last executing test programs:

16.347581349s ago: executing program 0 (id=3197):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x2, 0x10000004, {0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffee16}}}, 0x3a) (async)
connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x2, 0x10000004, {0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffee16}}}, 0x3a)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r6)
ioctl$SIOCSIFHWADDR(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"})
openat$cgroup_ro(r6, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) (async)
openat$cgroup_ro(r6, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
close(0x4)

16.079213795s ago: executing program 0 (id=3201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xc9f2, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000380)={'ip6_vti0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}})
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1ff, 0x12}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x840)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000140)={@private0={0xfc, 0x0, '\x00', 0x1}, r7}, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x20, r1, 0x10, 0x70bd2d, 0x3, {{0x2}, {@void, @val={0xc, 0x99, {0x3, 0x6b}}}}}, 0x20}, 0x1, 0x6c00}, 0xc000000)

15.806530341s ago: executing program 0 (id=3205):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000001540)={0x24, @none={0x0, 0x3}}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x800)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(0x0, r7)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf060200000008000100"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r9=>0x0})
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x30, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x50a262ba7c3cbb5f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040))

15.330100065s ago: executing program 0 (id=3210):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000000))
r4 = socket$packet(0x11, 0x2, 0x300)
unshare(0x22020400)
getpeername$packet(r4, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x62, 0x1ff}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0)

15.09883527s ago: executing program 0 (id=3214):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208080, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="8ec64400b8fa7f12e8c1f5bc8f913bc7dbcabeecd55154860828d55496523eff2f8240f1", 0x24}], 0x1) (async)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000002000010000000000000000000a000080ffffffffffff0000140011"], 0x30}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0)

14.852972362s ago: executing program 0 (id=3215):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x50}, 0x1, 0x7}, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x50}, 0x1, 0x7}, 0x0) (async)

7.017125858s ago: executing program 2 (id=3284):
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x67b}, {0xfffd, 0x6, 0x29, 0x200020}]}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r5, &(0x7f00000039c0)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400fcc1", @ANYRES16=r2, @ANYBLOB="00082dbd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}]}}]}, 0x98}}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000180)=0x4abf, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x15)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000040010000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000100ffffffff", 0x58}], 0x1)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x0, @local, 0x6}]}, &(0x7f0000000180)=0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000080), &(0x7f0000000240)=r12}, 0x20)
r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x21, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000004000000000000000050000008520000005000000b3a4feff0400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000009100000085a0ff0005000000181100007fde79d0b3da8bef614363eae9b9e114ae0df41bba5b9552855c498a9fd82418a2a1446c3e6669fb2b", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018520000090000000000000000000000851000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003e78000085000000060000008520000005000000183b00000200000000000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xb, 0xca, &(0x7f0000000580)=""/202, 0x0, 0x10, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x5, 0x4, 0xd, 0x2}, {0x0, 0x5, 0x5, 0x4}, {0x0, 0x2, 0xb, 0x4}, {0x1, 0x2, 0x3, 0x4}], 0x10, 0xb}, 0x94)
getpeername(r0, &(0x7f0000000100)=@qipcrtr, &(0x7f00000001c0)=0x80)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={<r14=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000000)={r14, 0xd58}, 0x8)

6.883042323s ago: executing program 2 (id=3287):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
connect$l2tp(0xffffffffffffffff, &(0x7f0000005280)={0x2, 0x0, @local, 0x1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
read$alg(r6, &(0x7f0000000040)=""/136, 0x88)
sendmsg$nl_route(r4, 0x0, 0x4000040)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
recvmmsg(r7, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e000008fcff07000400000001000000d2641b7b660ca4413f3bfd9a48d02c7e54d0940666e372efda2434d5717886a1403b0d081d191872b202e58535d7cc8068db660eeb5ce316747b44353bc56d3154669ca699458be11ef9fe5ad60b699d03eee5864b9d86828c42bd978521a0ba8608f43e9267faed678e776a1d4ae8ed68e1ebbe2035773a"], 0x14}}, 0x4008094)
r8 = socket(0x1a, 0x800, 0x7ff)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000040)={0x0, 'wg1\x00', {0x2}, 0xc756})
connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'veth0_vlan\x00'}}, 0x1e)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x368, 0x18, 0x1, 0x2, 0x0, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1f3}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcb}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd14}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x98, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4d8e}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd703}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xda}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x368}}, 0x0)
r9 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x3, 0x154, @vifc_lcl_addr=@rand_addr=0x64010102, @private=0xa010102}, 0x10)

6.452479192s ago: executing program 2 (id=3293):
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x5, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_buf(r2, 0x29, 0x1a, 0x0, &(0x7f00000001c0))
sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1, 0x8014)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80)
ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000007880)="0ecd")
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x13, 0x0, &(0x7f00000004c0))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000000240))
sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]]}, 0x2c}}, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r11, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0)
sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r11, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x1)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)

6.223973785s ago: executing program 2 (id=3296):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x8001, 0x0, 0x0, 0x82300, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x3, 0x18600000, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20)
pipe(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000400))
r4 = accept4$unix(r3, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e, 0x800)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'lo\x00', <r5=>0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', <r7=>r5, 0x2f, 0x0, 0x80, 0x240000, 0xa, @private0, @empty, 0x7899, 0x20, 0x1}})
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000600)={0x2, "02086c"}, 0x6)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x328, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000640), {[{{@ip={@remote, @multicast2, 0xff, 0xffffffff, 'veth1_virt_wifi\x00', 'wlan0\x00', {}, {0xff}, 0x6c, 0x3, 0x2a}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x49, 0xa0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x6, 0x7, 0x5, 0x4, 0x3, 0x4], 0x3, 0x4}, {0xffffffffffffffff, [0x1, 0x5, 0x7, 0x8, 0x3], 0x2, 0x4}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x90a, 0x100, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x0, 0x1, 0x1, 0x4, 0x3], 0x4, 0x3}, {0x1, [0x2, 0x0, 0x2, 0x1, 0x0, 0x2], 0x3, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3, 0x600}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@bridge_getvlan={0x38, 0x72, 0x10, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
socket$l2tp6(0xa, 0x2, 0x73)
splice(r3, &(0x7f0000000b40)=0x3, r0, &(0x7f0000000b80)=0x8, 0x100000001, 0x6)
ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f0000000bc0)={0x80})
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000c80)=0x8)
ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f0000000cc0)={'veth0_to_team\x00', {0x2, 0x0, @initdev}})
syz_emit_ethernet(0x56, &(0x7f0000000d00)={@broadcast, @random="4e3e7f92b036", @void, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x2f, 0x2, 0x0, 0x0, "0002ebb998630c40c3d1fecc21f2669f6649cb886364e366c887b659bdba32d0ee4bc876b57f2fa760e7192dd5299b7859c34ded56dc033e164ee57553601e6c"}}}}, &(0x7f0000000d80)={0x0, 0x2, [0xc14, 0xd03, 0x9c7, 0xb34]})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname$packet(r2, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e00)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r9, 0x6a3af000)
ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000e40)=0xffffffffffffffff)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040841}, 0x40840)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), r2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x5, '\x00', r7, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)
getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000001040)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x7, 0x80, 0x8001, 0x6, 0x1cb]}, &(0x7f00000010c0)=0x78)
ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f0000001140)={{r9}, 0x1, &(0x7f0000001100)=[0xffffffffffffffff], 0x3, 0x2})

6.046960945s ago: executing program 2 (id=3299):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x1fcf}}, 0x0, 0x0, 0x3f, 0x0, "34b4cd04032119e5b9358ab008d64d23d37d0684330b9822d52059f471d511c3730f4ee62103b8782c561daf37d3b4c7c540a693f71a75782f24ebaf48637f6026d20b578d4f9799d13ceafef728cf68"}, 0xd8)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
syz_80211_inject_frame(&(0x7f0000001d00), &(0x7f0000001d40)=@ctrl_frame=@ba={{}, {0x9}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x5, {0x2, 0x8a1}, "0a7744bb986ee73f"}, {0x0, 0x6, {0x6, 0x6}, "37fb3b2b134f154f"}, {0x0, 0x2, {0x8, 0x6}, "547de6caca9fa64d"}, {0x0, 0x0, {0x3, 0x2}, "90af0236f0639e05"}, {0x0, 0x5, {0x3, 0x11}, "4061a1b707c1b6d6"}, {0x0, 0x2, {0x6, 0x8}, "8e01dbffd8a06731"}, {0x0, 0x3, {0x7, 0x10}, "bb9a6f81d1fd7369"}, {0x0, 0x2, {0x4, 0x9}, "d79d34a8cea914ad"}], {0x0, 0x0, {0x3, 0x4}, "a3dfb2e51a424137"}}}, 0x7e)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x8, 0x4)

5.185562289s ago: executing program 2 (id=3305):
socket$inet6(0xa, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3)
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000000840)=""/4097, 0x1001}, {&(0x7f0000000540)=""/202, 0xca}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002c40)=""/199, 0xc7}, {&(0x7f0000002d40)=""/254, 0xfe}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000001c00)=""/4103, 0x1007}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x7}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x8001}], 0x2, 0x40000002, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x88, 0x1403, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x44014)
r5 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xe, 0xb}}}, 0x24}}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r7, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

