_file:39829 isolated_file:0
[  102.655503][ T6559]  unevictable:768 dirty:412 writeback:0
[  102.655503][ T6559]  slab_reclaimable:10266 slab_unreclaimable:109319
[  102.655503][ T6559]  mapped:29058 shmem:1357 pagetables:1114
[  102.655503][ T6559]  sec_pagetables:0 bounce:0
[  102.655503][ T6559]  kernel_misc_reclaimable:0
[  102.655503][ T6559]  free:1318329 free_pcp:19896 free_cma:0
[  103.001672][ T6559] Node 0 active_anon:22152kB inactive_anon:0kB active_file:9488kB inactive_file:159112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116328kB dirty:1632kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11900kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.051073][ T6559] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.159130][ T6559] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  103.246287][ T6559] lowmem_reserve[]: 0 2497 2499 2499 2499
[  103.253635][ T6559] Node 0 DMA32 free:1385508kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22208kB inactive_anon:0kB active_file:9488kB inactive_file:157544kB unevictable:1536kB writepending:1628kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:51828kB local_pcp:22040kB free_cma:0kB
[  103.314025][ T6559] lowmem_reserve[]: 0 0 1 1 1
[  103.321530][ T6559] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  103.352483][ T6559] lowmem_reserve[]: 0 0 0 0 0
[  103.357350][ T6559] Node 1 Normal free:3874912kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24832kB local_pcp:14912kB free_cma:0kB
[  103.444262][ T6559] lowmem_reserve[]: 0 0 0 0 0
[  103.454906][ T6559] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  103.526553][ T6559] Node 0 DMA32: 1077*4kB (UM) 307*8kB (UME) 76*16kB (UM) 249*32kB (UME) 47*64kB (UME) 24*128kB (UME) 16*256kB (UME) 1*512kB (M) 1*1024kB (E) 3*2048kB (UM) 330*4096kB (M) = 1385484kB
[  103.583862][ T6596] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  103.597605][ T6559] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  103.650557][ T6559] Node 1 Normal: 236*4kB (UE) 58*8kB (UME) 52*16kB (UME) 93*32kB (UME) 26*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 942*4096kB (M) = 3874912kB
[  103.673222][ T6559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  103.683582][ T6559] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.731027][ T6559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  103.765375][ T6559] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.770461][ T6602] netlink: 'syz.1.181': attribute type 1 has an invalid length.
[  103.804301][ T6559] 43554 total pagecache pages
[  103.827493][ T6559] 0 pages in swap cache
[  103.835324][ T6559] Free swap  = 124996kB
[  103.847154][ T6559] Total swap = 124996kB
[  103.853054][ T6559] 2097051 pages RAM
[  103.856880][ T6559] 0 pages HighMem/MovableOnly
[  103.865201][ T6559] 425656 pages reserved
[  103.869852][ T6559] 0 pages cma reserved
[  103.896400][ T6602] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.955644][ T6606] bond1: (slave geneve2): making interface the new active one
[  103.976765][ T6606] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  104.038257][ T6608] syzkaller0: refused to change device tx_queue_len
[  104.298758][ T6633] unsupported nlmsg_type 40
[  105.008324][ T6666] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  105.016046][ T6667] netlink: 'syz.2.201': attribute type 3 has an invalid length.
[  105.967388][ T6711] vlan2: entered allmulticast mode
[  106.025738][ T6711] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  106.262092][ T6731] netlink: 'syz.3.217': attribute type 39 has an invalid length.
[  106.281801][ T6729] __nla_validate_parse: 8 callbacks suppressed
[  106.281818][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'.
[  106.325547][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[  106.351873][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'.
[  106.564891][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[  106.569618][   T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.609283][   T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.629142][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'.
[  106.680146][  T155] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.700087][  T155] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.758596][ T6749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.795886][ T6749] syzkaller0: entered promiscuous mode
[  106.810898][ T6749] syzkaller0: entered allmulticast mode
[  106.957246][ T6749] tipc: Resetting bearer <eth:syzkaller0>
[  107.028415][ T6764] netlink: 'syz.3.228': attribute type 1 has an invalid length.
[  107.040008][ T6748] tipc: Resetting bearer <eth:syzkaller0>
[  107.073639][ T6748] tipc: Disabling bearer <eth:syzkaller0>
[  107.233881][ T6764] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.322044][ T6769] bond1: (slave veth3): Enslaving as an active interface with a down link
[  107.435452][ T6764] bond1: (slave veth0_to_bond): making interface the new active one
[  107.491400][ T6764] veth0_to_bond: entered promiscuous mode
[  107.512694][ T6764] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  108.066699][ T6823] batman_adv: batadv0: Adding interface: dummy0
[  108.080119][ T6823] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.147297][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: batadv_slave_1
[  108.199350][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.223234][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'.
[  108.239525][ T6823] batman_adv: batadv0: Interface activated: dummy0
[  108.273259][ T6831] veth0: entered promiscuous mode
[  108.319464][ T6841] netlink: 'syz.4.249': attribute type 1 has an invalid length.
[  108.350522][ T6841] netlink: 'syz.4.249': attribute type 1 has an invalid length.
[  108.381417][ T6841] netlink: 216 bytes leftover after parsing attributes in process `syz.4.249'.
[  108.443454][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.249'.
[  108.646637][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.253'.
[  108.812557][ T6863] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  108.865799][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  108.888488][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  108.963493][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  108.993880][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  109.067673][ T6877] netlink: 'syz.4.258': attribute type 1 has an invalid length.
[  109.101378][ T6877] netlink: 'syz.4.258': attribute type 1 has an invalid length.
[  109.124649][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'.
[  109.362715][ T6895] netlink: 'syz.3.262': attribute type 10 has an invalid length.
[  109.371506][ T6895] veth0_vlan: entered allmulticast mode
[  109.457266][ T6895] veth0_vlan: left promiscuous mode
[  109.467902][ T6895] veth0_vlan: entered promiscuous mode
[  109.500814][ T6895] team0: Device veth0_vlan failed to register rx_handler
[  109.873112][ T6920] bridge_slave_0: invalid flags given to default FDB implementation
[  109.961930][ T6925] netlink: 'syz.0.274': attribute type 1 has an invalid length.
[  110.348070][ T6947] IPVS: ip_vs_add_dest(): server weight less than zero
[  110.356390][   T24] IPVS: starting estimator thread 0...
[  110.496328][ T6948] IPVS: using max 28 ests per chain, 67200 per kthread
[  110.577003][ T6957] unknown channel width for channel at 909000KHz?
[  110.955658][  T983] IPVS: starting estimator thread 0...
[  110.963747][ T6976] netlink: 'syz.0.290': attribute type 11 has an invalid length.
[  110.968716][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.062611][ T6975] bridge_slave_1 (unregistering): left allmulticast mode
[  111.069383][ T6978] IPVS: using max 27 ests per chain, 64800 per kthread
[  111.083189][ T6975] bridge_slave_1 (unregistering): left promiscuous mode
[  111.111187][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.366299][ T7001] __nla_validate_parse: 6 callbacks suppressed
[  111.366317][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.298'.
[  111.383999][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[  111.399989][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[  111.444910][ T7003] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  111.519916][ T7007] Driver unsupported XDP return value 0 on prog  (id 70) dev N/A, expect packet loss!
[  111.754840][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.182065][ T7044] netlink: 'syz.4.312': attribute type 4 has an invalid length.
[  112.197045][ T7043] netlink: 'syz.4.312': attribute type 4 has an invalid length.
[  112.246564][ T7047] netlink: 'syz.1.314': attribute type 11 has an invalid length.
[  112.263597][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.315'.
[  112.338923][ T7047] netlink: 224 bytes leftover after parsing attributes in process `syz.1.314'.
[  112.596335][ T7066] netlink: 'syz.1.319': attribute type 10 has an invalid length.
[  112.627889][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'.
[  112.823844][ T7066] veth0_macvtap: left promiscuous mode
[  112.846136][ T7086] Bluetooth: MGMT ver 1.23
[  112.996431][ T7097] gre1: entered promiscuous mode
[  113.050015][ T7097] gre1: entered allmulticast mode
[  113.227163][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'.
[  113.451259][ T7077] mpoa:mpoad_close: (<unknown>) going down
[  114.109503][ T7144] netlink: 60 bytes leftover after parsing attributes in process `syz.3.336'.
[  114.125177][ T7145] netlink: 'syz.2.337': attribute type 1 has an invalid length.
[  114.275479][ T7145] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.295911][ T7158] netlink: 'syz.1.340': attribute type 10 has an invalid length.
[  114.313120][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.340'.
[  114.349934][ T7155] bond2: (slave gretap1): making interface the new active one
[  114.371775][ T7155] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  114.409553][ T7158] batadv0: entered promiscuous mode
[  114.439099][ T7158] batadv0: entered allmulticast mode
[  114.445171][ T7158] bridge0: port 3(batadv0) entered blocking state
[  114.479214][ T7158] bridge0: port 3(batadv0) entered disabled state
[  114.504095][ T7158] bridge0: port 3(batadv0) entered blocking state
[  114.511521][ T7158] bridge0: port 3(batadv0) entered forwarding state
[  114.576378][ T7172] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  114.583063][ T7172] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  114.732038][ T3017] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  114.742349][ T3017] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  114.773879][ T7171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.820553][ T7180] netlink: 'syz.1.345': attribute type 1 has an invalid length.
[  114.850350][ T7180] netlink: 'syz.1.345': attribute type 11 has an invalid length.
[  114.899439][ T7180] netlink: 220 bytes leftover after parsing attributes in process `syz.1.345'.
[  114.941580][ T7179] netlink: 'syz.2.343': attribute type 1 has an invalid length.
[  114.977482][ T7171] syzkaller0: entered promiscuous mode
[  115.003966][ T7171] syzkaller0: entered allmulticast mode
[  115.015691][ T7171] tipc: Resetting bearer <eth:syzkaller0>
[  115.116051][ T7179] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.217056][ T7170] tipc: Resetting bearer <eth:syzkaller0>
[  115.446320][ T1163] tipc: Subscription rejected, illegal request
[  115.780446][ T5950] tipc: Node number set to 1914686574
[  116.263449][ T7170] tipc: Disabling bearer <eth:syzkaller0>
[  116.286741][ T7213] macvlan2: entered allmulticast mode
[  116.293917][ T7213] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  116.530878][ T7233] netlink: 'syz.3.356': attribute type 1 has an invalid length.
[  116.613407][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'.
[  116.810497][ T7233] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.433286][ T7246] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.460707][ T7246] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  117.513378][ T7246] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  117.788106][ T7250] veth5: entered promiscuous mode
[  117.802121][ T7250] bond3: (slave veth5): Enslaving as an active interface with a down link
[  117.866373][ T7256] vlan2: entered allmulticast mode
[  117.887343][ T7256] bond3: entered allmulticast mode
[  118.091722][ T7275] netlink: 48 bytes leftover after parsing attributes in process `syz.0.364'.
[  118.198239][ T7283] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  118.223622][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'.
[  118.274583][ T7285] netlink: 'syz.3.367': attribute type 1 has an invalid length.
[  118.467266][ T7291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.494466][ T7291] syzkaller0: entered promiscuous mode
[  118.529804][ T7291] syzkaller0: entered allmulticast mode
[  118.722130][ T7292] tipc: Resetting bearer <eth:syzkaller0>
[  118.813228][ T7292] tipc: Resetting bearer <eth:syzkaller0>
[  118.874233][ T7292] tipc: Disabling bearer <eth:syzkaller0>
[  118.990529][   T36] veth0_to_bond: left promiscuous mode
[  119.077615][ T7316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.084975][ T7316] IPv6: NLM_F_CREATE should be set when creating new route
[  119.092268][ T7316] IPv6: NLM_F_CREATE should be set when creating new route
[  119.099607][ T7316] IPv6: NLM_F_CREATE should be set when creating new route
[  119.124961][ T7318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.294035][ T7324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.343174][ T7329] lo: MTU too low for tipc bearer
[  119.361581][ T7329] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  119.836650][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.385'.
[  120.051125][ T7361] pim6reg1: entered promiscuous mode
[  120.057188][ T7361] pim6reg1: entered allmulticast mode
[  120.063469][ T7362] netlink: 'syz.0.388': attribute type 1 has an invalid length.
[  120.124420][ T7362] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  120.136253][ T7362] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  120.238294][ T7368] gretap1: entered promiscuous mode
[  120.258055][ T7368] bond1: (slave gretap1): making interface the new active one
[  120.286637][ T7368] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  120.433471][ T7376] dvmrp0: entered allmulticast mode
[  120.487389][ T7381] IPVS: Error joining to the multicast group
[  120.678739][ T7391] netlink: 260 bytes leftover after parsing attributes in process `syz.3.400'.
[  120.695713][ T7394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'.