4.293876651s ago: executing program 3 (id=3310):
r0 = socket(0x29, 0x5, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x8, 0x39) (async)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0x8, 0x39)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x0, 0x0) (async)
recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000300)={'ip_vti0\x00', r3, 0x8000, 0x700, 0x5, 0x6, {{0x49, 0x4, 0x0, 0x1, 0x124, 0xaf63, 0x0, 0xf1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@end, @timestamp_addr={0x44, 0x44, 0x1c, 0x1, 0x0, [{@multicast2, 0x2}, {@remote, 0x3}, {@local, 0x5}, {@remote, 0x1}, {@multicast2, 0x9}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x5}]}, @rr={0x7, 0x7, 0x90, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x6f, 0x1, [{0x0, 0x7, "1559615319"}, {0x5, 0xf, "22dea0466deb14043876741c14"}, {0x5, 0xa, "43f54dc78792ccbb"}, {0x1, 0xa, "9298b7ec39424b62"}, {0x6, 0xc, "8c1d966f183f491e6102"}, {0x6, 0xc, "15acc541f3cdc356efe8"}, {0x1, 0xb, "8ce29e4dd359607960"}, {0x5, 0xe, "d40f2357dd7a5e831b397073"}, {0x6, 0xe, "c511650b9acaa94609dab0c5"}]}, @generic={0x94, 0x3, "85"}, @rr={0x7, 0x1f, 0x32, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2]}, @timestamp={0x44, 0x20, 0xfe, 0x0, 0x9, [0x80, 0x9, 0x0, 0x8001, 0x7, 0x400, 0x1]}, @rr={0x7, 0xb, 0xb2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end, @ra={0x94, 0x4}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000300)={'ip_vti0\x00', <r5=>r3, 0x8000, 0x700, 0x5, 0x6, {{0x49, 0x4, 0x0, 0x1, 0x124, 0xaf63, 0x0, 0xf1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@end, @timestamp_addr={0x44, 0x44, 0x1c, 0x1, 0x0, [{@multicast2, 0x2}, {@remote, 0x3}, {@local, 0x5}, {@remote, 0x1}, {@multicast2, 0x9}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x5}]}, @rr={0x7, 0x7, 0x90, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x6f, 0x1, [{0x0, 0x7, "1559615319"}, {0x5, 0xf, "22dea0466deb14043876741c14"}, {0x5, 0xa, "43f54dc78792ccbb"}, {0x1, 0xa, "9298b7ec39424b62"}, {0x6, 0xc, "8c1d966f183f491e6102"}, {0x6, 0xc, "15acc541f3cdc356efe8"}, {0x1, 0xb, "8ce29e4dd359607960"}, {0x5, 0xe, "d40f2357dd7a5e831b397073"}, {0x6, 0xe, "c511650b9acaa94609dab0c5"}]}, @generic={0x94, 0x3, "85"}, @rr={0x7, 0x1f, 0x32, [@multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2]}, @timestamp={0x44, 0x20, 0xfe, 0x0, 0x9, [0x80, 0x9, 0x0, 0x8001, 0x7, 0x400, 0x1]}, @rr={0x7, 0xb, 0xb2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end, @ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x50bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffd8c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0xe)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}})

4.068801992s ago: executing program 3 (id=3312):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbff0200000000000000000000000000014e200e2200489078030000000200000088c73ba1f267636d01dbe5712c1c941e1cdafbbb43f09c70e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4dd1abf694ed2ae5c9da42af02eab38761e1ba7575db91444db51d28d70dc0496e8cdec0b29b7912896928ad616924ff53a522298eb6ea1a2d54826dc613c08d1253ef7ce7d9d92d564401b96d686859c799edda5a8af5ad81438b0449a8534297ba250f0a82926dfa31198740e40f90da680bbe2dae7c9a76514d68a4b8e0b1c037bba97b753589f003bf813232eaa7673169cad807b384d73d7689a3002febdd296e5459ca11d008f4c472c33a2fa8bdddd987b21ad8fb037ea644278229f2245e9c4f72b"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c00018006000600894f"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
accept4(r0, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80, 0x800) (async)
r4 = accept4(r0, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f00000000c0)=0x80, 0x800)
ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000240)) (async)
ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000240))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x48, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x48, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.990199743s ago: executing program 4 (id=3313):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8015)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

3.843910631s ago: executing program 1 (id=3314):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004040000040000007d10be9ed0120000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r1], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@getqdisc={0x4c, 0x26, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5}, {0x13, 0x10}, {0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000181100fc000000000000000000000000000000ff02e663e4762852b7a100000000000100000722001890780304000000000000000000000000003f715ab7dbe29a04b5545df09fdafe005ed617df20d8841c1246128c245237803760ab33675c8b8e7ac58804e2883ad4dd27e3c6d85bc56b2211b3d8de3e8d214dd210db078e390a09637a27edc4be7dfc7295086aff91265f3d2c6ea712f167463fe478a8b5c1ffb394b1c5c1290a"], 0x0)
recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0x40012062)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0)
sendfile(0xffffffffffffffff, r9, 0x0, 0x109)
ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000001c0))
close(r7)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRES8=r6, @ANYRESOCT, @ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r12 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r12, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="ec3d788a47e83bd160b8ac738a70c71c3374c77c0fa13efcb33d8d3935b120aaf287d6286e491141a63ef97905e5184382e568f8dbb6693047e25fb50a08e563df1c598b872e95bf3a986b66daab6c16", 0x50}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044885)
recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000780))
sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[], 0x114}], 0x1000000000000089}, 0x840)

3.73388908s ago: executing program 3 (id=3315):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4)
sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000700000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c0005400000000000000003140000001000010000000000000000000084000a4211fa310e91d715c31d0bedc0cef6d08b"], 0xec}}, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x3000001, @mcast2, 0x9}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r3, &(0x7f00000000c0)="842a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x8, [<r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x24)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r4, 0x6}, &(0x7f0000000180)=0x8)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {0x0, 0xfff3}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x50}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000001c0)={r4}, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
ioctl$IMCLEAR_L2(r8, 0x80044946, &(0x7f0000000280)=0x5)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xffffffffffffff76)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0))

3.682064156s ago: executing program 4 (id=3316):
r0 = epoll_create1(0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0xfe, 0x5}}, 0x1c}}, 0x0)
r2 = epoll_create1(0x0) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket(0x40000000015, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, 0x4e23, 0x6, 0x4e20, 0x9, 0xa, 0x80, 0x20, 0x2f, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x2, 0x10, 0x3, 0x7ff, 0xff, 0x16723589}, {0x1, 0x4, 0x2, 0x4}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3501, 0x3, 0x2, 0xb, 0x5, 0x8, 0x29ad}}, 0xe8) (async)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) (async)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000003c0)={0x1008})
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r10, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0)

3.575309259s ago: executing program 1 (id=3317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x5, 0x7]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf8}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c0}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@ctrl_frame=@cts={{}, {0x7ff7}, @device_b}, 0xa)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7792}, [@exit]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x3, &(0x7f0000000240)=""/3, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x8, 0x0, 0xeff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x2, 0x4, 0xe, 0x4}, {0x1, 0x2, 0xe, 0x5}, {0x0, 0x1, 0x6, 0x1}], 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r2, 0x0, 0x26, 0x29, &(0x7f0000000440)="d3615dab03eea94dbc469bd21c2be97d3d2a5ced5d9aa427b96a04bffbf9d027613c4e4c2957", &(0x7f0000000480)=""/41, 0x200, 0x0, 0x1000, 0x1b, &(0x7f00000004c0)="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", &(0x7f00000014c0)="72c564861cc12f0e34e983bfd3ea17c3bf18adffb0dc7f280f2b0c", 0x4, 0x0, 0x5}, 0x50)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x110, 0x0, 0xef8ddf190446a005, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x100}, {0x6, 0x16, 0xff}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x9}, {0x5}}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r3 = socket$inet(0x2, 0x2, 0x8)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001800)={'ip6_vti0\x00', &(0x7f0000001780)={'syztnl1\x00', <r4=>0x0, 0x29, 0x10, 0x4, 0x4, 0x42, @private2, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7800, 0x20, 0x8, 0x1cf0}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000018c0)={'gretap0\x00', &(0x7f0000001840)={'syztnl2\x00', r4, 0x7, 0x1, 0xe7a1, 0x1000, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x28, 0x0, 0x5, [0x1, 0x8, 0x100, 0x2]}]}}}}})
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001900)={0x0, 0x0, 0x7, [0x8, 0x1, 0x4, 0xba2c, 0x5, 0x9, 0x9]}, 0x16)
setsockopt$inet_buf(r3, 0x0, 0x28, &(0x7f0000001940)="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", 0x1000)
syz_80211_inject_frame(&(0x7f0000002940), &(0x7f0000002980)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x40}, @device_a, @device_a, @device_a, {0x2, 0xb}}, @random="102df599379867b842902592"}, 0x2a)
r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000029c0)={0x1f, 0x0, @fixed}, &(0x7f0000002a00)=0xe, 0x80000)
listen(r5, 0xffff8360)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002a80)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0xe91805d007691c09}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000002b80), &(0x7f0000002bc0)=0x4)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002c00)='syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000002c40)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r9, 0x2094d000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0), r9)
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000002e80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d00)={0x124, r10, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x58}}}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x7, 0x0, {0x1, 0x1ffe, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x7f, 0x5c}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x0, 0x5, 0xffff, 0x5}}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_KEYS={0x98, 0x51, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "70b4630897aaea09f1ba46c147"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xdada}]]}, 0x124}, 0x1, 0x0, 0x0, 0x81}, 0x11)
connect$802154_dgram(r9, &(0x7f0000002ec0)={0x24, @none={0x0, 0xffff}}, 0x14)
ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000002f00)={<r11=>r0, 0x5a, 0xfffffffffffff9d2, 0x6})
connect$inet6(r11, &(0x7f0000002f40)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000002f80)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x10, 0x1, 0x8, 0x7f68, 0x9510, 0x3ff}, {0x9, 0xbbf, 0x7, 0xbe2, 0x4, 0x80}], ['\x00', '\x00', '\x00', '\x00']})
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003180), r0)
sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f0000003300)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000032c0)={&(0x7f00000031c0)={0xdc, r12, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcbf}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x71c2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xae}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004)

3.394024648s ago: executing program 4 (id=3318):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

3.183258889s ago: executing program 3 (id=3319):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x7effe0fee0b28fb4}, 0x4000050) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) (async)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r6, 0x10c, 0x4, &(0x7f0000000000), 0x4) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r8) (async)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async)
recvmmsg(r11, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x5}, 0x8}], 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="e8a51b48480bfda000", 0x9) (async)
r12 = accept4(r5, 0x0, 0x0, 0x800) (async)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getpeername(r13, &(0x7f00000001c0)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80) (async)
writev(r12, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) (async)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, @null, @bpq0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0xc) (async)
getsockopt$bt_BT_SNDMTU(r0, 0x11, 0xc, 0x0, &(0x7f0000000740))

2.631158157s ago: executing program 1 (id=3320):
socket(0x10, 0x80003, 0x0)

2.526225431s ago: executing program 1 (id=3321):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x3, 0x0, {0xa, 0x4e21, 0x10000, @local}}}, 0x3a)
getsockname$packet(r2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x784c4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

2.149256295s ago: executing program 4 (id=3322):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0xfffffffffffffffd, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) (async)
write$tun(r0, &(0x7f00000002c0)={@val, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @val={@val={0x88a8, 0x1, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1d, 0xe4, 0x0, 0x8, 0x11, 0x0, @loopback, @loopback}, "005cc9d56700000000"}}}}}, 0x37)

1.13845463s ago: executing program 3 (id=3323):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1a, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) (async)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "8422bc2fadd455fe", "47b06fcca23f5054ff8a630007f1cc28", "fa65b559", "1d5b177902794774"}, 0x28) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', <r2=>0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x30, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, <r8=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000240)='%-5lx  \x00'}, 0x20) (async, rerun: 64)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x93, 0x7fff, 0xe7000000, 0x8040, r8, 0x40, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, @value=r9}, 0x50) (async)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="f1170fb861f8ed2c61f3", @ANYRES16=r7, @ANYBLOB="8101000000000000000003000000"], 0x14}}, 0x0)

1.033805394s ago: executing program 1 (id=3324):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80)
poll(&(0x7f0000000300)=[{r0, 0x2014}], 0x1, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x36, 0x36, 0x2, [@var={0xd, 0x0, 0x0, 0xe, 0x1, 0x2}, @datasec={0x5, 0x2, 0x0, 0xf, 0x2, [{0x3, 0xfff, 0xda}, {0x3, 0x5, 0xf6}], "33e3"}]}}, &(0x7f0000000340)=""/92, 0x52, 0x5c, 0x1, 0x7, 0x10000}, 0x28)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
accept4(r3, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={<r4=>0x0, 0xfff}, &(0x7f0000000100)=0x8)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r12], 0x1c}}, 0x0)
sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={0x7b0, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x238, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x4}, {0xb, 0x1, ',],(...'}, {0xc, 0x1, 'nl80211\x00'}, {0x4}]}, {0x78, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0xe, 0x1, 'syzkaller\x00'}, {0x9, 0x1, '!*.^\xa6'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0x6, 0x1, '\'-'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x4c, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x4}, {0xe, 0x1, 'syzkaller\x00'}, {0xd, 0x1, '\'+-@!\'[\'{'}]}, {0x7c, 0x0, 0x0, 0x1, [{0xe, 0x1, '[K-!\\!%\xb5!)'}, {0x9, 0x1, '@:\'..'}, {0xd, 0x1, ']*{+/%,^+'}, {0x9, 0x1, '(\']\xe8-'}, {0x5, 0x1, ':'}, {0xe, 0x1, 'syzkaller\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x4}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '.'}]}, {0x40, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0xe, 0x1, 'syzkaller\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x6, 0x1, '-]'}]}, {0x5c, 0x0, 0x0, 0x1, [{0x4}, {0xe, 0x1, 'syzkaller\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x7, 0x1, '\\#*'}, {0x5, 0x1, ':'}, {0x5, 0x1, ':'}, {0x8, 0x1, '^-:}'}, {0x5, 0x1, '\x00'}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x28, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x7, 0x1, '#:*'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x4}]}]}, @NFC_ATTR_LLC_SDP={0x88, 0x13, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, '(\"-{'}]}, {0x38, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x5, 0x1, '/'}, {0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, ')'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x34, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x8, 0x1, '\'\xb7^/'}, {0xe, 0x1, 'syzkaller\x00'}, {0x4}, {0x5, 0x1, '\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x1cc, 0x13, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\xd6'}, {0x4}, {0x5, 0x1, '\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x4}, {0xa, 0x1, '&(\\\\#&'}, {0x5, 0x1, '\x00'}, {0xc, 0x1, 'nl80211\x00'}]}, {0x38, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x4}, {0x5, 0x1, '-'}, {0x4}, {0x7, 0x1, '&\\%'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x4}]}, {0x5c, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x6, 0x1, '{&'}, {0x5, 0x1, '\x00'}, {0xe, 0x1, 'syzkaller\x00'}, {0x4}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x24, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x4}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x4}, {0x4}, {0x9, 0x1, ':-]d-'}]}, {0x40, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x4}, {0xe, 0x1, 'syzkaller\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x6, 0x1, '\'y'}, {0x6, 0x1, '.\\'}]}, {0x54, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x9, 0x1, '\x95-).!'}, {0xa, 0x1, '(,\',%@'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x5, 0x1, '!'}, {0xc, 0x1, 'nl80211\x00'}, {0xe, 0x1, 'syzkaller\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x12c, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0x6, 0x1, '$^'}, {0x6, 0x1, '}}'}, {0x5, 0x1, '^'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x9, 0x1, '?@#]['}, {0xb, 0x1, '[./%*^P'}, {0xc, 0x1, 'nl80211\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '\x00'}, {0x8, 0x1, '\x05Hk\xdc'}, {0x7, 0x1, '\'#,'}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x44, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xb, 0x1, '++{O/,@'}, {0xe, 0x1, 'syzkaller\x00'}, {0x4}, {0x7, 0x1, '*@*'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, ',{\\\\'}]}, {0x18, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0x4}, {0x5, 0x1, '\x00'}]}, {0x24, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x8, 0x1, '\\@-{'}, {0xb, 0x1, '\\\\\'+\xc8.\''}]}, {0x10, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}, {0x8, 0x1, '}*=-'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x128, 0x13, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [{0xe, 0x1, 'syzkaller\x00'}, {0x5, 0x1, '\x00'}, {0x6, 0x1, '\\\''}, {0x10, 0x1, '/*-[:-\xd6[#&[#'}, {0x4}, {0xa, 0x1, '-.\\!#!'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}]}, {0x38, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xc, 0x1, 'nl80211\x00'}, {0x7, 0x1, '\x9b-+'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '}'}]}, {0x44, 0x0, 0x0, 0x1, [{0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x6, 0x1, '-/'}, {0x6, 0x1, '-\x11'}, {0x5, 0x1, '\x7f'}, {0x7, 0x1, '$$\\'}, {0x8, 0x1, '}%*}'}]}, {0x48, 0x0, 0x0, 0x1, [{0x7, 0x1, '\xbf-/'}, {0x4}, {0x8, 0x1, '(+-('}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x8, 0x1, '~:]!'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x4}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_SDP={0xa4, 0x13, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [{0x5, 0x1, ','}, {0x5, 0x1, '\x00'}, {0x9, 0x1, ',}*!-'}]}, {0x28, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x5, 0x1, '\x00'}, {0xe, 0x1, 'syzkaller\x00'}]}, {0x58, 0x0, 0x0, 0x1, [{0xc, 0x1, 'nl80211\x00'}, {0x4}, {0xc, 0x1, 'nl80211\x00'}, {0x7, 0x1, '/[('}, {0xe, 0x1, 'syzkaller\x00'}, {0x9, 0x1, '\xaa\xaa\xaa\xaa\xaa'}, {0x9, 0x1, '^)p))'}, {0x5, 0x1, '['}]}]}]}, 0x7b0}}, 0x11)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240)={r4, 0x31}, 0x8)

919.234785ms ago: executing program 4 (id=3325):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x54, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) (async)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x54, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb4}}, 0x40000)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)
syz_genetlink_get_family_id$fou(&(0x7f0000000440), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x44}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000680)=0x1, 0x4)

889.579214ms ago: executing program 3 (id=3326):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x100000000)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/user\x00')
ioctl$NS_GET_USERNS(r3, 0xb701, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
close(0x3)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e20, 0x4, @local, 0xc1}}}, 0x3a)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x30, r9, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}]}, 0x30}}, 0x2)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)

2.751691ms ago: executing program 4 (id=3327):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x29, 0x2, 0x0, 0x0, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x20}}, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfffffffffffffff9)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=3328):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000700)={0x34, r1, 0x1, 0x7ffffe, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000700)={0x34, r1, 0x1, 0x7ffffe, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x200000000000011, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)

kernel console output (not intermixed with test programs):