[  120.714401][ T7392] netlink: 68 bytes leftover after parsing attributes in process `syz.4.401'.
[  120.726896][ T7394] netlink: 'syz.1.402': attribute type 3 has an invalid length.
[  120.734898][ T7394] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.402'.
[  120.749366][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.401'.
[  120.890745][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'.
[  120.941056][ T7404] 8021q: adding VLAN 0 to HW filter on device bond4
[  121.026508][ T7404] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  121.274422][ T7432] netlink: 'syz.0.410': attribute type 1 has an invalid length.
[  121.504236][ T7442] tipc: Started in network mode
[  121.512897][ T7442] tipc: Node identity 9a0cd28f79a5, cluster identity 4711
[  121.521728][ T7442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.639635][ T7442] tipc: Disabling bearer <eth:syzkaller0>
[  121.670270][ T7448] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  121.734511][ T7450] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  121.808501][ T7459] __nla_validate_parse: 2 callbacks suppressed
[  121.808521][ T7459] netlink: 260 bytes leftover after parsing attributes in process `syz.3.417'.
[  121.993875][ T7467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.419'.
[  122.006710][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.419'.
[  122.037063][ T7467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.419'.
[  122.079128][ T7467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.419'.
[  122.137022][ T7475] netlink: 51 bytes leftover after parsing attributes in process `syz.4.424'.
[  122.497232][ T7497] netlink: 348 bytes leftover after parsing attributes in process `syz.2.431'.
[  122.565358][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'.
[  122.584899][ T7496] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  122.895270][ T7514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.935528][ T7514] syzkaller0: entered promiscuous mode
[  122.975894][ T7514] syzkaller0: entered allmulticast mode
[  123.000625][ T7514] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  123.038925][ T7514] syzkaller0: mtu greater than device maximum
[  123.067336][ T7513] tipc: Resetting bearer <eth:syzkaller0>
[  123.126990][ T7513] tipc: Disabling bearer <eth:syzkaller0>
[  123.356746][ T7545] 8021q: adding VLAN 0 to HW filter on device bond4
[  123.365246][ T7545] team0: Failed to send port change of device bond4 via netlink (err -105)
[  123.375278][ T7545] team0: Failed to send options change via netlink (err -105)
[  123.385033][ T7545] team0: Port device bond4 added
[  123.431803][ T7546] 8021q: adding VLAN 0 to HW filter on device bond5
[  123.440759][ T7546] team0: Failed to send port change of device bond5 via netlink (err -105)
[  123.449718][ T7546] team0: Failed to send options change via netlink (err -105)
[  123.458026][ T7546] team0: Port device bond5 added
[  123.654421][ T7564] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  123.714976][ T7570] netlink: 'syz.3.454': attribute type 1 has an invalid length.
[  123.895234][ T7580] sctp: [Deprecated]: syz.1.456 (pid 7580) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.895234][ T7580] Use struct sctp_sack_info instead
[  123.912923][ T7570] 8021q: adding VLAN 0 to HW filter on device bond5
[  123.929937][ T7579] netlink: 'syz.0.455': attribute type 3 has an invalid length.
[  123.949739][ T7579] netlink: 666 bytes leftover after parsing attributes in process `syz.0.455'.
[  123.970519][ T7575] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[  124.262494][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'.
[  124.560974][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.568818][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.885486][ T7577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.909442][ T7577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.254030][ T7570] vlan2: entered allmulticast mode
[  125.259595][ T7570] veth1: entered allmulticast mode
[  125.265503][ T7570] bond5: (slave vlan2): Opening slave failed
[  125.277347][ T7575] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  125.298962][ T3017] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.353681][ T3017] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.379846][ T3017] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.417676][ T3017] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.482305][  T155] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.508866][  T155] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.542001][  T155] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.582226][  T155] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.811019][ T7653] netlink: 'syz.0.473': attribute type 1 has an invalid length.
[  125.968429][ T7653] macvlan2: entered promiscuous mode
[  125.996741][ T7653] macvlan2: entered allmulticast mode
[  126.003631][ T7653] bond3: entered promiscuous mode
[  126.013753][ T7653] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  126.053419][ T7653] bond3: left promiscuous mode
[  126.250241][ T7674] netlink: 'syz.3.479': attribute type 58 has an invalid length.
[  126.370113][ T7681] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  126.674719][ T7701] netlink: 'syz.1.486': attribute type 58 has an invalid length.
[  127.259858][ T7729] __nla_validate_parse: 7 callbacks suppressed
[  127.259878][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'.
[  127.309482][ T5873] Bluetooth: hci4: link tx timeout
[  127.315618][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  127.748540][ T7750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.932607][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[  128.056073][ T7773] ipvlan3: entered promiscuous mode
[  128.104622][ T7774] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[  128.124880][ T7766] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'.
[  128.334802][ T7790] netlink: 'syz.3.511': attribute type 12 has an invalid length.
[  128.351273][ T7790] netlink: 'syz.3.511': attribute type 29 has an invalid length.
[  128.359757][ T7790] netlink: 148 bytes leftover after parsing attributes in process `syz.3.511'.
[  128.371028][ T7790] netlink: 43 bytes leftover after parsing attributes in process `syz.3.511'.
[  128.748496][ T7810] netlink: 'syz.3.517': attribute type 1 has an invalid length.
[  128.782361][ T7810] netlink: 184 bytes leftover after parsing attributes in process `syz.3.517'.
[  128.792798][ T5863] Bluetooth: hci4: link tx timeout
[  128.798385][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.833367][ T7815] netlink: 44 bytes leftover after parsing attributes in process `syz.0.520'.
[  128.898127][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.522'.
[  128.937203][ T7821] sock: sock_timestamping_bind_phc: sock not bind to device
[  129.016365][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'.
[  129.037188][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.523'.
[  129.303871][ T5863] Bluetooth: hci4: link tx timeout
[  129.310050][ T5863] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.327165][ T7834] netlink: 'syz.3.527': attribute type 18 has an invalid length.
[  129.379102][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  129.527636][ T7842] netlink: 'syz.2.529': attribute type 29 has an invalid length.
[  129.559765][ T7842] netlink: 'syz.2.529': attribute type 29 has an invalid length.
[  129.892841][ T7854] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.914384][ T7854] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  130.109437][ T7870] ieee802154 phy0 wpan0: encryption failed: -22
[  130.127886][ T7867] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  130.542542][ T7893] syzkaller1: entered promiscuous mode
[  130.548490][ T7893] syzkaller1: entered allmulticast mode
[  130.608504][ T7893] bond2: entered promiscuous mode
[  130.618574][ T7893] bond2: entered allmulticast mode
[  130.627488][ T7893] 8021q: adding VLAN 0 to HW filter on device bond2
[  131.215027][ T7936] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  131.980269][ T7976] netlink: 'syz.3.561': attribute type 12 has an invalid length.
[  132.010628][ T7976] netlink: 'syz.3.561': attribute type 12 has an invalid length.
[  132.492498][ T8007] __nla_validate_parse: 10 callbacks suppressed
[  132.492519][ T8007] netlink: 56 bytes leftover after parsing attributes in process `syz.0.570'.
[  132.533340][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'.
[  132.542401][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'.
[  132.665415][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  132.675411][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  132.763185][ T8019] netlink: 'syz.0.573': attribute type 7 has an invalid length.
[  132.809049][ T8019] netlink: 140 bytes leftover after parsing attributes in process `syz.0.573'.
[  133.214811][ T8039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.222057][ T5873] Bluetooth: hci0: command 0x0401 tx timeout
[  133.228911][ T8039] syzkaller0: entered promiscuous mode
[  133.249122][ T8039] syzkaller0: entered allmulticast mode
[  133.262651][ T8039] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  133.347006][ T8039] tipc: Resetting bearer <eth:syzkaller0>
[  133.380226][ T8038] tipc: Resetting bearer <eth:syzkaller0>
[  133.412207][ T8038] tipc: Disabling bearer <eth:syzkaller0>
[  133.444296][ T8050] vlan2: entered promiscuous mode
[  133.451203][ T8050] vlan2: entered allmulticast mode
[  133.456910][ T8050] hsr_slave_1: entered allmulticast mode
[  133.503908][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.582'.
[  133.697284][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'.
[  133.707135][ T8060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'.
[  133.716876][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'.
[  133.726447][ T8058] netlink: 'syz.3.584': attribute type 6 has an invalid length.
[  133.743010][ T8058] netlink: 'syz.3.584': attribute type 1 has an invalid length.
[  133.752835][ T8058] netlink: 236 bytes leftover after parsing attributes in process `syz.3.584'.
[  133.791992][ T8063] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.585'.
[  133.814169][ T8063] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  134.678676][ T8110] bridge_slave_0: default FDB implementation only supports local addresses
[  134.986909][ T8129] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  135.024107][ T8129] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  135.034977][ T8142] netlink: 'syz.4.610': attribute type 1 has an invalid length.
[  135.648759][ T8181] erspan0: entered promiscuous mode
[  135.663448][ T8181] netlink: 'syz.0.619': attribute type 2 has an invalid length.
[  135.940775][ T8198] netlink: 'syz.4.624': attribute type 1 has an invalid length.
[  135.948519][ T8198] netlink: 'syz.4.624': attribute type 1 has an invalid length.
[  136.986194][   T30] audit: type=1107 audit(1755610904.360:2): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>��eJ�'Ui#
��co����k�ufIĔ�&���������0X��H�H�7H$'�!9�
aQ�21�e��&	\���{��ZY�)vFP�Y��T��`�Jh�,��@_Vd�?�!������;��XZ܍en��^��l���#�n�/�?�g�ܐ�U"�j��=�i���Id��d�甓��O��ZcژʙKy���rosC�K��ſ&c���*�N���s�
��7�.��!��N���(D�~J���d �X˫�297H\���h;���¼�X�ڔÚ5�A��������P�j�K������w����W�C�U�``�J���?b:Q0�ϰ�fac�ބ���F��J���%����xT�m0"�r���W�j��
[  136.986194][   T30] ���_��`���[,"uN|�a�vv���1E¸BV��ps;��vS�.�Cq�T�x+�Q��胈%#[C~)(����߮Q����z�px���W��ͽ�\j�+���N��N S5A�)_q�ϷA���(�D�k��M�>����'�B@Ҳ�먰Ԁ(uU�2��ub\�����������H�h�x`v����IC�b��B��aS`�F5���^����ZBn]����Uא�-eGy�v���O��Q{����ӢчE|��$�@��T�����fT�[y��_���f�Z+�����f�������
��0��/��*	�s?�eE��6�"��:��
[  136.986194][   T30] �tٞ��d�z'
[  137.095957][ T8281] lo: entered promiscuous mode
[  137.101231][ T8281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  137.426521][ T8298] gretap0: entered promiscuous mode
[  137.454622][ T8298] 0��{X��: renamed from gretap0
[  137.464836][ T8298] 0��{X��: left promiscuous mode
[  137.470929][ T8298] 0��{X��: entered allmulticast mode
[  137.477985][ T8298] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  137.595454][ T8309] __nla_validate_parse: 45 callbacks suppressed
[  137.595471][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'.
[  137.612898][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'.
[  137.670654][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'.
[  137.807368][ T8316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.656'.
[  137.871704][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'.
[  138.407718][ T8358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.667'.
[  138.489171][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.667'.
[  138.605600][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'.
[  138.683882][ T8375] sctp: [Deprecated]: syz.1.670 (pid 8375) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.683882][ T8375] Use struct sctp_sack_info instead
[  138.867629][ T8379] netlink: 32 bytes leftover after parsing attributes in process `syz.4.675'.
[  139.105742][ T8396] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  139.561989][ T8408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.733210][ T8408] tipc: Disabling bearer <eth:syzkaller0>
[  139.754359][ T8422] netlink: 128 bytes leftover after parsing attributes in process `syz.1.687'.
[  139.781416][ T8419] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  139.801664][ T8419] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  139.821486][ T8419] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  139.917697][ T8428] (unnamed net_device) (uninitialized): option mode: invalid value (133)
[  140.029131][ T8432] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  140.051529][ T8432] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  140.078658][ T8437] netlink: 'syz.0.691': attribute type 13 has an invalid length.
[  140.134883][ T8437] lo: entered promiscuous mode
[  140.140955][ T8437] lo: entered allmulticast mode
[  140.167302][ T8437] tunl0: entered promiscuous mode
[  140.194420][ T8437] tunl0: entered allmulticast mode
[  140.212706][ T8437] gre0: entered promiscuous mode
[  140.217963][ T8437] gre0: entered allmulticast mode
[  140.267708][ T8437] gretap0: entered promiscuous mode
[  140.274405][ T8437] gretap0: entered allmulticast mode
[  140.392800][ T8437] gretap0: refused to change device tx_queue_len
[  140.406159][ T8437] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  140.448763][ T8443] dvmrp0: left allmulticast mode
[  140.641148][ T8453] netlink: 'syz.3.694': attribute type 4 has an invalid length.
[  140.818836][ T8453] netlink: 'syz.3.694': attribute type 3 has an invalid length.
[  140.953473][ T8453] netlink: 'syz.3.694': attribute type 5 has an invalid length.
[  140.987663][ T8454] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  141.443576][ T8453] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[  141.684280][ T8488] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  142.158477][ T8503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.929293][ T8527] netlink: 'syz.1.714': attribute type 83 has an invalid length.
[  143.131013][ T8537] tipc: Started in network mode
[  143.149951][ T8537] tipc: Node identity 06ffbdd3aaa1, cluster identity 4711
[  143.157247][ T8537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.196266][ T8537] syzkaller0: entered promiscuous mode
[  143.216192][ T8537] syzkaller0: entered allmulticast mode
[  143.324234][ T8537] tipc: Resetting bearer <eth:syzkaller0>
[  143.366438][ T8545] __nla_validate_parse: 6 callbacks suppressed
[  143.366457][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'.
[  143.382233][ T8536] tipc: Resetting bearer <eth:syzkaller0>
[  143.467876][ T8536] tipc: Disabling bearer <eth:syzkaller0>
[  143.506099][ T8549] netlink: 51 bytes leftover after parsing attributes in process `syz.3.722'.
[  143.773048][ T7416] tipc: Subscription rejected, illegal request
[  143.984243][ T8590] netlink: 116 bytes leftover after parsing attributes in process `syz.0.730'.
[  144.056841][ T8590] netlink: 116 bytes leftover after parsing attributes in process `syz.0.730'.
[  144.264825][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz.3.737'.
[  144.324598][ T8613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.739'.
[  144.335116][ T8613] netlink: 64 bytes leftover after parsing attributes in process `syz.0.739'.
[  144.374097][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.740'.
[  144.385515][ T8617] netlink: 'syz.1.740': attribute type 1 has an invalid length.
[  144.394075][ T8617] netlink: 224 bytes leftover after parsing attributes in process `syz.1.740'.
[  144.783103][ T8638] openvswitch: netlink: IPv4 tun info is not correct
[  144.817323][ T8641] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20001
[  145.059636][ T5873] Bluetooth: hci4: command 0x0405 tx timeout
[  145.094938][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'.
[  145.911969][ T8689] netlink: 'syz.1.763': attribute type 4 has an invalid length.
[  145.985612][ T8696] netlink: 'syz.1.763': attribute type 4 has an invalid length.
[  146.536646][ T8714] netlink: 'syz.1.771': attribute type 29 has an invalid length.
[  146.876774][ T8732] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  147.593277][ T8777] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  147.712850][ T8779] bridge1: the hash_elasticity option has been deprecated and is always 16
[  147.841595][ T8795] netlink: 'syz.2.797': attribute type 4 has an invalid length.
[  147.898903][ T8796] netlink: 'syz.2.797': attribute type 4 has an invalid length.
[  148.012841][   T30] audit: type=1800 audit(1755610915.390:3): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.799" name="memory.events" dev="tmpfs" ino=754 res=0 errno=0
[  148.064044][ T8795] vxcan1 speed is unknown, defaulting to 1000
[  148.093817][ T8795] vxcan1 speed is unknown, defaulting to 1000
[  148.119768][   T30] audit: type=1804 audit(1755610915.390:4): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.799" name="/newroot/144/memory.events" dev="tmpfs" ino=754 res=1 errno=0
[  148.138278][ T8795] vxcan1 speed is unknown, defaulting to 1000
[  148.225366][ T8813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.261578][ T8813] syzkaller0: entered promiscuous mode
[  148.267089][ T8813] syzkaller0: entered allmulticast mode
[  148.320865][ T8819] netlink: 'syz.0.806': attribute type 1 has an invalid length.
[  148.447944][ T8813] tipc: Resetting bearer <eth:syzkaller0>
[  148.460107][ T8795] infiniband syz2: set active
[  148.471344][ T7588] vxcan1 speed is unknown, defaulting to 1000
[  148.511474][ T8795] infiniband syz2: added vxcan1
[  148.526335][ T8812] tipc: Resetting bearer <eth:syzkaller0>
[  148.579885][ T8812] tipc: Disabling bearer <eth:syzkaller0>
[  148.610605][ T8833] __nla_validate_parse: 11 callbacks suppressed
[  148.610623][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'.
[  148.643642][ T8795] RDS/IB: syz2: added
[  148.648341][ T8795] smc: adding ib device syz2 with port count 1
[  148.654839][ T8795] smc:    ib device syz2 port 1 has pnetid 
[  148.664228][ T7588] vxcan1 speed is unknown, defaulting to 1000
[  148.674096][ T8795] vxcan1 speed is unknown, defaulting to 1000
[  149.076380][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'.
[  149.183465][ T8855] netlink: 51 bytes leftover after parsing attributes in process `syz.3.817'.
[  149.388028][ T8855] syzkaller0: entered promiscuous mode
[  149.396677][ T8855] syzkaller0: entered allmulticast mode
[  150.448158][ T8868] sit0: entered promiscuous mode
[  150.457707][ T8868] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[  150.465655][ T8868] netlink: 1 bytes leftover after parsing attributes in process `syz.0.821'.
[  150.480153][ T8795] vxcan1 speed is unknown, defaulting to 1000
[  150.492113][ T8873] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  150.658000][ T8885] netlink: 164 bytes leftover after parsing attributes in process `syz.0.826'.
[  150.688240][ T8885] netlink: 164 bytes leftover after parsing attributes in process `syz.0.826'.
[  150.717772][ T8885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.826'.
[  151.072032][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.834'.
[  151.091508][ T8910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.834'.
[  151.106395][ T8795] vxcan1 speed is unknown, defaulting to 1000
[  151.296160][ T8921] xfrm1: entered allmulticast mode
[  151.581339][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'.
[  151.599661][ T8942] netlink: 'syz.4.843': attribute type 1 has an invalid length.
[  151.618574][ T8942] netlink: 'syz.4.843': attribute type 1 has an invalid length.
[  151.652098][ T8942] netlink: 'syz.4.843': attribute type 2 has an invalid length.
[  151.652775][ T8795] vxcan1 speed is unknown, defaulting to 1000
[  151.886707][ T8954] netlink: 'syz.3.846': attribute type 5 has an invalid length.
[  151.976799][ T8958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.067082][ T8949] vxcan1 speed is unknown, defaulting to 1000
[  152.250365][ T8795] vxcan1 speed is unknown, defaulting to 1000
[  152.281698][ T8935] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  152.292322][ T8935] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  153.168376][ T9001] netlink: 'syz.3.861': attribute type 10 has an invalid length.
[  153.218572][ T9009] netlink: 'syz.2.862': attribute type 3 has an invalid length.
[  153.519949][ T9021] netlink: 'syz.3.866': attribute type 12 has an invalid length.
[  153.638180][ T9025] delete_channel: no stack
[  154.862654][ T9089] lo: entered allmulticast mode
[  154.878633][ T9090] netlink: 'syz.2.888': attribute type 1 has an invalid length.
[  154.984514][ T9090] 8021q: adding VLAN 0 to HW filter on device bond6
[  155.177298][ T9101] __nla_validate_parse: 12 callbacks suppressed
[  155.177320][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'.
[  155.456621][ T9109] smc: net device bond0 applied user defined pnetid SYZ2
[  155.464074][ T9109] netlink: 14 bytes leftover after parsing attributes in process `syz.1.893'.
[  155.604817][ T9107] netlink: 'syz.2.892': attribute type 83 has an invalid length.
[  155.728850][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'.
[  155.763192][ T9109] smc: removing net device bond0 with user defined pnetid SYZ2
[  155.777043][ T9109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.803926][ T9109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.824775][ T9109] bond0 (unregistering): Released all slaves
[  156.025520][ T9138] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.902'.
[  156.064676][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'.
[  156.099028][ T9142] netlink: 'syz.2.899': attribute type 1 has an invalid length.
[  156.913956][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'.
[  156.964550][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'.
[  157.066246][ T9218] vlan2: entered allmulticast mode
[  157.098559][ T9218] bridge0: entered allmulticast mode
[  157.116960][ T9218] bridge2: port 1(vlan2) entered blocking state
[  157.144092][ T9218] bridge2: port 1(vlan2) entered disabled state
[  157.159391][ T9218] vlan2: entered promiscuous mode
[  157.165575][ T9218] bridge0: entered promiscuous mode
[  157.397372][ T9245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.921'.
[  157.515216][ T9250] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  157.571934][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'.
[  157.650744][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.930'.
[  157.750220][ T9262] validate_nla: 1 callbacks suppressed
[  157.750242][ T9262] netlink: 'syz.0.933': attribute type 25 has an invalid length.
[  157.785153][ T9265] netlink: 'syz.1.934': attribute type 6 has an invalid length.
[  157.810771][ T9267] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.906078][ T9330] tipc: Enabled bearer <udp:s>, priority 10
[  158.979870][ T9335] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  160.101365][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  160.258034][ T9418] __nla_validate_parse: 10 callbacks suppressed
[  160.258052][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.973'.
[  160.516739][ T9436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.980'.
[  160.553947][ T9436] 8021q: adding VLAN 0 to HW filter on device bond6
[  160.584323][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.981'.
[  160.584483][ T9444] netlink: 5 bytes leftover after parsing attributes in process `syz.1.981'.
[  160.604094][ T9439] 8021q: adding VLAN 0 to HW filter on device bond6
[  160.611105][ T9439] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  160.627032][ T9439] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  160.627421][ T9445] openvswitch: netlink: Missing key (keys=40, expected=100)
[  160.762603][ T9447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.770113][ T9447] syzkaller0: entered promiscuous mode
[  160.775612][ T9447] syzkaller0: entered allmulticast mode
[  160.796107][ T9447] tipc: Resetting bearer <eth:syzkaller0>
[  160.805091][ T9446] tipc: Resetting bearer <eth:syzkaller0>
[  160.836648][ T9446] tipc: Disabling bearer <eth:syzkaller0>
[  161.134083][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'.
[  161.138585][ T9466] netlink: 18 bytes leftover after parsing attributes in process `syz.3.988'.
[  161.277299][ T9478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.990'.
[  161.349263][ T9478] netlink: 21 bytes leftover after parsing attributes in process `syz.1.990'.
[  161.358343][ T9478] netlink: 21 bytes leftover after parsing attributes in process `syz.1.990'.
[  161.756182][ T9498] netlink: 'syz.3.993': attribute type 1 has an invalid length.
[  161.795622][ T9516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.995'.
[  162.431326][ T9562] netlink: 'syz.1.1010': attribute type 23 has an invalid length.
[  162.529395][ T9570] netlink: 'syz.4.1013': attribute type 83 has an invalid length.
[  162.994178][ T9593] gretap0: entered promiscuous mode
[  163.032946][ T9593] 0��{X��: renamed from gretap0
[  163.075560][ T9593] 0��{X��: left promiscuous mode
[  163.089270][ T9593] 0��{X��: entered allmulticast mode
[  163.105698][ T9593] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  163.212751][ T9598] siw: device registration error -23
[  163.213575][ T9579] mpoa:mpoad_close: (<unknown>) going down
[  163.538122][ T9619] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  163.578571][ T9619] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.637613][ T9623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.670331][ T9625] team0: Device ip6gre1 is of different type
[  163.709931][ T9623] syzkaller0: entered promiscuous mode
[  163.715576][ T9623] syzkaller0: entered allmulticast mode
[  163.730702][ T9634] tipc: Resetting bearer <eth:syzkaller0>
[  163.743478][ T9622] tipc: Resetting bearer <eth:syzkaller0>
[  163.762675][ T9622] tipc: Disabling bearer <eth:syzkaller0>
[  163.793009][ T9636] netlink: 'syz.2.1032': attribute type 1 has an invalid length.
[  163.801237][ T9636] netlink: 'syz.2.1032': attribute type 2 has an invalid length.
[  164.107062][ T9658] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  164.228754][ T9662] !��: renamed from bond_slave_0 (while UP)
[  164.328229][ T9668] netlink: 'syz.3.1042': attribute type 3 has an invalid length.
[  164.502389][ T5863] Bluetooth: hci0: command 0x0401 tx timeout
[  164.509455][ T5873] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  164.816252][ T9701] openvswitch: netlink: IPv4 tun info is not correct
[  165.233160][ T9717] sctp: [Deprecated]: syz.2.1056 (pid 9717) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.233160][ T9717] Use struct sctp_sack_info instead
[  165.250590][ T9717] sctp: [Deprecated]: syz.2.1056 (pid 9717) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.250590][ T9717] Use struct sctp_sack_info instead
[  165.283378][ T9717] dvmrp0: entered allmulticast mode
[  165.345340][ T9718] (unnamed net_device) (uninitialized): option mode: invalid value (133)
[  165.683071][ T9726] sctp: [Deprecated]: syz.3.1058 (pid 9726) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.683071][ T9726] Use struct sctp_sack_info instead
[  165.858254][ T9728] __nla_validate_parse: 17 callbacks suppressed
[  165.858275][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1059'.