172.885297][T10593] pimreg: left allmulticast mode
[  172.924972][T10593] dvmrp1: left allmulticast mode
[  173.178751][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'.
[  174.020452][T10659] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1276'.
[  174.420098][T10676] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1281'.
[  174.431161][T10676] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  174.453225][T10676] 0ªî{X¹¦: entered allmulticast mode
[  174.473642][T10676] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  174.490962][T10678] : renamed from hsr0 (while UP)
[  174.955925][   T30] audit: type=1804 audit(1754892777.050:3): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1288" name="/newroot/234/cgroup.controllers" dev="tmpfs" ino=1201 res=1 errno=0
[  175.033801][   T30] audit: type=1800 audit(1754892777.080:4): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1288" name="cgroup.controllers" dev="tmpfs" ino=1201 res=0 errno=0
[  175.490818][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1296'.
[  175.585776][T10733] netlink: 'syz.2.1297': attribute type 1 has an invalid length.
[  175.779185][T10741] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20000
[  176.314814][T10764] netlink: 'syz.0.1308': attribute type 39 has an invalid length.
[  176.332050][T10770] hsr0 speed is unknown, defaulting to 1000
[  176.716904][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'.
[  177.791232][T10849] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1327'.
[  177.974206][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'.
[  178.187420][T10882] netlink: 'syz.3.1335': attribute type 1 has an invalid length.
[  178.209969][T10882] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1335'.
[  178.218536][T10883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.220579][T10886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.380749][T10893] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1337'.
[  178.414791][T10893] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1337'.
[  178.437117][T10894] netlink: 'syz.2.1336': attribute type 21 has an invalid length.
[  178.444996][T10893] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1337'.
[  178.685941][T10904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1339'.
[  178.722234][T10903] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1341'.
[  179.036378][T10919] netlink: 'syz.4.1345': attribute type 1 has an invalid length.
[  179.102412][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'.
[  179.140631][T10922] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  179.153204][T10922] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  179.209076][T10919] gretap0: entered promiscuous mode
[  179.217707][T10919] bond6: (slave gretap0): making interface the new active one
[  179.247836][T10919] bond6: (slave gretap0): Enslaving as an active interface with an up link
[  179.281069][T10929] netlink: 'syz.1.1348': attribute type 5 has an invalid length.
[  179.292243][T10927] macvlan2: entered promiscuous mode
[  179.316197][T10927] macvlan2: entered allmulticast mode
[  179.339144][T10927] bond6: entered promiscuous mode
[  179.346197][T10927] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  179.373821][T10927] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap0
[  179.401386][T10927] bond6: left promiscuous mode
[  179.404398][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'.
[  179.434526][T10934] tipc: Enabled bearer <udp:s>, priority 10
[  179.479675][T10935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.584592][T10935] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.708034][ T5969] IPVS: starting estimator thread 0...
[  179.751423][T10942] hsr0 speed is unknown, defaulting to 1000
[  179.791195][T10952] lo: entered promiscuous mode
[  179.805497][T10950] IPVS: using max 27 ests per chain, 64800 per kthread
[  179.822375][T10952] tunl0: entered promiscuous mode
[  179.848476][T10952] gre0: entered promiscuous mode
[  179.898897][T10952] erspan0: left allmulticast mode
[  179.934599][T10952] ip_vti0: entered promiscuous mode
[  180.000820][T10959] netlink: 'syz.2.1358': attribute type 1 has an invalid length.
[  180.545835][ T5871] tipc: Node number set to 3589722111
[  180.704367][T10992] openvswitch: netlink: Message has 5 unknown bytes.
[  180.886104][T11000] netlink: 'syz.4.1371': attribute type 1 has an invalid length.
[  180.924464][T11002] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  181.099938][T11006] bond3: entered promiscuous mode
[  181.114955][T11006] bond3: entered allmulticast mode
[  181.131697][T11006] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.385851][T11006] bond3 (unregistering): Released all slaves
[  181.413438][T11015] syz_tun: refused to change device tx_queue_len
[  181.777916][T11051] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20003
[  181.779864][T11048] delete_channel: no stack
[  181.785508][T11050] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20003
[  182.846354][T11111] netlink: 'syz.1.1404': attribute type 10 has an invalid length.
[  182.901742][T11111] team0: Port device dummy0 added
[  182.915545][T11111] netlink: 'syz.1.1404': attribute type 10 has an invalid length.
[  182.949830][T11111] team0: Port device dummy0 removed
[  182.960984][T11116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.975824][T11116] syzkaller0: entered promiscuous mode
[  182.985914][T11116] syzkaller0: entered allmulticast mode
[  183.023315][T11116] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  183.107010][T11116] tipc: Resetting bearer <eth:syzkaller0>
[  183.289868][T11127] __nla_validate_parse: 7 callbacks suppressed
[  183.289884][T11127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1408'.
[  183.503001][T11130] netlink: 'syz.4.1409': attribute type 13 has an invalid length.
[  183.552755][T11130] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.590855][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  183.639948][T11149] netlink: 'syz.0.1412': attribute type 6 has an invalid length.
[  183.670353][T11130] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  183.690122][T11146] dvmrp1: renamed from erspan0 (while UP)
[  183.719485][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1412'.
[  184.006332][T11165] bridge0: entered allmulticast mode
[  184.795142][T11202] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1426'.
[  184.821182][T11207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  185.589811][   T30] audit: type=1800 audit(1754892787.680:5): pid=11239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1436" name="memory.events" dev="tmpfs" ino=1525 res=0 errno=0
[  185.804286][T11259] netlink: 'syz.3.1440': attribute type 10 has an invalid length.
[  185.946254][T11254] bond3: entered promiscuous mode
[  185.971696][T11254] bond3: entered allmulticast mode
[  185.996834][T11254] 8021q: adding VLAN 0 to HW filter on device bond3
[  186.074309][T11259] geneve1: entered promiscuous mode
[  186.125266][T11259] geneve1: entered allmulticast mode
[  186.161941][T11259] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  186.219366][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'.
[  186.232916][T11284] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1445'.
[  186.482706][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'.
[  186.585174][ T8083] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  186.595765][T11303] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  186.842605][T11319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1454'.
[  187.320684][T11342] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1460'.
[  187.633395][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1464'.
[  187.948927][T11369] bond7: entered promiscuous mode
[  188.061187][T11369] bond8: entered promiscuous mode
[  188.208764][T11369] bond9: entered promiscuous mode
[  188.228961][T11383] pimreg: left allmulticast mode
[  188.234122][T11383] vlan1: left allmulticast mode
[  188.250820][T11383] veth0_vlan: left allmulticast mode
[  188.414526][T11369] bond10: entered promiscuous mode
[  188.464371][T11369] bond11: entered promiscuous mode
[  188.466094][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  188.494379][T11369] bond12: entered promiscuous mode
[  188.496528][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1473'.
[  188.546448][T11369] bond13: entered promiscuous mode
[  188.754195][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'.
[  188.778430][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1477'.
[  188.806870][T11434] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  188.810220][T11436] netlink: 'syz.0.1476': attribute type 1 has an invalid length.
[  188.948887][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'.
[  189.253893][T11462] openvswitch: netlink: Key type 29 is not supported
[  189.558233][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'.
[  189.957258][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1490'.
[  190.236625][T11501] hsr0 speed is unknown, defaulting to 1000
[  190.399162][T11511] netlink: 'syz.1.1496': attribute type 10 has an invalid length.
[  190.455160][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  190.542919][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  190.925053][T11534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.939555][T11534] syzkaller0: entered promiscuous mode
[  190.957456][T11534] syzkaller0: entered allmulticast mode
[  191.036889][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'.
[  191.069354][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'.
[  191.158030][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'.
[  191.158030][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'.
[  191.232236][T11534] tipc: Resetting bearer <eth:syzkaller0>
[  191.348967][T11533] tipc: Resetting bearer <eth:syzkaller0>
[  191.378002][T11567] netlink: 'syz.3.1510': attribute type 4 has an invalid length.
[  191.418240][T11533] tipc: Disabling bearer <eth:syzkaller0>
[  191.533485][T11575] netlink: 'syz.1.1514': attribute type 12 has an invalid length.
[  191.677087][T11581] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  192.504166][T11627] macsec0: entered promiscuous mode
[  192.563061][T11627] team0: entered promiscuous mode
[  192.588773][T11627] team_slave_0: entered promiscuous mode
[  192.610571][T11627] team_slave_1: entered promiscuous mode
[  192.630071][T11627] macsec0: entered allmulticast mode
[  192.664801][T11627] team0: entered allmulticast mode
[  192.675878][T11627] team_slave_0: entered allmulticast mode
[  192.681626][T11627] team_slave_1: entered allmulticast mode
[  192.716226][T11627] team0: Device macsec0 is already an upper device of the team interface
[  192.737795][T11640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.748141][T11627] team0: left allmulticast mode
[  192.760007][T11627] team_slave_0: left allmulticast mode
[  192.775256][T11627] team_slave_1: left allmulticast mode
[  192.790949][T11627] team0: left promiscuous mode
[  192.799040][T11627] team_slave_0: left promiscuous mode
[  192.849321][T11627] team_slave_1: left promiscuous mode
[  193.334053][T11665] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.365992][T11665] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  193.423568][T11665] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  193.592195][T11675] pim6reg1: entered promiscuous mode
[  193.597735][T11675] pim6reg1: entered allmulticast mode