[  166.185882][ T9718] batman_adv: batadv0: Interface deactivated: dummy0
[  166.288313][ T9718] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.324232][ T9718] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.807234][ T9719] dvmrp0: left allmulticast mode
[  166.813595][ T9719] netdevsim netdevsim2 netdevsim2: left allmulticast mode
[  166.877033][   T10] vxcan1 speed is unknown, defaulting to 1000
[  166.879289][ T9497] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0
[  166.896726][   T10] syz2: Port: 1 Link DOWN
[  166.905082][ T9497] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.937776][ T9497] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.957180][ T9497] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.985089][ T5947] vxcan1 speed is unknown, defaulting to 1000
[  167.053226][ T9740] bridge_slave_0: left allmulticast mode
[  167.067859][ T9740] bridge_slave_0: left promiscuous mode
[  167.078392][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.101451][ T9740] bridge_slave_1: left allmulticast mode
[  167.123294][ T9740] bridge_slave_1: left promiscuous mode
[  167.140579][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.174519][ T9740] bond1: (slave veth0_to_bond): Releasing active interface
[  167.206457][ T9740] bond0: (slave bond_slave_0): Releasing backup interface
[  167.223501][ T9740] bond0: (slave bond_slave_1): Releasing backup interface
[  167.237754][ T9740] team0: Port device team_slave_0 removed
[  167.246529][ T9740] team0: Port device team_slave_1 removed
[  167.253381][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.261678][ T9740] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.277227][ T9740] bond1: (slave veth3): Releasing active interface
[  167.290082][ T9740] bond3: (slave veth5): Releasing active interface
[  167.299236][ T9740] bond4: (slave bridge1): Releasing backup interface
[  167.335274][ T9741] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  167.351641][ T9744] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  167.368200][ T9751] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  167.404818][ T9751] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  167.423363][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'.
[  167.440969][ T9745] vxcan1 speed is unknown, defaulting to 1000
[  167.489854][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'.
[  167.529184][ T9761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.041730][ T9784] syz_tun: entered allmulticast mode
[  168.081336][ T9784] dvmrp1: entered allmulticast mode
[  168.320505][ T9783] syz_tun: left allmulticast mode
[  168.577358][ T9808] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1081'.
[  168.657509][ T9808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1081'.
[  168.888460][ T7614] IPVS: starting estimator thread 0...
[  168.896396][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'.
[  168.913829][ T9830] tipc: Enabled bearer <eth:caif0>, priority 10
[  168.946246][ T9824] netlink: 'syz.4.1087': attribute type 1 has an invalid length.
[  168.969275][ T9824] netlink: 'syz.4.1087': attribute type 2 has an invalid length.
[  168.978654][ T9824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1087'.
[  168.999161][ T9834] IPVS: using max 29 ests per chain, 69600 per kthread
[  169.036289][ T9824] scsi_nl_rcv_msg: discarding partial skb
[  169.065545][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1092'.
[  169.121048][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1092'.
[  169.242334][ T9847] vxcan1 speed is unknown, defaulting to 1000
[  169.653002][ T9870] netlink: 'syz.3.1101': attribute type 1 has an invalid length.
[  169.676389][ T9870] netlink: 'syz.3.1101': attribute type 3 has an invalid length.
[  169.697030][ T9870] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1101'.
[  169.726202][ T9870] NCSI netlink: No device for ifindex 131080
[  169.957311][ T9852] mpoa:mpoad_close: (<unknown>) going down
[  170.187129][ T9901] netlink: 'syz.3.1109': attribute type 33 has an invalid length.
[  170.238381][ T9901] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  170.333792][ T9900] syzkaller0: entered promiscuous mode
[  170.346996][ T9900] syzkaller0: entered allmulticast mode
[  170.436566][ T9909] vxlan0: entered promiscuous mode
[  170.474621][ T9909] vxlan0: entered allmulticast mode
[  170.508760][ T1163] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0
[  170.535277][ T1163] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.667963][ T1163] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.677069][ T1163] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.687580][ T9922] kthread_run failed with err -4
[  171.957565][ T9945] ieee802154 phy1 wpan1: encryption failed: -22
[  171.967425][ T9948] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:0
[  172.005281][ T9948] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:0
[  172.124875][ T9958] __nla_validate_parse: 6 callbacks suppressed
[  172.124896][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'.
[  172.164686][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'.
[  172.216987][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'.
[  172.225483][ T9963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.232678][   T59] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.241739][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'.
[  172.262489][   T59] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.279772][   T59] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.294264][ T9963] team_slave_0: entered allmulticast mode
[  172.354342][ T9963] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  172.384934][ T9963] tipc: Resetting bearer <eth:syzkaller0>
[  172.445382][ T9961] tipc: Disabling bearer <eth:syzkaller0>
[  172.526632][ T9980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'.
[  172.604602][ T9986] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1136'.
[  172.663009][ T9988] netlink: 'syz.0.1138': attribute type 9 has an invalid length.
[  172.696642][ T9988] netlink: 'syz.0.1138': attribute type 9 has an invalid length.
[  172.774844][ T9995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1140'.
[  173.135094][T10022] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001
[  173.170488][T10024] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1147'.
[  173.409208][T10027] netlink: 'syz.0.1148': attribute type 5 has an invalid length.
[  173.448317][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'.
[  173.479549][T10038] netlink: 'syz.3.1151': attribute type 16 has an invalid length.
[  173.488679][T10032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1150'.
[  173.499637][T10036] lo speed is unknown, defaulting to 1000
[  173.507696][T10036] lo speed is unknown, defaulting to 1000
[  173.586565][T10036] lo speed is unknown, defaulting to 1000
[  173.796978][T10049] can: request_module (can-proto-4) failed.
[  173.947214][T10036] infiniband syz0: set down
[  173.951942][T10036] infiniband syz0: added lo
[  173.994742][T10036] RDS/IB: syz0: added
[  173.999557][T10036] smc: adding ib device syz0 with port count 1
[  174.005809][T10036] smc:    ib device syz0 port 1 has pnetid 
[  174.087267][ T7617] lo speed is unknown, defaulting to 1000
[  174.108907][T10067] netlink: 'syz.0.1159': attribute type 10 has an invalid length.
[  174.140985][ T9733] lo speed is unknown, defaulting to 1000
[  174.223455][T10067] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  174.239841][T10036] lo speed is unknown, defaulting to 1000
[  174.891138][T10036] lo speed is unknown, defaulting to 1000
[  175.562507][T10036] lo speed is unknown, defaulting to 1000
[  175.659656][T10122] netlink: 'syz.0.1176': attribute type 11 has an invalid length.
[  175.906389][T10036] lo speed is unknown, defaulting to 1000
[  175.947981][T10131] netlink: 'syz.1.1179': attribute type 1 has an invalid length.
[  175.985012][T10131] smc: adding net device bond0 with user defined pnetid SYZ2
[  175.995258][T10131] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.127121][T10036] lo speed is unknown, defaulting to 1000
[  176.747337][T10167] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  176.755277][T10167] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  177.015874][T10185] netlink: 'syz.2.1195': attribute type 2 has an invalid length.
[  177.171980][T10194] __nla_validate_parse: 10 callbacks suppressed
[  177.171998][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'.
[  177.219095][T10194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'.
[  177.256842][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'.
[  177.266116][T10198] veth0_to_bridge: entered promiscuous mode
[  177.279098][T10194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1198'.
[  177.412173][T10168] mpoa:mpoad_close: (<unknown>) going down
[  177.493266][T10212] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1203'.
[  177.731830][T10219] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003
[  177.900064][ T5873] Bluetooth: hci4: link tx timeout
[  177.905387][ T5873] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  177.984862][T10197] veth0_to_bridge: left promiscuous mode
[  177.998461][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'.
[  178.176603][T10246] netlink: 'syz.0.1214': attribute type 1 has an invalid length.
[  178.187080][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'.
[  178.196473][T10248] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1211'.
[  178.206839][T10244] netlink: 'syz.3.1215': attribute type 21 has an invalid length.
[  178.219199][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1211'.
[  178.286201][T10244] netlink: 'syz.3.1215': attribute type 6 has an invalid length.
[  178.294393][T10244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1215'.
[  178.309975][T10245] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  178.551115][T10267] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  178.787561][T10278] netlink: 'syz.4.1223': attribute type 2 has an invalid length.
[  178.815107][T10278] netlink: 'syz.4.1223': attribute type 1 has an invalid length.
[  178.977823][T10291] team0: Device gtp0 is up. Set it down before adding it as a team port
[  179.070367][T10255] mpoa:mpoad_close: (<unknown>) going down
[  179.261854][T10310] bridge_slave_0: left allmulticast mode
[  179.269013][T10310] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.327490][T10315] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.338519][T10310] bridge_slave_1: left allmulticast mode
[  179.348459][T10310] bridge_slave_1: left promiscuous mode
[  179.358036][T10310] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.430422][T10310] bond0: (slave bond_slave_0): Releasing backup interface
[  179.462663][T10310] bond0: (slave bond_slave_1): Releasing backup interface
[  179.505896][T10310] team0: Port device team_slave_0 removed
[  179.522199][T10310] team0: Port device team_slave_1 removed
[  179.538067][T10310] bond0: (slave wlan1): Releasing backup interface
[  179.569705][T10310] bond1: (slave gretap1): Releasing active interface
[  179.722588][T10333] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20000
[  179.942746][ T5863] Bluetooth: hci4: command 0x0405 tx timeout
[  180.004144][T10352] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  180.235339][T10362] tipc: New replicast peer: 255.255.255.255
[  180.266329][T10362] tipc: Enabled bearer <udp:syz2>, priority 10
[  180.526322][T10379] 0��{X��: entered promiscuous mode
[  181.343212][T10425] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  181.380201][ T7617] tipc: Node number set to 3819557519
[  181.725256][T10460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.768795][T10451] syzkaller0: entered promiscuous mode
[  181.801034][T10451] syzkaller0: entered allmulticast mode
[  181.875526][T10451] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  181.920113][T10451] tipc: Resetting bearer <eth:syzkaller0>
[  181.990209][T10469] 8021q: adding VLAN 0 to HW filter on device bond3
[  182.019383][T10450] tipc: Resetting bearer <eth:syzkaller0>
[  182.096130][T10450] tipc: Disabling bearer <eth:syzkaller0>
[  182.169125][T10484] validate_nla: 1 callbacks suppressed
[  182.169143][T10484] netlink: 'syz.1.1274': attribute type 1 has an invalid length.
[  182.182913][T10484] __nla_validate_parse: 13 callbacks suppressed
[  182.182929][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1274'.
[  182.312633][T10490] netlink: 'syz.2.1276': attribute type 29 has an invalid length.
[  182.328405][T10490] netlink: 'syz.2.1276': attribute type 29 has an invalid length.
[  182.360410][T10490] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1276'.
[  182.437864][T10499] netlink: 'syz.4.1281': attribute type 30 has an invalid length.
[  182.452488][T10502] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1277'.
[  182.680817][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'.
[  182.722607][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'.
[  183.333325][T10540] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.1288'.
[  183.736816][T10572] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1299'.
[  183.818782][T10580] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1297'.
[  183.851945][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'.
[  183.935776][T10585] netlink: 'syz.3.1300': attribute type 21 has an invalid length.
[  183.957611][T10585] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1300'.
[  184.003966][T10583] netlink: 'syz.0.1301': attribute type 1 has an invalid length.
[  184.855584][T10645] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  184.866632][T10594] mpoa:mpoad_close: (<unknown>) going down
[  184.868420][T10645] netlink: 'syz.1.1314': attribute type 10 has an invalid length.
[  184.882678][T10645] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  184.926775][T10645] bridge0: port 3(batadv0) entered disabled state
[  184.944247][T10645] bridge_slave_0: left allmulticast mode
[  184.955568][T10645] bridge_slave_0: left promiscuous mode
[  184.971908][T10645] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.013461][T10645] bridge_slave_1: left allmulticast mode
[  185.048300][T10645] bridge_slave_1: left promiscuous mode
[  185.074352][T10645] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.141008][T10645] team0: Port device team_slave_0 removed
[  185.177084][T10645] team0: Port device team_slave_1 removed
[  185.184528][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.199846][T10645] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.234140][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.249968][T10645] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.276998][T10645] bond1: (slave geneve2): Releasing active interface
[  185.301323][T10645] bond2: (slave geneve3): Releasing backup interface
[  185.337485][T10669] netlink: 'syz.2.1318': attribute type 10 has an invalid length.
[  185.374583][ T1163] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  185.394599][ T1163] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  185.515122][ T1163] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  185.534253][T10672] netlink: 'syz.4.1320': attribute type 10 has an invalid length.
[  185.609268][T10672] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.656896][T10672] bridge_slave_1: left allmulticast mode
[  185.669804][T10672] bridge_slave_1: left promiscuous mode
[  185.675862][T10687] netlink: 'syz.2.1322': attribute type 11 has an invalid length.
[  185.709751][T10672] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.774957][T10672] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  186.729757][T10744] netlink: 'syz.2.1337': attribute type 12 has an invalid length.
[  186.747594][T10745] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  187.271578][T10769] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.361039][T10768] __nla_validate_parse: 12 callbacks suppressed
[  187.361059][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'.
[  187.390334][T10772] netlink: 'syz.0.1345': attribute type 1 has an invalid length.
[  187.419425][T10772] netlink: 'syz.0.1345': attribute type 2 has an invalid length.
[  187.497336][T10780] netlink: 'syz.4.1347': attribute type 33 has an invalid length.
[  187.529184][T10780] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1347'.
[  187.582421][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'.
[  188.387728][T10818] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1357'.
[  188.435277][T10815] bond7 (unregistering): Released all slaves
[  188.509048][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1356'.
[  188.703188][T10833] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1363'.
[  188.725854][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'.
[  188.759689][T10799] mpoa:mpoad_close: (<unknown>) going down
[  188.837713][T10839] netlink: 'syz.1.1365': attribute type 2 has an invalid length.
[  189.194384][T10865] netlink: 'syz.2.1372': attribute type 1 has an invalid length.
[  189.202638][T10865] netlink: 'syz.2.1372': attribute type 1 has an invalid length.
[  189.265018][T10871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1373'.
[  189.317713][T10875] netlink: 'syz.2.1374': attribute type 13 has an invalid length.
[  190.060266][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'.
[  190.082051][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'.
[  190.266791][T10916] netlink: 'syz.1.1386': attribute type 29 has an invalid length.
[  190.303513][T10919] netlink: 'syz.2.1387': attribute type 4 has an invalid length.
[  190.310119][T10916] netlink: 'syz.1.1386': attribute type 29 has an invalid length.
[  190.475808][T10932] nbd: illegal input index -8454144
[  190.710872][T10946] 8021q: adding VLAN 0 to HW filter on device bond5
[  192.412858][T11043] lo: left promiscuous mode
[  192.688448][T11055] validate_nla: 2 callbacks suppressed
[  192.688466][T11055] netlink: 'syz.2.1427': attribute type 23 has an invalid length.
[  192.827343][T11063] __nla_validate_parse: 11 callbacks suppressed
[  192.827364][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'.
[  192.898341][T11066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1430'.
[  193.004383][T11075] netlink: 'syz.3.1431': attribute type 18 has an invalid length.
[  193.016020][T11068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1431'.
[  193.068233][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'.
[  193.090747][T11077] netlink: 'syz.2.1433': attribute type 22 has an invalid length.
[  193.092745][T11074] netlink: 'syz.2.1433': attribute type 5 has an invalid length.
[  193.098753][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'.
[  193.182744][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'.
[  193.194669][T11082] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1435'.
[  193.196105][T11077] netlink: 'syz.2.1433': attribute type 22 has an invalid length.
[  193.246404][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'.
[  193.336021][T11086] bond6: entered promiscuous mode
[  193.344774][T11086] bond6: entered allmulticast mode
[  193.350370][T11086] 8021q: adding VLAN 0 to HW filter on device bond6
[  193.545543][T11086] bond6 (unregistering): Released all slaves
[  193.804998][T11116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1445'.
[  194.040959][T11127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.087316][T11127] syzkaller0: entered promiscuous mode
[  194.094560][T11127] syzkaller0: entered allmulticast mode
[  194.107971][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.264017][T11145] tipc: Resetting bearer <eth:syzkaller0>
[  194.413285][T11145] tipc: Disabling bearer <eth:syzkaller0>
[  194.887787][T11190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1463'.
[  195.518924][T11230] netlink: 'syz.1.1473': attribute type 1 has an invalid length.
[  195.691873][T11224] gretap1: entered promiscuous mode
[  195.702669][T11224] bond3: (slave gretap1): making interface the new active one
[  195.717719][T11224] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  195.904301][T11224] macvlan0: entered promiscuous mode
[  195.910853][T11224] macvlan0: entered allmulticast mode
[  195.919680][T11224] bond3: entered promiscuous mode
[  195.927853][T11224] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  195.938455][T11224] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  195.960834][T11224] bond3: left promiscuous mode
[  196.054540][T11256] netlink: 'syz.0.1481': attribute type 3 has an invalid length.
[  196.492085][T11290] netlink: 'syz.1.1485': attribute type 1 has an invalid length.
[  196.508419][T11290] netlink: 'syz.1.1485': attribute type 1 has an invalid length.
[  196.637276][T11295] delete_channel: no stack
[  196.698173][T11304] netlink: 'syz.2.1494': attribute type 1 has an invalid length.
[  196.920291][T11310] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  196.981593][T11310] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  196.999949][T11310] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  197.867237][T11371] __nla_validate_parse: 11 callbacks suppressed
[  197.867255][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1515'.
[  198.022065][T11377] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.058922][T11377] bond0: (slave rose0): Enslaving as an active interface with an up link
[  198.113609][T11381] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  198.687742][T11405] netlink: 'syz.1.1523': attribute type 33 has an invalid length.
[  199.048745][T11423] netlink: 'syz.4.1526': attribute type 29 has an invalid length.
[  199.086529][T11423] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1526'.
[  199.468184][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'.
[  199.788475][T11411] mpoa:mpoad_close: (<unknown>) going down
[  199.964288][T11460] veth3: entered allmulticast mode
[  200.029137][T11472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1537'.
[  201.859518][ T5873] Bluetooth: hci4: command 0x0405 tx timeout
[  206.421580][ T5870] Bluetooth: hci1: command 0x0406 tx timeout
[  206.422239][ T5868] Bluetooth: hci2: command 0x0406 tx timeout
[  221.856210][T11542] netlink: 'syz.2.1542': attribute type 1 has an invalid length.
[  221.876786][T11542] netlink: 'syz.2.1542': attribute type 4 has an invalid length.
[  221.907656][T11542] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1542'.
[  222.174944][T11560] macvtap1: entered allmulticast mode
[  222.199087][T11560] veth0_macvtap: entered allmulticast mode
[  222.235255][T11560] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1549'.
[  222.258288][T11569] netlink: 'syz.4.1551': attribute type 4 has an invalid length.
[  222.269696][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1551'.
[  222.471072][T11576] tipc: Enabled bearer <udp:syz1>, priority 10
[  222.638823][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1554'.
[  222.782001][T11577] : entered promiscuous mode
[  222.790812][T11590] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1556'.
[  222.862875][T11595] lo: entered promiscuous mode
[  222.902796][T11595] tunl0: entered promiscuous mode
[  222.949743][T11595] gre0: entered promiscuous mode
[  222.983380][T11562] mpoa:mpoad_close: (<unknown>) going down
[  222.990602][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'.
[  223.045037][T11595] gretap0: entered promiscuous mode
[  223.062858][T11595] erspan0: entered promiscuous mode
[  223.092600][T11595] ip_vti0: entered promiscuous mode
[  223.119521][T11612] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1561'.
[  223.388073][T11621] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  223.438938][T11623] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1564'.
[  223.521741][T11628] netlink: 'syz.2.1566': attribute type 1 has an invalid length.
[  223.567484][T11628] 8021q: adding VLAN 0 to HW filter on device bond9
[  223.589904][ T5988] tipc: Node number set to 2891890131
[  223.601843][T11634] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1567'.
[  223.789480][T11649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1571'.
[  223.853791][T11659] netlink: 'syz.1.1573': attribute type 83 has an invalid length.
[  224.394552][T11690] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  224.668024][T11704] netlink: 'syz.3.1586': attribute type 23 has an invalid length.
[  224.695668][T11650] mpoa:mpoad_close: (<unknown>) going down
[  224.711954][T11708] netlink: 'syz.3.1586': attribute type 23 has an invalid length.
[  225.233354][T11738] netlink: 'syz.2.1592': attribute type 16 has an invalid length.
[  225.257259][T11738] netlink: 'syz.2.1592': attribute type 17 has an invalid length.
[  225.393753][T11738] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.402637][T11738] 8021q: adding VLAN 0 to HW filter on device team0
[  225.412653][T11738] batman_adv: batadv0: Interface activated: dummy0
[  225.425191][T11738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.459275][ T5988] lo speed is unknown, defaulting to 1000
[  225.465057][ T5988] syz0: Port: 1 Link ACTIVE
[  225.490243][ T5988] lo speed is unknown, defaulting to 1000
[  226.023175][T11782] veth3: entered allmulticast mode
[  226.489976][T11763] mpoa:mpoad_close: (<unknown>) going down
[  226.557536][T11798] openvswitch: netlink: Duplicate or invalid key (type 0).
[  226.565512][T11798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.911655][T11818] __nla_validate_parse: 9 callbacks suppressed
[  226.911673][T11818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1617'.
[  226.933393][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1617'.
[  226.943538][T11822] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1618'.
[  226.967385][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'.
[  227.573917][T11877] openvswitch: netlink: IPv6 tunnel dst address is zero
[  228.169477][T11886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1631'.
[  228.267083][T11895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1632'.
[  228.762576][T11928] netlink: 'syz.1.1641': attribute type 1 has an invalid length.
[  228.773543][T11928] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1641'.
[  228.848517][T11938] team0: Device vti0 is up. Set it down before adding it as a team port
[  229.019297][T11947] can: request_module (can-proto-5) failed.
[  229.138525][T11961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.285457][T11969] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1652'.
[  229.303995][T11969] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1652'.
[  229.539799][T11990] netlink: 'syz.4.1657': attribute type 27 has an invalid length.
[  229.639606][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1659'.
[  229.685919][T12000] netlink: 'syz.0.1660': attribute type 1 has an invalid length.
[  230.095656][T12024] netlink: 'syz.2.1666': attribute type 12 has an invalid length.
[  230.148049][T12024] : entered promiscuous mode
[  230.265524][T12037] tc_dump_action: action bad kind
[  230.320650][T12035] netlink: 'syz.4.1670': attribute type 2 has an invalid length.
[  230.354034][T12039] netlink: 'syz.4.1670': attribute type 2 has an invalid length.
[  230.532117][T12051] syzkaller1: entered promiscuous mode
[  230.547407][T12051] syzkaller1: entered allmulticast mode
[  230.812644][T12068] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  230.828589][T12068] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.059570][T12082] netem: invalid attributes len -24
[  231.073612][T12082] netem: change failed
[  231.200291][T12092] netlink: 'syz.0.1691': attribute type 10 has an invalid length.
[  231.208186][T12092] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  231.257110][T12092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.825320][T12117] vxcan1 speed is unknown, defaulting to 1000
[  232.036093][T12117] lo speed is unknown, defaulting to 1000
[  232.053535][T12136] netlink: 'syz.2.1705': attribute type 1 has an invalid length.
[  232.130582][T12136] 8021q: adding VLAN 0 to HW filter on device bond11
[  232.140723][T12136] bond10: (slave bond11): making interface the new active one
[  232.149085][T12136] bond10: (slave bond11): Enslaving as an active interface with an up link
[  232.174196][T12136] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  232.200746][T12136] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  232.382562][T12145] __nla_validate_parse: 11 callbacks suppressed
[  232.382581][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'.
[  232.514092][T12153] netlink: 336 bytes leftover after parsing attributes in process `syz.1.1709'.
[  232.539846][T12153] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1709'.
[  232.556671][T12153] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.1709'.
[  232.722956][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'.
[  232.733869][T12170] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  232.746420][T12170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.643782][T12219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1724'.
[  233.821342][T12232] IPVS: set_ctl: invalid protocol: 135 172.20.20.43:20000
[  233.934283][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'.
[  233.995695][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'.
[  234.020030][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'.
[  234.245476][T12261] netlink: 'syz.4.1735': attribute type 1 has an invalid length.
[  234.270664][T12261] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1735'.
[  234.313357][T12264] ipvlan0: entered promiscuous mode
[  234.344838][T12264] ipvlan0: entered allmulticast mode
[  234.369945][T12264] veth0_vlan: entered allmulticast mode
[  234.467364][T12258] vxcan1 speed is unknown, defaulting to 1000
[  234.896356][T12299] tunl0: entered promiscuous mode
[  234.933842][T12299] netlink: 'syz.4.1747': attribute type 3 has an invalid length.
[  235.037407][T12307] netlink: 'syz.1.1749': attribute type 5 has an invalid length.