[  193.871712][T11687] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  193.892451][T11687] __nla_validate_parse: 7 callbacks suppressed
[  193.892468][T11687] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1549'.
[  193.913413][T11687] nbd: illegal input index 1048576
[  194.013357][T11700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.094356][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'.
[  194.229241][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.400482][T11713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1557'.
[  194.722291][T11734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1561'.
[  194.820111][T11743] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1561'.
[  195.081498][T11759] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1565'.
[  195.285484][T11771] macvlan0: entered promiscuous mode
[  195.299412][T11771] macvlan0: entered allmulticast mode
[  195.559407][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1570'.
[  195.585810][T11777] openvswitch: netlink: Flow key attr not present in new flow.
[  195.650715][T11777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  195.693262][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'.
[  195.710484][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1574'.
[  195.840244][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'.
[  196.134810][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  196.144341][   T55] block nbd0: Possible stuck request ffff888025200000: control (read@0,1024B). Runtime 60 seconds
[  196.156553][   T55] block nbd0: Possible stuck request ffff8880252001c0: control (read@1024,1024B). Runtime 60 seconds
[  196.167663][   T55] block nbd0: Possible stuck request ffff888025200380: control (read@2048,1024B). Runtime 60 seconds
[  196.178933][   T55] block nbd0: Possible stuck request ffff888025200540: control (read@3072,1024B). Runtime 60 seconds
[  196.295608][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  196.302279][ T5869] Bluetooth: hci2: command 0x0406 tx timeout
[  196.308762][ T5869] Bluetooth: hci3: command 0x0406 tx timeout
[  196.440394][T11820] netlink: 'syz.3.1583': attribute type 1 has an invalid length.
[  196.498699][T11822] netlink: 'syz.1.1585': attribute type 16 has an invalid length.
[  196.508493][T11822] netlink: 'syz.1.1585': attribute type 3 has an invalid length.
[  196.546446][T11828] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  196.827429][T11840] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  197.903787][T11896] syzkaller0: refused to change device tx_queue_len
[  198.054785][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  199.027917][T11960] netlink: 'syz.0.1621': attribute type 1 has an invalid length.
[  199.036051][T11960] netlink: 'syz.0.1621': attribute type 3 has an invalid length.
[  199.043783][T11960] __nla_validate_parse: 8 callbacks suppressed
[  199.043796][T11960] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1621'.
[  199.068240][T11960] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20000
[  199.244883][T11966] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  199.333169][T11976] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1629'.
[  199.387812][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1626'.
[  199.409399][T11974] syz.1.1628 (11974) used obsolete PPPIOCDETACH ioctl
[  199.601060][T11991] netlink: 'syz.0.1632': attribute type 4 has an invalid length.
[  200.306551][T12022] sctp: [Deprecated]: syz.1.1639 (pid 12022) Use of struct sctp_assoc_value in delayed_ack socket option.
[  200.306551][T12022] Use struct sctp_sack_info instead
[  200.325696][T12024] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  200.339858][T12022] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.364192][T12022] syzkaller0: entered promiscuous mode
[  200.382310][T12022] syzkaller0: entered allmulticast mode
[  200.425416][T12022] tipc: Resetting bearer <eth:syzkaller0>
[  200.432857][T12018] tipc: Resetting bearer <eth:syzkaller0>
[  200.459493][T12018] tipc: Disabling bearer <eth:syzkaller0>
[  200.973847][T12038] dvmrp0: entered allmulticast mode
[  201.115809][T12055] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  201.492566][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1655'.
[  201.579220][T12076] Bluetooth: MGMT ver 1.23
[  201.586338][T12073] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1655'.
[  201.619567][T12076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1656'.
[  201.632424][T12073] netlink: zone id is out of range
[  201.639491][T12073] netlink: zone id is out of range
[  201.692288][T12073] netlink: zone id is out of range
[  201.708882][T12073] netlink: zone id is out of range
[  201.729406][T12073] netlink: get zone limit has 8 unknown bytes
[  202.010476][T12091] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1661'.
[  202.140813][ T5950] hid-generic 0005:10CF:0004.0001: item fetching failed at offset 0/1
[  202.193276][ T5950] hid-generic 0005:10CF:0004.0001: probe with driver hid-generic failed with error -22
[  202.313492][T12108] netlink: 'syz.0.1667': attribute type 1 has an invalid length.
[  202.321912][T12108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1667'.
[  202.409386][T12110] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1668'.
[  203.279434][T12151] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1677'.
[  203.372520][T12153] dvmrp0: left allmulticast mode
[  203.655220][   T51] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  203.662927][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  203.929467][T12172] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.971685][T12172] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  204.040375][T12172] syzkaller0: mtu less than device minimum
[  204.134494][T12182] __nla_validate_parse: 1 callbacks suppressed
[  204.134512][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'.
[  204.190769][T12185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'.
[  204.767308][T12210] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1692'.
[  204.954784][T12219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1695'.
[  205.305372][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1699'.
[  205.336760][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1699'.
[  205.621604][T12248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.769600][T12248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.066668][T12272] netlink: 'syz.2.1707': attribute type 10 has an invalid length.
[  206.513386][T12296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1711'.
[  206.604518][T12293] syzkaller0: left promiscuous mode
[  206.630738][T12293] syzkaller0: left allmulticast mode
[  207.132308][ T8092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.170457][ T8092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.802569][T12342] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1725'.
[  207.853675][T11992] Set syz1 is full, maxelem 65536 reached
[  207.859392][T12347] hsr0 speed is unknown, defaulting to 1000
[  208.024088][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'.
[  208.041115][T12356] C: renamed from lo (while UP)
[  208.684567][T12381] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1735'.
[  208.741941][T12386] netlink: 'syz.3.1736': attribute type 4 has an invalid length.
[  208.980513][T12397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.016261][T12397] syzkaller0: entered promiscuous mode
[  209.022017][T12397] syzkaller0: entered allmulticast mode
[  209.115891][T12409] netlink: 'syz.3.1745': attribute type 21 has an invalid length.
[  209.124044][T12396] tipc: Resetting bearer <eth:syzkaller0>
[  209.147414][T12409] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1745'.
[  209.195676][T12396] tipc: Disabling bearer <eth:syzkaller0>
[  209.209554][T12409] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1745'.
[  209.210575][T12413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1747'.
[  209.476789][T12424] veth5: entered allmulticast mode
[  209.603916][T12434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1754'.
[  209.667434][T12437] netlink: 'syz.1.1755': attribute type 4 has an invalid length.
[  209.683579][T12437] netlink: 'syz.1.1755': attribute type 4 has an invalid length.
[  210.103446][T12452] macvlan0: entered promiscuous mode
[  210.131144][T12452] macvlan0: entered allmulticast mode
[  210.145389][T12463] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1760'.
[  210.208059][T12463] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1760'.
[  210.260400][T12463] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1760'.
[  210.303484][T12463] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1760'.
[  210.308511][T12467] netlink: 'syz.4.1763': attribute type 2 has an invalid length.
[  210.326752][T12463] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1760'.
[  210.344126][T12463] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1760'.
[  210.535211][  T982] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 60 sec
[  211.084766][T12500] netlink: 'syz.2.1770': attribute type 11 has an invalid length.
[  211.105933][T12502] C: renamed from team_slave_0
[  211.132587][T12500] netlink: 'syz.2.1770': attribute type 11 has an invalid length.
[  211.132979][T12502] netlink: 'syz.1.1771': attribute type 1 has an invalid length.
[  211.198219][T12502] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  211.872167][T12553] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  212.791183][T12601] nftables ruleset with unbound set
[  213.015823][T12612] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  213.170316][T12617] netlink: 'syz.2.1802': attribute type 2 has an invalid length.
[  213.183686][T12617] netlink: 'syz.2.1802': attribute type 14 has an invalid length.
[  213.199618][T12617] netlink: 'syz.2.1802': attribute type 13 has an invalid length.
[  213.414851][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  213.820853][T12649] hsr0 speed is unknown, defaulting to 1000
[  214.376367][T12677] __nla_validate_parse: 38 callbacks suppressed
[  214.376385][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'.
[  214.511952][T12681] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1818'.
[  214.549766][T12683] pim6reg1: entered promiscuous mode
[  214.569640][T12683] pim6reg1: entered allmulticast mode
[  214.576035][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'.
[  214.602313][T12685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1820'.
[  214.625493][T12685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1820'.
[  214.647065][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1820'.
[  214.840768][T12706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1822'.
[  215.073692][T12714] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1827'.
[  215.095272][   T51] Bluetooth: hci0: command tx timeout
[  215.236997][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'.
[  215.242793][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  215.374926][T12731] netlink: 'syz.1.1829': attribute type 2 has an invalid length.
[  215.424791][T12731] netlink: 'syz.1.1829': attribute type 3 has an invalid length.
[  215.444300][T12731] netlink: 'syz.1.1829': attribute type 5 has an invalid length.
[  216.232378][T12775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.005671][T12796] !
: renamed from dummy0 (while UP)
[  217.187383][T12802] netlink: 'syz.1.1848': attribute type 13 has an invalid length.
[  217.396118][T12802] 8021q: adding VLAN 0 to HW filter on device team0
[  217.427963][T12814] netlink: 'syz.4.1850': attribute type 23 has an invalid length.