[  235.046361][T12258] lo speed is unknown, defaulting to 1000
[  235.072732][T12305] batman_adv: batadv0: Interface deactivated: dummy0
[  235.093649][T12305] batman_adv: batadv0: Removing interface: dummy0
[  235.115366][T12305] bridge_slave_0: left allmulticast mode
[  235.124212][T12305] bridge_slave_0: left promiscuous mode
[  235.133272][T12305] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.166137][T12305] bond0: (slave bond_slave_0): Releasing backup interface
[  235.190746][T12305] bond0: (slave bond_slave_1): Releasing backup interface
[  235.222728][T12305] team0: Port device team_slave_0 removed
[  235.233849][T12305] team0: Port device team_slave_1 removed
[  235.240426][T12305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.310709][T12305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.330359][T12305] bond0: (slave wlan1): Releasing backup interface
[  235.357700][T12305] bond0: (slave bond1): Releasing backup interface
[  235.405065][T12305] bond2: (slave gretap1): Releasing active interface
[  235.426055][T12305] team0: Port device bond4 removed
[  235.436265][T12305] team0: Port device bond5 removed
[  235.448540][T12305] bond10: (slave bond11): Releasing backup interface
[  235.479562][T12265] vxcan1 speed is unknown, defaulting to 1000
[  235.491701][T12313] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  235.519887][T12310] syzkaller1: entered promiscuous mode
[  235.529440][T12310] syzkaller1: entered allmulticast mode
[  235.740892][T12330] netlink: 'syz.2.1754': attribute type 16 has an invalid length.
[  235.759138][T12330] netlink: 'syz.2.1754': attribute type 3 has an invalid length.
[  235.772533][T12331] netlink: 'syz.1.1753': attribute type 1 has an invalid length.
[  235.789455][T12330] netlink: 'syz.2.1754': attribute type 7 has an invalid length.
[  235.797671][T12330] netlink: 'syz.2.1754': attribute type 8 has an invalid length.
[  236.009963][T12265] lo speed is unknown, defaulting to 1000
[  236.054993][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059f07400: rx timeout, send abort
[  236.063386][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059cad400: rx timeout, send abort
[  236.072712][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059f07400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  236.087115][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059cad400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  236.444616][T12352] veth7: entered promiscuous mode
[  236.814402][T12369] netlink: 'syz.1.1764': attribute type 21 has an invalid length.
[  237.635536][T12403] netlink: 'syz.3.1774': attribute type 11 has an invalid length.
[  238.001020][T12420] pim6reg1: entered promiscuous mode
[  238.007436][T12420] pim6reg1: entered allmulticast mode
[  238.172809][T12433] __nla_validate_parse: 14 callbacks suppressed
[  238.172828][T12433] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1780'.
[  238.316564][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'.
[  238.348267][T12436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1782'.
[  238.389365][T12436] geneve3: entered promiscuous mode
[  238.409694][T12436] geneve3: entered allmulticast mode
[  238.432198][   T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  238.449077][   T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  238.457721][   T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  238.501152][   T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  238.751737][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1788'.
[  238.770840][T12467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1788'.
[  238.780170][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'.
[  238.904721][T12476] netlink: 'syz.0.1794': attribute type 11 has an invalid length.
[  238.925847][T12476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1794'.
[  238.956807][T12476] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1794'.
[  239.162115][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'.
[  239.214993][T12494] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1798'.
[  239.401686][T12507] validate_nla: 5 callbacks suppressed
[  239.401705][T12507] netlink: 'syz.3.1801': attribute type 7 has an invalid length.
[  239.468402][T12511] raw_sendmsg: syz.2.1803 forgot to set AF_INET. Fix it!
[  239.484564][T12512] netlink: 'syz.3.1801': attribute type 10 has an invalid length.
[  239.493464][T12512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  239.517099][T12512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  239.551385][T12512] team0: Port device hsr0 added
[  239.605426][T12520] netlink: 'syz.4.1804': attribute type 23 has an invalid length.
[  240.138586][T12550] netlink: 'syz.1.1815': attribute type 1 has an invalid length.
[  240.279796][T12550] team0: Mode "" not found
[  240.284683][T12555] netlink: 'syz.2.1817': attribute type 29 has an invalid length.
[  240.303177][T12557] netlink: 'syz.2.1817': attribute type 29 has an invalid length.
[  240.366466][T12562] openvswitch: netlink: Flow actions attr not present in new flow.
[  240.697205][T12586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.772185][T12598] syzkaller0: entered promiscuous mode
[  240.804413][T12598] syzkaller0: entered allmulticast mode
[  240.845868][T12598] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  240.953709][T12582] tipc: Resetting bearer <eth:syzkaller0>
[  241.015450][T12582] tipc: Disabling bearer <eth:syzkaller0>
[  241.021015][T12615] netlink: 'syz.0.1834': attribute type 4 has an invalid length.
[  241.084936][T12615] netlink: 'syz.0.1834': attribute type 4 has an invalid length.
[  241.989771][T12681] netlink: 'syz.4.1858': attribute type 1 has an invalid length.
[  242.055385][T12681] bond6: (slave bridge6): making interface the new active one
[  242.063660][T12681] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  242.148814][T12687] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  242.289115][T12687] macvlan0: entered promiscuous mode
[  242.294484][T12687] macvlan0: entered allmulticast mode
[  242.300528][T12687] veth1_to_bond: entered promiscuous mode
[  242.306531][T12687] veth1_to_bond: entered allmulticast mode
[  242.314220][T12687] team0: Port device macvlan0 added
[  242.447517][T12710] netlink: 'syz.2.1867': attribute type 3 has an invalid length.
[  243.210178][T12762] __nla_validate_parse: 11 callbacks suppressed
[  243.210199][T12762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1880'.
[  243.421169][T12770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.609812][T12785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1888'.
[  243.633671][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'.
[  243.641841][T12785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1888'.
[  243.669353][T12785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1888'.
[  243.678689][T12789] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  243.695861][T12785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1888'.
[  243.706597][T12785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1888'.
[  243.716343][T12785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1888'.
[  243.746779][T12785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1888'.
[  243.770315][T12785] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1888'.
[  244.037686][T12814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.223886][T12824] hsr0 speed is unknown, defaulting to 1000
[  244.254645][T12824] hsr0 speed is unknown, defaulting to 1000
[  244.307705][T12824] hsr0 speed is unknown, defaulting to 1000
[  244.341126][T12824] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  244.429762][T12824] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  244.509373][T12824] hsr0 speed is unknown, defaulting to 1000
[  244.535583][T12824] hsr0 speed is unknown, defaulting to 1000
[  244.555691][T12824] hsr0 speed is unknown, defaulting to 1000
[  244.575968][T12824] hsr0 speed is unknown, defaulting to 1000
[  244.599849][T12824] hsr0 speed is unknown, defaulting to 1000
[  244.751126][T12848] validate_nla: 130 callbacks suppressed
[  244.751164][T12848] netlink: 'syz.1.1907': attribute type 1 has an invalid length.
[  245.209495][T12887] openvswitch: netlink: Flow key attr not present in new flow.
[  245.211736][T12889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.255288][T12891] ip6gre0: Master is either lo or non-ether device
[  245.687020][T12929] netlink: 'syz.3.1927': attribute type 28 has an invalid length.
[  245.705852][T12929] netlink: 'syz.3.1927': attribute type 3 has an invalid length.
[  245.972123][T12947] netlink: 'syz.0.1932': attribute type 29 has an invalid length.
[  245.994362][T12947] netlink: 'syz.0.1932': attribute type 29 has an invalid length.
[  246.005160][T12947] netlink: 'syz.0.1932': attribute type 29 has an invalid length.
[  246.018341][T12947] netlink: 'syz.0.1932': attribute type 29 has an invalid length.
[  246.065473][T12956] netlink: 'syz.4.1933': attribute type 1 has an invalid length.
[  247.043871][T13004] netlink: 'syz.4.1950': attribute type 4 has an invalid length.
[  247.276377][T13024] netlink: 'syz.4.1954': attribute type 6 has an invalid length.
[  247.658317][T13049] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  247.746984][T13048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  247.754359][T13048] IPv6: NLM_F_CREATE should be set when creating new route
[  247.761746][T13048] IPv6: NLM_F_CREATE should be set when creating new route
[  247.785062][T13048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  247.821262][T13048] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  248.234611][T13085] __nla_validate_parse: 80 callbacks suppressed
[  248.234630][T13085] netlink: 604 bytes leftover after parsing attributes in process `syz.2.1970'.
[  248.516507][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'.
[  248.545486][T13107] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1974'.
[  248.568045][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'.
[  248.678210][T13117] openvswitch: netlink: Missing valid actions attribute.
[  248.712755][T13117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.818287][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'.
[  248.873884][T13128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.088191][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1983'.
[  249.131857][T13153] sctp: [Deprecated]: syz.0.1985 (pid 13153) Use of int in max_burst socket option deprecated.
[  249.131857][T13153] Use struct sctp_assoc_value instead
[  249.264615][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1985'.