[  217.440215][T12813] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  217.517773][T12802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.187922][T12859] netlink: 'syz.1.1864': attribute type 9 has an invalid length.
[  218.407451][    T9] IPVS: starting estimator thread 0...
[  218.433450][T12874] syzkaller1: entered promiscuous mode
[  218.456449][T12874] syzkaller1: entered allmulticast mode
[  218.549219][T12876] IPVS: using max 24 ests per chain, 57600 per kthread
[  219.065363][T12910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.104574][T12910] syzkaller0: entered promiscuous mode
[  219.111034][T12910] syzkaller0: entered allmulticast mode
[  219.495714][   T51] Bluetooth: hci0: command tx timeout
[  219.563480][T12935] __nla_validate_parse: 12 callbacks suppressed
[  219.563497][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1884'.
[  219.589089][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1884'.
[  219.960464][T12953] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.183230][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1894'.
[  220.199747][T12969] bridge_slave_1: left allmulticast mode
[  220.205510][T12969] bridge_slave_1: left promiscuous mode
[  220.211286][T12969] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.225395][T12969] 
: left allmulticast mode
[  220.230037][T12969] 
: left promiscuous mode
[  220.241211][T12969] bridge0: port 1(
) entered disabled state
[  220.707634][T12993] netlink: 'syz.1.1901': attribute type 64 has an invalid length.
[  220.719704][T12990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1899'.
[  220.738143][T12993] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1901'.
[  220.929243][T13005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1906'.
[  221.118953][T13010] netlink: 416 bytes leftover after parsing attributes in process `syz.2.1908'.
[  221.628599][T13033] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.696280][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1915'.
[  221.732386][T13033] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1915'.
[  222.176903][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1916'.
[  222.336991][T13046] hsr_slave_1 (unregistering): left promiscuous mode
[  222.375443][T13061] netlink: 'syz.2.1924': attribute type 62 has an invalid length.
[  222.397184][T13060] netlink: 'syz.2.1924': attribute type 62 has an invalid length.
[  223.043864][T13099] netlink: 'syz.1.1939': attribute type 1 has an invalid length.
[  223.062783][T13097] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  223.226992][T13106] pimreg: entered allmulticast mode
[  223.491906][T13122] tipc: Resetting bearer <eth:xfrm0>
[  223.759006][T13135] netlink: 'syz.0.1951': attribute type 2 has an invalid length.
[  224.207561][T13151] sit1: entered promiscuous mode
[  224.212543][T13151] sit1: entered allmulticast mode
[  224.931237][T13193] ipvlan0: entered promiscuous mode
[  224.956412][T13196] __nla_validate_parse: 7 callbacks suppressed
[  224.956428][T13196] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1968'.
[  224.982166][T13193] ipvlan0: entered allmulticast mode
[  224.995533][T13193] veth0_vlan: entered allmulticast mode
[  225.065645][T13200] netlink: 'syz.2.1969': attribute type 1 has an invalid length.
[  225.140926][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'.
[  225.186114][T13200] 8021q: adding VLAN 0 to HW filter on device bond8
[  225.225710][T13203] vlan2: entered promiscuous mode
[  225.267284][T13203] bond8: entered promiscuous mode
[  225.294065][T13203] vlan2: entered allmulticast mode
[  225.307128][T13203] bond8: entered allmulticast mode
[  225.492952][T13227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1977'.
[  225.569775][T13232] netlink: 'syz.2.1977': attribute type 1 has an invalid length.
[  225.818087][T13245] netlink: 'syz.2.1984': attribute type 6 has an invalid length.
[  226.026980][T13257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1990'.
[  226.098692][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1988'.
[  226.128671][T13259] hsr0 speed is unknown, defaulting to 1000
[  226.224116][   T55] block nbd0: Possible stuck request ffff888025200000: control (read@0,1024B). Runtime 90 seconds
[  226.254830][   T55] block nbd0: Possible stuck request ffff8880252001c0: control (read@1024,1024B). Runtime 90 seconds
[  226.267585][   T55] block nbd0: Possible stuck request ffff888025200380: control (read@2048,1024B). Runtime 90 seconds
[  226.279502][   T55] block nbd0: Possible stuck request ffff888025200540: control (read@3072,1024B). Runtime 90 seconds
[  226.447892][T13280] netlink: 'syz.3.1990': attribute type 1 has an invalid length.
[  226.495012][T13280] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1990'.
[  226.528344][T13286] netlink: 'syz.4.1994': attribute type 1 has an invalid length.
[  226.579225][T13286] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1994'.
[  226.619107][T13272] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  226.726091][T13290] netlink: 'syz.1.1995': attribute type 9 has an invalid length.
[  227.069286][T13309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.262789][T13316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2003'.
[  227.487741][T13337] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2009'.
[  227.573208][T13339] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2010'.
[  227.653069][T13347] unsupported nlmsg_type 40
[  228.011567][T13373] netlink: 'syz.4.2022': attribute type 4 has an invalid length.
[  228.315808][T13387] netlink: 'syz.1.2026': attribute type 10 has an invalid length.
[  228.414227][T13396] netlink: 'syz.3.2029': attribute type 11 has an invalid length.
[  228.526512][T13387] dummy0: entered promiscuous mode
[  228.553462][T13387] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  228.787413][ T4638] wlan1: Trigger new scan to find an IBSS to join
[  228.847248][T13419] vxcan1: tx drop: invalid da for name 0x0000000000000014
[  228.866732][T13420] netlink: 'syz.2.2037': attribute type 7 has an invalid length.
[  228.886248][T13420] netlink: 'syz.2.2037': attribute type 8 has an invalid length.
[  229.145104][T13435] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  229.212733][T13435] sctp: [Deprecated]: syz.2.2041 (pid 13435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  229.212733][T13435] Use struct sctp_sack_info instead
[  229.832965][T13464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  230.190976][T13474] __nla_validate_parse: 16 callbacks suppressed
[  230.190994][T13474] netlink: 1967 bytes leftover after parsing attributes in process `syz.4.2052'.
[  230.449811][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'.
[  230.575788][T13500] nbd: must specify a device to reconfigure
[  230.797699][T13519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.811336][T13512] veth7: entered allmulticast mode
[  230.902003][T13520] macvlan4: entered allmulticast mode
[  230.923378][T13520] veth1_vlan: entered allmulticast mode
[  230.931916][T13520] macvlan4: entered promiscuous mode
[  230.973519][T13520] bond0: (slave macvlan4): Enslaving as an active interface with an up link
[  231.412477][T13558] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  231.514208][T13564] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  231.758056][T13579] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2084'.
[  232.001899][T13592] netlink: 'syz.1.2088': attribute type 13 has an invalid length.
[  232.100553][T13594] macsec1: entered promiscuous mode
[  232.115157][T13594] macsec1: entered allmulticast mode
[  232.298974][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2094'.
[  232.340437][T13615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2094'.
[  232.671578][T13636] netlink: 'syz.4.2098': attribute type 10 has an invalid length.
[  232.831764][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2102'.
[  232.857028][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2102'.
[  233.189169][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'.
[  233.210593][T13660] nbd: nbd0 already in use
[  233.228371][T13663] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  233.264541][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2110'.
[  233.334982][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  233.507396][T13677] netlink: 'syz.0.2111': attribute type 11 has an invalid length.
[  233.526266][T13677] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2111'.
[  233.815932][   T12] wlan1: Trigger new scan to find an IBSS to join
[  233.847885][T13699] tipc: Invalid UDP bearer configuration
[  233.847937][T13699] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  234.137945][T13708] netlink: 'syz.0.2121': attribute type 1 has an invalid length.
[  234.239982][T13711] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  234.300085][T13717] bond3: (slave gretap2): making interface the new active one
[  234.339449][T13725] netlink: 'syz.4.2126': attribute type 6 has an invalid length.
[  234.363431][T13725] netlink: 'syz.4.2126': attribute type 5 has an invalid length.
[  234.366868][T13717] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  234.454894][T13727] nbd2: detected capacity change from 0 to 127
[  234.461841][T13729] netlink: 'syz.1.2130': attribute type 1 has an invalid length.
[  234.475853][   T51] block nbd2: Receive control failed (result -104)
[  234.841512][ T8092] wlan1: Creating new IBSS network, BSSID 00:00:ff:8d:00:00
[  235.004480][T13768] netlink: 'syz.2.2143': attribute type 11 has an invalid length.
[  235.109114][T13776] sch_fq: defrate 0 ignored.
[  235.251012][T13791] __nla_validate_parse: 16 callbacks suppressed
[  235.251031][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'.
[  235.436588][T13803] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2151'.
[  235.524501][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'.
[  235.540917][T13805] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  235.551536][T13805] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  235.559579][T13805] gretap1: entered promiscuous mode
[  235.565043][T13805] gretap1: entered allmulticast mode
[  235.575074][T13808] netlink: 'syz.2.2153': attribute type 28 has an invalid length.
[  235.582879][T13808] netlink: 'syz.2.2153': attribute type 3 has an invalid length.
[  235.591392][T13808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2153'.
[  235.602195][T13808] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2153'.
[  235.644284][T13811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2154'.
[  235.654404][T13753] delete_channel: no stack
[  236.059414][T13834] netlink: 'syz.4.2161': attribute type 1 has an invalid length.
[  236.291384][T13850] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2165'.
[  236.320776][T13860] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2168'.
[  236.351699][T13860] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  236.370193][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'.
[  236.371917][T13858] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2167'.
[  236.380033][T13860] openvswitch: netlink: Duplicate key (type 0).
[  236.851521][T13892] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.894437][T13892] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  236.973291][T13901] netlink: 'syz.0.2181': attribute type 83 has an invalid length.
[  237.013570][T13897] veth1_macvtap: left promiscuous mode
[  237.019650][T13897] macsec0: entered promiscuous mode