[  249.299634][T13154] batman_adv: batadv0: Adding interface: wlan1
[  249.308746][T13154] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.338612][T13154] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active
[  249.454118][T13168] syz.1.1988: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  249.475027][T13168] CPU: 1 UID: 0 PID: 13168 Comm: syz.1.1988 Not tainted syzkaller #0 PREEMPT(full) 
[  249.475063][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  249.475080][T13168] Call Trace:
[  249.475088][T13168]  <TASK>
[  249.475096][T13168]  dump_stack_lvl+0x189/0x250
[  249.475146][T13168]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.475171][T13168]  ? __pfx__printk+0x10/0x10
[  249.475199][T13168]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  249.475232][T13168]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  249.475256][T13168]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  249.475298][T13168]  warn_alloc+0x214/0x310
[  249.475334][T13168]  ? __pfx_warn_alloc+0x10/0x10
[  249.475373][T13168]  ? __get_vm_area_node+0x28f/0x300
[  249.475402][T13168]  ? hash_ipportnet_create+0x358/0xfe0
[  249.475439][T13168]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  249.475467][T13168]  ? do_syscall_64+0xfa/0x3b0
[  249.475526][T13168]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  249.475560][T13168]  ? rcu_is_watching+0x15/0xb0
[  249.475581][T13168]  ? hash_ipportnet_create+0x358/0xfe0
[  249.475603][T13168]  ? hash_ipportnet_create+0x358/0xfe0
[  249.475623][T13168]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  249.475651][T13168]  ? hash_ipportnet_create+0x358/0xfe0
[  249.475674][T13168]  ? hash_ipportnet_create+0x2fe/0xfe0
[  249.475712][T13168]  hash_ipportnet_create+0x358/0xfe0
[  249.475741][T13168]  ? __nla_parse+0x40/0x60
[  249.475768][T13168]  ? __pfx_hash_ipportnet_create+0x10/0x10
[  249.475808][T13168]  ip_set_create+0xa94/0x1940
[  249.475831][T13168]  ? ip_set_create+0x4a2/0x1940
[  249.475865][T13168]  ? __pfx_ip_set_create+0x10/0x10
[  249.475925][T13168]  nfnetlink_rcv_msg+0xb4a/0x1130
[  249.475951][T13168]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  249.475996][T13168]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  249.476019][T13168]  ? kasan_save_free_info+0x46/0x50
[  249.476087][T13168]  netlink_rcv_skb+0x205/0x470
[  249.476117][T13168]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  249.476143][T13168]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  249.476183][T13168]  ? bpf_lsm_capable+0x9/0x20
[  249.476209][T13168]  ? security_capable+0x7e/0x2e0
[  249.476246][T13168]  nfnetlink_rcv+0x26a/0x2520
[  249.476274][T13168]  ? __dev_queue_xmit+0x1d79/0x3b50
[  249.476307][T13168]  ? __dev_queue_xmit+0x27b/0x3b50
[  249.476343][T13168]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  249.476366][T13168]  ? __pfx___dev_queue_xmit+0x10/0x10
[  249.476403][T13168]  ? ref_tracker_free+0x63a/0x7d0
[  249.476438][T13168]  ? __asan_memcpy+0x40/0x70
[  249.476461][T13168]  ? __pfx_ref_tracker_free+0x10/0x10
[  249.476510][T13168]  ? skb_clone+0x246/0x3a0
[  249.476534][T13168]  ? __netlink_deliver_tap+0x807/0x850
[  249.476561][T13168]  ? netlink_deliver_tap+0x2e/0x1b0
[  249.476595][T13168]  ? netlink_deliver_tap+0x2e/0x1b0
[  249.476631][T13168]  netlink_unicast+0x82c/0x9e0
[  249.476666][T13168]  ? __pfx_netlink_unicast+0x10/0x10
[  249.476693][T13168]  ? netlink_sendmsg+0x642/0xb30
[  249.476719][T13168]  ? skb_put+0x11b/0x210
[  249.476753][T13168]  netlink_sendmsg+0x805/0xb30
[  249.476791][T13168]  ? __pfx_netlink_sendmsg+0x10/0x10
[  249.476825][T13168]  ? aa_sock_msg_perm+0xf1/0x1d0
[  249.476856][T13168]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  249.476876][T13168]  ? __pfx_netlink_sendmsg+0x10/0x10
[  249.476906][T13168]  __sock_sendmsg+0x219/0x270
[  249.476935][T13168]  ____sys_sendmsg+0x505/0x830
[  249.476961][T13168]  ? __pfx_____sys_sendmsg+0x10/0x10
[  249.476991][T13168]  ? import_iovec+0x74/0xa0
[  249.477016][T13168]  ___sys_sendmsg+0x21f/0x2a0
[  249.477037][T13168]  ? __pfx____sys_sendmsg+0x10/0x10
[  249.477096][T13168]  ? __fget_files+0x2a/0x420
[  249.477125][T13168]  ? __fget_files+0x3a0/0x420
[  249.477165][T13168]  __x64_sys_sendmsg+0x19b/0x260
[  249.477188][T13168]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  249.477221][T13168]  ? do_user_addr_fault+0xc8a/0x1390
[  249.477256][T13168]  ? do_syscall_64+0xbe/0x3b0
[  249.477288][T13168]  do_syscall_64+0xfa/0x3b0
[  249.477315][T13168]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.477341][T13168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.477361][T13168]  ? clear_bhb_loop+0x60/0xb0
[  249.477385][T13168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.477404][T13168] RIP: 0033:0x7fc4c638ebe9
[  249.477429][T13168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.477446][T13168] RSP: 002b:00007fc4c45b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  249.477466][T13168] RAX: ffffffffffffffda RBX: 00007fc4c65b6180 RCX: 00007fc4c638ebe9
[  249.477481][T13168] RDX: 0000000000004020 RSI: 0000200000000040 RDI: 0000000000000003
[  249.477504][T13168] RBP: 00007fc4c6411e19 R08: 0000000000000000 R09: 0000000000000000
[  249.477515][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  249.477526][T13168] R13: 00007fc4c65b6218 R14: 00007fc4c65b6180 R15: 00007ffe0c60c698
[  249.477556][T13168]  </TASK>
[  249.477876][T13168] Mem-Info:
[  249.865973][T13163] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ
�D��UD�w�}�z
[  249.881214][T13168] active_anon:4590 inactive_anon:0 isolated_anon:0
[  249.881214][T13168]  active_file:2565 inactive_file:39885 isolated_file:0
[  249.881214][T13168]  unevictable:768 dirty:116 writeback:0
[  249.881214][T13168]  slab_reclaimable:11824 slab_unreclaimable:113933
[  249.881214][T13168]  mapped:30050 shmem:1357 pagetables:1126
[  249.881214][T13168]  sec_pagetables:0 bounce:0
[  249.881214][T13168]  kernel_misc_reclaimable:0
[  249.881214][T13168]  free:1310651 free_pcp:17733 free_cma:0
[  250.049314][T13168] Node 0 active_anon:18260kB inactive_anon:0kB active_file:10260kB inactive_file:159336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120000kB dirty:464kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13416kB pagetables:4272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  250.109167][T13168] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  250.148548][T13168] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  250.216270][T13168] lowmem_reserve[]: 0 2497 2499 2499 2499
[  250.226302][T13168] Node 0 DMA32 free:1350836kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17916kB inactive_anon:0kB active_file:10260kB inactive_file:157768kB unevictable:1536kB writepending:464kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:47840kB local_pcp:28632kB free_cma:0kB
[  250.289021][T13168] lowmem_reserve[]: 0 0 1 1 1
[  250.293796][T13168] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  250.374633][T13168] lowmem_reserve[]: 0 0 0 0 0
[  250.394816][T13168] Node 1 Normal free:3875712kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24340kB local_pcp:9484kB free_cma:0kB
[  250.440461][T13168] lowmem_reserve[]: 0 0 0 0 0
[  250.445237][T13168] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  250.458407][T13168] Node 0 DMA32: 823*4kB (UM) 323*8kB (UM) 138*16kB (UME) 407*32kB (UM) 17*64kB (UME) 68*128kB (UM) 48*256kB (UME) 38*512kB (UME) 18*1024kB (UME) 6*2048kB (UME) 307*4096kB (UM) = 1350836kB
[  250.482668][T13168] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  250.512150][T13168] Node 1 Normal: 234*4kB (UE) 59*8kB (UME) 52*16kB (UME) 108*32kB (UME) 31*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 942*4096kB (M) = 3875712kB
[  250.518235][T13193] validate_nla: 3 callbacks suppressed
[  250.518261][T13193] netlink: 'syz.4.1996': attribute type 1 has an invalid length.
[  250.536138][T13168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  250.553922][T13168] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  250.563289][T13168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  250.573189][T13168] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  250.584952][T13168] 43803 total pagecache pages
[  250.599515][T13168] 0 pages in swap cache
[  250.603754][T13168] Free swap  = 124996kB
[  250.608158][T13168] Total swap = 124996kB
[  250.613039][T13168] 2097051 pages RAM
[  250.616855][T13168] 0 pages HighMem/MovableOnly
[  250.621906][T13168] 425656 pages reserved
[  250.626429][T13168] 0 pages cma reserved
[  250.655738][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1995'.
[  250.673641][T13193] 8021q: adding VLAN 0 to HW filter on device bond7
[  250.708621][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1995'.
[  250.966673][T13211] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2001'.
[  251.097352][T13222] netlink: 'syz.0.2005': attribute type 21 has an invalid length.
[  251.105685][T13222] IPv6: NLM_F_CREATE should be specified when creating new route
[  251.957284][T13280] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  251.987169][T13280] netlink: 'syz.3.2025': attribute type 1 has an invalid length.
[  252.043515][T13281] netlink: 'syz.2.2024': attribute type 10 has an invalid length.
[  252.064202][T13281] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  252.203614][T13288] openvswitch: netlink: Missing valid actions attribute.
[  252.239121][T13288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.454595][T13300] syzkaller0: entered promiscuous mode
[  252.466373][T13300] syzkaller0: entered allmulticast mode
[  252.743389][T13319] netlink: 'syz.3.2033': attribute type 13 has an invalid length.
[  253.931041][T13319] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.941532][T13319] 8021q: adding VLAN 0 to HW filter on device team0
[  253.950443][T13319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.136868][T13352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.339572][T13372] netlink: 'syz.0.2048': attribute type 1 has an invalid length.
[  254.347368][T13372] netlink: 'syz.0.2048': attribute type 2 has an invalid length.
[  254.368528][T13372] __nla_validate_parse: 7 callbacks suppressed
[  254.368544][T13372] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.2048'.
[  254.504524][T13386] netlink: 'syz.1.2047': attribute type 2 has an invalid length.
[  254.530022][T13388] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2049'.
[  254.702719][   T30] audit: type=1800 audit(1755611022.070:5): pid=13379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2047" name="memory.events" dev="tmpfs" ino=2079 res=0 errno=0
[  255.154586][T13410] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2058'.
[  255.327797][T13418] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.2060'.
[  255.484118][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'.
[  255.523877][T13429] team_slave_1: entered promiscuous mode
[  255.530523][T13429] macsec2: entered promiscuous mode
[  255.535931][T13429] team0: entered promiscuous mode
[  255.547677][T13429] team_slave_0: entered promiscuous mode
[  255.547698][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  255.558129][T13429] macsec2: entered allmulticast mode
[  255.565334][T13429] team0: entered allmulticast mode
[  255.577902][T13429] team_slave_0: entered allmulticast mode
[  255.589866][T13429] team_slave_1: entered allmulticast mode
[  255.609994][T13429] team0: Device macsec2 is already an upper device of the team interface
[  255.629622][T13429] team0: left allmulticast mode
[  255.634671][T13429] team_slave_0: left allmulticast mode
[  255.647663][T13429] team_slave_1: left allmulticast mode
[  255.654657][T13429] team0: left promiscuous mode
[  255.663117][T13429] team_slave_0: left promiscuous mode
[  255.671418][T13429] team_slave_1: left promiscuous mode
[  255.996615][T13451] netlink: 'syz.1.2069': attribute type 29 has an invalid length.
[  256.015052][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2069'.
[  256.503784][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2078'.
[  256.804579][T13500] netlink: 'syz.2.2084': attribute type 29 has an invalid length.
[  256.832511][T13500] netlink: 'syz.2.2084': attribute type 29 has an invalid length.
[  256.895028][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'.
[  257.478843][T13545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2095'.
[  258.093767][T13560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2098'.
[  258.521112][   T30] audit: type=1800 audit(1755611025.880:6): pid=13579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2102" name=02 dev="tmpfs" ino=2040 res=0 errno=0
[  258.668394][T13586] netlink: 'syz.1.2105': attribute type 10 has an invalid length.
[  258.697414][T13586] batadv0: left promiscuous mode
[  258.707804][T13586] batadv0: left allmulticast mode
[  259.119834][T13616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.127805][T13616] syzkaller0: entered promiscuous mode
[  259.133749][T13616] syzkaller0: entered allmulticast mode
[  259.152338][T13616] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  259.230311][T13616] tipc: Resetting bearer <eth:syzkaller0>
[  259.249504][T13612] tipc: Resetting bearer <eth:syzkaller0>
[  259.303704][T13612] tipc: Disabling bearer <eth:syzkaller0>
[  259.752300][T13595] mpoa:mpoad_close: (<unknown>) going down
[  259.785129][T13656] netlink: 'syz.3.2125': attribute type 6 has an invalid length.
[  259.915524][T13663] __nla_validate_parse: 7 callbacks suppressed
[  259.915543][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'.
[  260.012761][T13667] netlink: 'syz.3.2126': attribute type 1 has an invalid length.
[  260.076928][T13667] 8021q: adding VLAN 0 to HW filter on device bond9
[  260.105791][T13673] vlan2: entered promiscuous mode
[  260.135595][T13673] bond9: entered promiscuous mode
[  260.145533][T13673] vlan2: entered allmulticast mode
[  260.153983][T13673] bond9: entered allmulticast mode
[  260.268643][T13679] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2129'.
[  260.308220][T13681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.614163][T13690] syzkaller0: entered promiscuous mode
[  260.621245][T13690] syzkaller0: entered allmulticast mode
[  261.133828][T13737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2141'.
[  262.484048][T13757] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2147'.
[  262.500815][T13757] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2147'.
[  262.528579][T13757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2147'.
[  262.604841][T13764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.615257][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.636654][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.682514][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2152'.
[  262.691799][ T7613] ------------[ cut here ]------------
[  262.697626][ T7613] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  262.708576][ T7613] WARNING: CPU: 1 PID: 7613 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  262.718644][ T7613] Modules linked in:
[  262.722824][ T7613] CPU: 1 UID: 0 PID: 7613 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full) 
[  262.732379][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  262.742475][ T7613] Workqueue: mld mld_ifc_work
[  262.747192][ T7613] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  262.753514][ T7613] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 6d b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 69 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  262.773172][ T7613] RSP: 0018:ffffc9001b2664d8 EFLAGS: 00010246
[  262.779341][ T7613] RAX: 0331647bd931ea00 RBX: 000000000000000c RCX: ffff88805872bc00
[  262.787383][ T7613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  262.795483][ T7613] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  262.803503][ T7613] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88823bf2c028
[  262.811524][ T7613] R13: 0000000000000000 R14: ffff88801c750e40 R15: ffff88801c7530d8
[  262.819572][ T7613] FS:  0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
[  262.828528][ T7613] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  262.835158][ T7613] CR2: 000000110c25444f CR3: 0000000056846000 CR4: 00000000003526f0
[  262.843181][ T7613] Call Trace:
[  262.843235][T13776] siw: device registration error -23
[  262.846475][ T7613]  <TASK>
[  262.846541][ T7613]  rate_control_send_low+0x194/0x7a0
[  262.860067][ T7613]  rate_control_get_rate+0x20b/0x5d0
[  262.865408][ T7613]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  262.871118][ T7613]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  262.877265][ T7613]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  262.883568][ T7613]  invoke_tx_handlers_late+0xb6/0x1820
[  262.889100][ T7613]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  262.895036][ T7613]  ieee80211_tx_dequeue+0x308e/0x4360
[  262.900550][ T7613]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  262.906312][ T7613]  ? __local_bh_enable_ip+0x12d/0x1c0
[  262.911772][ T7613]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  262.917888][ T7613]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  262.924539][ T7613]  ? __local_bh_enable_ip+0x12d/0x1c0
[  262.929968][ T7613]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  262.935717][ T7613]  ? do_raw_spin_unlock+0x122/0x240
[  262.940980][ T7613]  ieee80211_queue_skb+0x1a2e/0x21c0
[  262.946338][ T7613]  ieee80211_tx+0x297/0x420
[  262.950902][ T7613]  ? __pfx_ieee80211_tx+0x10/0x10
[  262.955981][ T7613]  ? ieee80211_xmit+0x315/0x400
[  262.960879][ T7613]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  262.966980][ T7613]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  262.973162][ T7613]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  262.979635][ T7613]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  262.985945][ T7613]  ieee80211_subif_start_xmit+0xe0/0x510
[  262.991714][ T7613]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  262.997962][ T7613]  ? __pfx_netif_skb_features+0x10/0x10
[  263.003565][ T7613]  ? call_rcu+0x6ff/0x9c0
[  263.007953][ T7613]  ? __lock_acquire+0xab9/0xd20
[  263.012898][ T7613]  dev_hard_start_xmit+0x2d4/0x830
[  263.018089][ T7613]  __dev_queue_xmit+0x1b8d/0x3b50
[  263.023162][ T7613]  ? register_lock_class+0x51/0x320
[  263.028414][ T7613]  ? __dev_queue_xmit+0x27b/0x3b50
[  263.033608][ T7613]  ? __pfx___dev_queue_xmit+0x10/0x10
[  263.039020][ T7613]  ? read_seqbegin+0x122/0x250
[  263.043804][ T7613]  ? neigh_resolve_output+0x438/0x750
[  263.049238][ T7613]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.054474][ T7613]  ? read_seqbegin+0x1ac/0x250
[  263.059290][ T7613]  ? __pfx_read_seqbegin+0x10/0x10
[  263.064427][ T7613]  ? __local_bh_enable_ip+0x12d/0x1c0
[  263.069867][ T7613]  ? eth_header+0x11b/0x200
[  263.074408][ T7613]  ? __asan_memcpy+0x40/0x70
[  263.079095][ T7613]  ip6_finish_output2+0x11fb/0x16a0
[  263.084320][ T7613]  ? ip6_finish_output2+0x701/0x16a0
[  263.089658][ T7613]  ? ip6_mtu+0x7d/0x3f0
[  263.093841][ T7613]  ? __pfx_ip6_finish_output2+0x10/0x10
[  263.099441][ T7613]  ? ip6_mtu+0x7d/0x3f0
[  263.103628][ T7613]  ? ip6_mtu+0x321/0x3f0
[  263.107877][ T7613]  ? ip6_finish_output+0x2ef/0x4e0
[  263.113008][ T7613]  NF_HOOK+0x9e/0x380
[  263.116991][ T7613]  ? NF_HOOK+0x101/0x380
[  263.121262][ T7613]  ? __pfx_NF_HOOK+0x10/0x10
[  263.125864][ T7613]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  263.131705][ T7613]  ? do_raw_spin_unlock+0x122/0x240
[  263.136933][ T7613]  ? icmp6_dst_alloc+0x3a5/0x420
[  263.141915][ T7613]  ? icmp6_dst_alloc+0x3a5/0x420
[  263.146874][ T7613]  mld_sendpack+0x800/0xd80
[  263.151440][ T7613]  ? mld_sendpack+0x1de/0xd80
[  263.156154][ T7613]  ? __pfx_mld_sendpack+0x10/0x10
[  263.161512][ T7613]  mld_ifc_work+0x83e/0xd60
[  263.166033][ T7613]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.171274][ T7613]  ? process_scheduled_works+0x9ef/0x17b0
[  263.177020][ T7613]  process_scheduled_works+0xae1/0x17b0
[  263.182634][ T7613]  ? __pfx_process_scheduled_works+0x10/0x10
[  263.188656][ T7613]  worker_thread+0x8a0/0xda0
[  263.193290][ T7613]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  263.199677][ T7613]  ? __kthread_parkme+0x7b/0x200
[  263.204648][ T7613]  kthread+0x711/0x8a0
[  263.208725][ T7613]  ? __pfx_worker_thread+0x10/0x10
[  263.213860][ T7613]  ? __pfx_kthread+0x10/0x10
[  263.218469][ T7613]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.223700][ T7613]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.228954][ T7613]  ? __pfx_kthread+0x10/0x10
[  263.233565][ T7613]  ret_from_fork+0x3f9/0x770
[  263.238163][ T7613]  ? __pfx_ret_from_fork+0x10/0x10
[  263.243309][ T7613]  ? __switch_to_asm+0x39/0x70
[  263.248093][ T7613]  ? __switch_to_asm+0x33/0x70
[  263.252892][ T7613]  ? __pfx_kthread+0x10/0x10
[  263.257517][ T7613]  ret_from_fork_asm+0x1a/0x30
[  263.262342][ T7613]  </TASK>
[  263.265367][ T7613] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  263.272653][ T7613] CPU: 1 UID: 0 PID: 7613 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full) 
[  263.282035][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  263.292105][ T7613] Workqueue: mld mld_ifc_work
[  263.296803][ T7613] Call Trace:
[  263.300099][ T7613]  <TASK>
[  263.303036][ T7613]  dump_stack_lvl+0x99/0x250
[  263.307625][ T7613]  ? __asan_memcpy+0x40/0x70
[  263.312227][ T7613]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.317451][ T7613]  ? __pfx__printk+0x10/0x10
[  263.322059][ T7613]  vpanic+0x281/0x750
[  263.326048][ T7613]  ? __pfx__printk+0x10/0x10
[  263.330649][ T7613]  ? __pfx_vpanic+0x10/0x10
[  263.335199][ T7613]  ? is_bpf_text_address+0x292/0x2b0
[  263.340504][ T7613]  panic+0xb9/0xc0
[  263.344263][ T7613]  ? __pfx_panic+0x10/0x10
[  263.348700][ T7613]  __warn+0x31b/0x4b0
[  263.352706][ T7613]  ? __rate_control_send_low+0x5df/0x820
[  263.358360][ T7613]  ? __rate_control_send_low+0x5df/0x820
[  263.364037][ T7613]  report_bug+0x2be/0x4f0
[  263.368379][ T7613]  ? __rate_control_send_low+0x5df/0x820
[  263.374017][ T7613]  ? __rate_control_send_low+0x5df/0x820
[  263.379662][ T7613]  ? __rate_control_send_low+0x5e1/0x820
[  263.385312][ T7613]  handle_bug+0x84/0x160
[  263.389568][ T7613]  exc_invalid_op+0x1a/0x50
[  263.394080][ T7613]  asm_exc_invalid_op+0x1a/0x20
[  263.398945][ T7613] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  263.405210][ T7613] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 6d b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 b2 69 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  263.424816][ T7613] RSP: 0018:ffffc9001b2664d8 EFLAGS: 00010246
[  263.430886][ T7613] RAX: 0331647bd931ea00 RBX: 000000000000000c RCX: ffff88805872bc00
[  263.438855][ T7613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  263.446823][ T7613] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  263.454794][ T7613] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88823bf2c028
[  263.462774][ T7613] R13: 0000000000000000 R14: ffff88801c750e40 R15: ffff88801c7530d8
[  263.470788][ T7613]  ? __rate_control_send_low+0x5de/0x820
[  263.476456][ T7613]  rate_control_send_low+0x194/0x7a0
[  263.481755][ T7613]  rate_control_get_rate+0x20b/0x5d0
[  263.487070][ T7613]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  263.492738][ T7613]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  263.498826][ T7613]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  263.505077][ T7613]  invoke_tx_handlers_late+0xb6/0x1820
[  263.510562][ T7613]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  263.516502][ T7613]  ieee80211_tx_dequeue+0x308e/0x4360
[  263.521969][ T7613]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  263.527700][ T7613]  ? __local_bh_enable_ip+0x12d/0x1c0
[  263.533098][ T7613]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  263.539186][ T7613]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  263.545783][ T7613]  ? __local_bh_enable_ip+0x12d/0x1c0
[  263.551169][ T7613]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  263.556910][ T7613]  ? do_raw_spin_unlock+0x122/0x240
[  263.562476][ T7613]  ieee80211_queue_skb+0x1a2e/0x21c0
[  263.567808][ T7613]  ieee80211_tx+0x297/0x420
[  263.572331][ T7613]  ? __pfx_ieee80211_tx+0x10/0x10
[  263.577397][ T7613]  ? ieee80211_xmit+0x315/0x400
[  263.582271][ T7613]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  263.588272][ T7613]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  263.594436][ T7613]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  263.600855][ T7613]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  263.607100][ T7613]  ieee80211_subif_start_xmit+0xe0/0x510
[  263.612735][ T7613]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  263.618991][ T7613]  ? __pfx_netif_skb_features+0x10/0x10
[  263.624539][ T7613]  ? call_rcu+0x6ff/0x9c0
[  263.628872][ T7613]  ? __lock_acquire+0xab9/0xd20
[  263.633760][ T7613]  dev_hard_start_xmit+0x2d4/0x830
[  263.638888][ T7613]  __dev_queue_xmit+0x1b8d/0x3b50
[  263.643920][ T7613]  ? register_lock_class+0x51/0x320
[  263.649143][ T7613]  ? __dev_queue_xmit+0x27b/0x3b50
[  263.654293][ T7613]  ? __pfx___dev_queue_xmit+0x10/0x10
[  263.659674][ T7613]  ? read_seqbegin+0x122/0x250
[  263.664451][ T7613]  ? neigh_resolve_output+0x438/0x750
[  263.669834][ T7613]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.675048][ T7613]  ? read_seqbegin+0x1ac/0x250
[  263.679825][ T7613]  ? __pfx_read_seqbegin+0x10/0x10
[  263.684958][ T7613]  ? __local_bh_enable_ip+0x12d/0x1c0
[  263.690363][ T7613]  ? eth_header+0x11b/0x200
[  263.694881][ T7613]  ? __asan_memcpy+0x40/0x70
[  263.699501][ T7613]  ip6_finish_output2+0x11fb/0x16a0
[  263.704825][ T7613]  ? ip6_finish_output2+0x701/0x16a0
[  263.710129][ T7613]  ? ip6_mtu+0x7d/0x3f0
[  263.714289][ T7613]  ? __pfx_ip6_finish_output2+0x10/0x10
[  263.719861][ T7613]  ? ip6_mtu+0x7d/0x3f0
[  263.724040][ T7613]  ? ip6_mtu+0x321/0x3f0
[  263.728301][ T7613]  ? ip6_finish_output+0x2ef/0x4e0
[  263.733417][ T7613]  NF_HOOK+0x9e/0x380
[  263.737410][ T7613]  ? NF_HOOK+0x101/0x380
[  263.741660][ T7613]  ? __pfx_NF_HOOK+0x10/0x10
[  263.746273][ T7613]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  263.752081][ T7613]  ? do_raw_spin_unlock+0x122/0x240
[  263.757293][ T7613]  ? icmp6_dst_alloc+0x3a5/0x420
[  263.762247][ T7613]  ? icmp6_dst_alloc+0x3a5/0x420
[  263.767190][ T7613]  mld_sendpack+0x800/0xd80
[  263.771730][ T7613]  ? mld_sendpack+0x1de/0xd80
[  263.776424][ T7613]  ? __pfx_mld_sendpack+0x10/0x10
[  263.781470][ T7613]  mld_ifc_work+0x83e/0xd60
[  263.785977][ T7613]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.791179][ T7613]  ? process_scheduled_works+0x9ef/0x17b0
[  263.796903][ T7613]  process_scheduled_works+0xae1/0x17b0
[  263.802471][ T7613]  ? __pfx_process_scheduled_works+0x10/0x10
[  263.808470][ T7613]  worker_thread+0x8a0/0xda0
[  263.813062][ T7613]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  263.819400][ T7613]  ? __kthread_parkme+0x7b/0x200
[  263.824361][ T7613]  kthread+0x711/0x8a0
[  263.828451][ T7613]  ? __pfx_worker_thread+0x10/0x10
[  263.833562][ T7613]  ? __pfx_kthread+0x10/0x10
[  263.838162][ T7613]  ? _raw_spin_unlock_irq+0x23/0x50
[  263.843370][ T7613]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.848569][ T7613]  ? __pfx_kthread+0x10/0x10
[  263.853166][ T7613]  ret_from_fork+0x3f9/0x770
[  263.857766][ T7613]  ? __pfx_ret_from_fork+0x10/0x10
[  263.862890][ T7613]  ? __switch_to_asm+0x39/0x70
[  263.867659][ T7613]  ? __switch_to_asm+0x33/0x70
[  263.872440][ T7613]  ? __pfx_kthread+0x10/0x10
[  263.877051][ T7613]  ret_from_fork_asm+0x1a/0x30
[  263.881839][ T7613]  </TASK>
[  263.885375][ T7613] Kernel Offset: disabled
[  263.889704][ T7613] Rebooting in 86400 seconds..