[  237.342618][T13918] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  237.363568][T13918] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  237.379180][T13918] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  237.398419][T13918] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  237.481484][T13931] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  237.557000][T13933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  237.915478][T13954] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  238.140849][T13961] veth0_virt_wifi: renamed from veth0_vlan
[  238.181550][   T12] tipc: Resetting bearer <eth:macvlan1>
[  239.456884][T14028] validate_nla: 3 callbacks suppressed
[  239.456902][T14028] netlink: 'syz.4.2216': attribute type 6 has an invalid length.
[  239.815661][   T49] wlan1: Trigger new scan to find an IBSS to join
[  240.168499][ T5529] veth0_virt_wifi: left promiscuous mode
[  240.212177][ T5529] veth0_virt_wifi: entered promiscuous mode
[  240.622954][T14096] __nla_validate_parse: 39 callbacks suppressed
[  240.622973][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2231'.
[  240.923249][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'.
[  241.523585][T14142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2243'.
[  241.544730][T14141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2243'.
[  241.554551][T14149] erspan0: entered promiscuous mode
[  241.560597][T14149] erspan0: entered allmulticast mode
[  241.950666][T14157] "syz.3.2246" (14157) uses obsolete ecb(arc4) skcipher
[  242.308717][T14183] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2253'.
[  242.451953][T14192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2254'.
[  242.563723][T14198] sch_tbf: burst 88 is lower than device veth1 mtu (1514) !
[  242.731810][T14212] netlink: 'syz.1.2257': attribute type 13 has an invalid length.
[  242.792680][T14212] netlink: 'syz.1.2257': attribute type 58 has an invalid length.
[  242.804178][T14212] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2257'.
[  242.857001][T14212] netlink: 'syz.1.2257': attribute type 13 has an invalid length.
[  243.544215][T14259] netlink: 'syz.2.2270': attribute type 3 has an invalid length.
[  243.668165][T14265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2273'.
[  243.681038][T14265] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2273'.
[  243.722358][T14265] netlink: 'syz.0.2273': attribute type 3 has an invalid length.
[  243.891921][T14280] netlink: 'syz.2.2276': attribute type 1 has an invalid length.
[  244.005267][T14286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2277'.
[  244.280960][T14309] netlink: 'syz.3.2284': attribute type 29 has an invalid length.
[  244.385898][T14314] netlink: 'syz.3.2285': attribute type 3 has an invalid length.
[  244.393665][T14314] netlink: 'syz.3.2285': attribute type 3 has an invalid length.
[  244.606030][T14324] ksmbd: Unknown IPC event: 3, ignore.
[  244.775506][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  244.785704][   T49] wlan1: Trigger new scan to find an IBSS to join
[  245.143585][T14349] netlink: 'syz.4.2292': attribute type 11 has an invalid length.
[  245.798308][ T3507] wlan1: Creating new IBSS network, BSSID 4e:31:40:85:a4:8c
[  246.450674][T14334] vlan2: entered allmulticast mode
[  246.456524][T14334] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  246.476436][T14347] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  246.732646][T14370] netlink: 'syz.1.2298': attribute type 4 has an invalid length.
[  247.346097][T14384] __nla_validate_parse: 6 callbacks suppressed
[  247.346114][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2303'.
[  247.386609][T14401] netlink: 5368 bytes leftover after parsing attributes in process `syz.3.2308'.
[  247.396583][T14397] hsr0 speed is unknown, defaulting to 1000
[  247.628842][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'.
[  247.937522][T14424] unknown channel width for channel at 909000KHz?
[  247.946739][T14424] unknown channel width for channel at 909000KHz?
[  247.953287][T14424] unknown channel width for channel at 909000KHz?
[  248.112824][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'.
[  248.148293][T14443] dvmrp1: entered allmulticast mode
[  248.425979][T14458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.500777][T14469] tipc: Resetting bearer <eth:syzkaller0>
[  248.509521][T14469] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2323'.
[  248.577753][T14456] tipc: Disabling bearer <eth:syzkaller0>
[  249.130098][T14509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2336'.
[  249.273004][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'.
[  249.344497][T14518] netlink: 'syz.3.2341': attribute type 29 has an invalid length.
[  249.421938][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'.
[  249.498838][T14521] sctp: [Deprecated]: syz.0.2342 (pid 14521) Use of int in max_burst socket option.
[  249.498838][T14521] Use struct sctp_assoc_value instead
[  249.548813][T14521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2342'.
[  249.835284][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'.
[  250.058426][T14558] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  250.072672][T14558] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  250.082314][T14558] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  250.342338][T14574] netlink: 'syz.1.2353': attribute type 10 has an invalid length.
[  250.471286][T14579] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.593220][T14591] syzkaller1: entered promiscuous mode
[  250.613978][T14591] syzkaller1: entered allmulticast mode
[  251.016358][T14612] netlink: 'syz.3.2363': attribute type 11 has an invalid length.
[  251.640801][T14659] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  251.775320][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  251.860017][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  251.879666][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  251.897395][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  251.924860][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  251.938017][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  251.977596][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  252.014826][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  252.032867][T14676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  252.055249][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  252.076614][T14662] netlink: 'syz.3.2374': attribute type 4 has an invalid length.
[  252.536653][T14703] __nla_validate_parse: 54 callbacks suppressed
[  252.536671][T14703] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2385'.
[  252.677712][T14713] IPVS: set_ctl: invalid protocol: 60 172.20.20.13:20002
[  252.761831][T14722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2389'.
[  253.230595][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2397'.
[  253.320189][T14757] sctp: [Deprecated]: syz.1.2400 (pid 14757) Use of int in maxseg socket option.
[  253.320189][T14757] Use struct sctp_assoc_value instead
[  253.348833][T14763] openvswitch: netlink: VXLAN extension 173 out of range max 1
[  253.353672][T14755] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  253.483019][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2399'.
[  253.626736][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2401'.
[  253.698731][T14782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2401'.
[  253.716886][T14782] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  253.823313][T14750] infiniband syz2: set active
[  253.844766][T14750] infiniband syz2: added bond0
[  253.958076][T14750] RDS/IB: syz2: added
[  253.966219][T14750] smc: adding ib device syz2 with port count 1
[  254.036966][T14750] smc:    ib device syz2 port 1 has pnetid SYZ0 (user defined)
[  254.404081][T14816] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  254.545643][T14820] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2414'.
[  254.756228][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'.
[  254.791474][T14835] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2416'.
[  254.848594][T14833] team1: entered promiscuous mode
[  254.869041][T14833] team1: entered allmulticast mode
[  255.226322][T14857] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  255.281463][T14860] gretap0: left promiscuous mode
[  255.318434][T14860] dummy0: left promiscuous mode
[  255.386557][T14860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.493116][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2424'.
[  255.661706][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.730352][T14878] erspan0: left promiscuous mode
[  255.737967][T14878] erspan0: left allmulticast mode
[  255.778060][T14878] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.785890][T14878] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.916314][T14878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.962647][T14878] veth0_virt_wifi: left promiscuous mode
[  255.972709][T14878] tipc: Resetting bearer <eth:macvlan1>
[  256.003485][T14878] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  256.023058][T14878] gretap1: left promiscuous mode
[  256.030067][T14878] gretap1: left allmulticast mode
[  256.061838][T14878] veth3: left allmulticast mode
[  256.126862][T14878] tipc: Resetting bearer <eth:syzkaller0>
[  256.134063][T14878] syzkaller0: left promiscuous mode
[  256.142701][T14878] syzkaller0: left allmulticast mode
[  256.160078][T14878] geneve2: left promiscuous mode
[  256.174928][T14878] geneve2: left allmulticast mode
[  256.187480][T14878] veth5: left allmulticast mode
[  256.197302][T14878] veth7: left promiscuous mode
[  256.211490][T14878] bond7: left promiscuous mode
[  256.217479][T14878] bond7: left allmulticast mode
[  256.240174][T14878] vlan2: left promiscuous mode
[  256.247773][T14878] bond8: left promiscuous mode
[  256.252909][T14878] vlan2: left allmulticast mode
[  256.258166][T14878] bond8: left allmulticast mode
[  256.317752][   T49] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.330071][   T55] block nbd0: Possible stuck request ffff888025200000: control (read@0,1024B). Runtime 120 seconds
[  256.344328][   T55] block nbd0: Possible stuck request ffff8880252001c0: control (read@1024,1024B). Runtime 120 seconds
[  256.357173][   T55] block nbd0: Possible stuck request ffff888025200380: control (read@2048,1024B). Runtime 120 seconds
[  256.369045][   T55] block nbd0: Possible stuck request ffff888025200540: control (read@3072,1024B). Runtime 120 seconds
[  256.380844][   T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.433683][   T49] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.453762][   T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.483719][   T49] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.500765][   T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.516161][   T49] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.539323][   T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.647180][T14872] hsr0 speed is unknown, defaulting to 1000
[  257.923905][T14942] validate_nla: 57 callbacks suppressed
[  257.923923][T14942] netlink: 'syz.1.2436': attribute type 33 has an invalid length.
[  257.941220][T14942] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2436'.
[  257.993655][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'.
[  258.728375][T14874] infiniband syz!: set down
[  258.755670][T14874] infiniband syz!: added team_slave_0
[  258.784718][T14874] syz!: rxe_create_cq: returned err = -12
[  258.795220][T14874] infiniband syz!: Couldn't create ib_mad CQ
[  258.812550][T14874] infiniband syz!: Couldn't open port 1
[  258.894412][T14981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2447'.
[  258.917748][T14981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2447'.
[  258.980978][T14874] RDS/IB: syz!: added
[  258.996813][T14874] smc: adding ib device syz! with port count 1
[  259.005611][T14874] smc:    ib device syz! port 1 has pnetid 
[  259.083792][T14992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.121046][T14994] syzkaller0: entered promiscuous mode
[  259.139448][T14994] syzkaller0: entered allmulticast mode
[  259.208528][T14994] tipc: Resetting bearer <eth:syzkaller0>
[  259.274385][T14994] tipc: Disabling bearer <eth:syzkaller0>
[  259.416396][T15001] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2452'.
[  259.441128][T15004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.448911][T15004] syzkaller0: entered promiscuous mode
[  259.474760][T15004] syzkaller0: entered allmulticast mode
[  259.585610][T15004] tipc: Resetting bearer <eth:syzkaller0>
[  259.618897][T15004] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2453'.
[  259.649525][T15003] tipc: Resetting bearer <eth:syzkaller0>
[  259.693036][T15003] tipc: Disabling bearer <eth:syzkaller0>
[  259.872040][T15020] rdma_op ffff88807f0229f0 conn xmit_rdma 0000000000000000
[  260.187662][T15034] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2462'.
[  260.418042][T15048] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  260.554171][T15052] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  260.669568][T15066] netlink: 'syz.0.2470': attribute type 1 has an invalid length.
[  262.099866][T15105] netlink: 'syz.0.2482': attribute type 7 has an invalid length.
[  262.253351][T15112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2483'.
[  262.273348][T15110] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20001
[  262.323939][T15113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'.
[  262.444053][T15124] siw: device registration error -23
[  262.615624][T15133] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  262.905368][T15154] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2497'.
[  263.087555][T15166] __nla_validate_parse: 1 callbacks suppressed
[  263.087574][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2503'.
[  263.133221][T15166] chnl_net:caif_netlink_parms(): no params data found
[  263.232727][T15163] hsr0 speed is unknown, defaulting to 1000
[  263.421994][T15180] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2509'.
[  263.595583][T15191] syz.3.2513: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  263.642619][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'.
[  263.644265][T15191] CPU: 0 UID: 0 PID: 15191 Comm: syz.3.2513 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  263.644290][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  263.644310][T15191] Call Trace:
[  263.644318][T15191]  <TASK>
[  263.644326][T15191]  dump_stack_lvl+0x189/0x250
[  263.644358][T15191]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.644379][T15191]  ? __pfx__printk+0x10/0x10
[  263.644410][T15191]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  263.644432][T15191]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  263.644455][T15191]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  263.644479][T15191]  warn_alloc+0x214/0x310
[  263.644505][T15191]  ? stack_depot_save_flags+0x40/0x860
[  263.644528][T15191]  ? __pfx_warn_alloc+0x10/0x10
[  263.644554][T15191]  ? kasan_save_track+0x4f/0x80
[  263.644576][T15191]  ? xskq_create+0x56/0x170
[  263.644595][T15191]  ? xsk_init_queue+0xb0/0x110
[  263.644612][T15191]  ? xsk_setsockopt+0x4dc/0x8d0
[  263.644627][T15191]  ? do_sock_setsockopt+0x17c/0x1b0
[  263.644649][T15191]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  263.644670][T15191]  ? do_syscall_64+0xfa/0x3b0
[  263.644691][T15191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.644717][T15191]  __vmalloc_node_range_noprof+0x125/0x12f0
[  263.644771][T15191]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  263.644803][T15191]  ? __kasan_kmalloc+0x93/0xb0
[  263.644828][T15191]  vmalloc_user_noprof+0xad/0xf0
[  263.644852][T15191]  ? xskq_create+0xbf/0x170
[  263.644872][T15191]  xskq_create+0xbf/0x170
[  263.644895][T15191]  xsk_init_queue+0xb0/0x110
[  263.644917][T15191]  xsk_setsockopt+0x4dc/0x8d0
[  263.644939][T15191]  ? __pfx_xsk_setsockopt+0x10/0x10
[  263.644958][T15191]  ? __pfx_aa_sk_perm+0x10/0x10
[  263.644984][T15191]  ? aa_sock_opt_perm+0xff/0x1b0
[  263.645010][T15191]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  263.645029][T15191]  ? __pfx_xsk_setsockopt+0x10/0x10
[  263.645049][T15191]  do_sock_setsockopt+0x17c/0x1b0
[  263.645078][T15191]  __x64_sys_setsockopt+0x13f/0x1b0
[  263.645107][T15191]  do_syscall_64+0xfa/0x3b0
[  263.645127][T15191]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.645147][T15191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.645165][T15191]  ? clear_bhb_loop+0x60/0xb0
[  263.645186][T15191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.645204][T15191] RIP: 0033:0x7f795198ebe9
[  263.645224][T15191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.645240][T15191] RSP: 002b:00007f7952823038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  263.645258][T15191] RAX: ffffffffffffffda RBX: 00007f7951bb5fa0 RCX: 00007f795198ebe9
[  263.645271][T15191] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  263.645281][T15191] RBP: 00007f7951a11e19 R08: 0000000000000004 R09: 0000000000000000
[  263.645292][T15191] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.645304][T15191] R13: 00007f7951bb6038 R14: 00007f7951bb5fa0 R15: 00007ffd123c3648
[  263.645332][T15191]  </TASK>
[  263.646915][T15191] Mem-Info:
[  264.007803][T15191] active_anon:10474 inactive_anon:0 isolated_anon:0
[  264.007803][T15191]  active_file:1343 inactive_file:39898 isolated_file:0
[  264.007803][T15191]  unevictable:768 dirty:72 writeback:0
[  264.007803][T15191]  slab_reclaimable:11668 slab_unreclaimable:136689
[  264.007803][T15191]  mapped:33678 shmem:5786 pagetables:1252
[  264.007803][T15191]  sec_pagetables:0 bounce:0
[  264.007803][T15191]  kernel_misc_reclaimable:0
[  264.007803][T15191]  free:1286718 free_pcp:14781 free_cma:0
[  264.101525][T15191] Node 0 active_anon:42496kB inactive_anon:0kB active_file:5372kB inactive_file:159392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135612kB dirty:284kB writeback:0kB shmem:22508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13004kB pagetables:4788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  264.188666][T15191] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  264.229990][T15191] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  264.277018][T15191] lowmem_reserve[]: 0 2497 2499 2499 2499
[  264.282871][T15191] Node 0 DMA32 free:1239272kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46848kB inactive_anon:0kB active_file:5372kB inactive_file:157816kB unevictable:1536kB writepending:284kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:36724kB local_pcp:19708kB free_cma:0kB
[  264.316247][T15191] lowmem_reserve[]: 0 0 1 1 1
[  264.320988][T15191] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  264.353043][T15191] lowmem_reserve[]: 0 0 0 0 0
[  264.358247][T15191] Node 1 Normal free:3887352kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21684kB local_pcp:10592kB free_cma:0kB
[  264.390929][T15191] lowmem_reserve[]: 0 0 0 0 0
[  264.402262][T15191] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  264.416097][T15191] Node 0 DMA32: 2*4kB (E) 4*8kB (UME) 1*16kB (M) 1*32kB (E) 130*64kB (UME) 56*128kB (UM) 44*256kB (UME) 31*512kB (UM) 32*1024kB (UME) 8*2048kB (U) 280*4096kB (UM) = 1238744kB
[  264.434164][T15191] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  264.447244][T15191] Node 1 Normal: 224*4kB (UM) 61*8kB (UME) 41*16kB (UME) 118*32kB (UME) 33*64kB (UME) 6*128kB (UME) 3*256kB (ME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3887352kB
[  264.466970][T15191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  264.476919][T15191] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  264.486666][T15191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  264.496421][T15191] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  264.510612][T15191] 48323 total pagecache pages
[  264.515383][T15191] 0 pages in swap cache
[  264.519682][T15191] Free swap  = 124996kB
[  264.523981][T15191] Total swap = 124996kB
[  264.531949][T15191] 2097051 pages RAM
[  264.536928][T15191] 0 pages HighMem/MovableOnly
[  264.541605][T15191] 425645 pages reserved
[  264.547882][T15191] 0 pages cma reserved
[  264.617640][  T123] block nbd2: Possible stuck request ffff8880252e5080: control (read@0,1024B). Runtime 30 seconds
[  264.633073][  T123] block nbd2: Possible stuck request ffff8880252e5240: control (read@1024,1024B). Runtime 30 seconds
[  264.645137][  T123] block nbd2: Possible stuck request ffff8880252e5400: control (read@2048,1024B). Runtime 30 seconds
[  264.657193][  T123] block nbd2: Possible stuck request ffff8880252e55c0: control (read@3072,1024B). Runtime 30 seconds
[  266.950498][T15249] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  266.983531][T15255] netlink: 'syz.4.2534': attribute type 1 has an invalid length.
[  267.005705][T15255] netlink: 'syz.4.2534': attribute type 4 has an invalid length.
[  267.013499][T15255] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2534'.
[  267.175466][ T8092] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  267.704347][T15312] geneve3: entered promiscuous mode
[  267.915909][T15320] netlink: 'syz.0.2549': attribute type 3 has an invalid length.
[  267.937729][T15320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.266330][T15339] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2557'.
[  268.366876][T15341] netlink: 'syz.4.2558': attribute type 11 has an invalid length.
[  268.453958][T15351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2559'.
[  268.503421][T15353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2560'.
[  268.998990][T15380] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2570'.
[  269.011683][T15380] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  269.223193][T15394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2574'.
[  269.359487][T15395] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2574'.
[  269.451998][T15402] netlink: 'syz.2.2576': attribute type 1 has an invalid length.
[  269.482310][T15405] netlink: 'syz.0.2577': attribute type 7 has an invalid length.
[  269.497579][T15402] 8021q: adding VLAN 0 to HW filter on device bond10
[  269.510892][T15405] : entered promiscuous mode
[  269.517406][T15402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2576'.
[  269.517970][T15405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2577'.
[  269.541621][T15405] netlink: 'syz.0.2577': attribute type 7 has an invalid length.
[  269.542730][T15406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2577'.
[  269.719326][T15410] bond3: (slave gretap2): Releasing backup interface
[  269.752524][T15409] team0: Mode changed to "activebackup"
[  269.765440][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2580'.
[  269.996383][T15431] netlink: 'syz.2.2582': attribute type 1 has an invalid length.
[  270.093955][T15436] netlink: 'syz.4.2583': attribute type 4 has an invalid length.
[  270.278702][T15451] netlink: 'syz.0.2584': attribute type 1 has an invalid length.
[  270.291954][T15451] netlink: 'syz.0.2584': attribute type 1 has an invalid length.
[  270.923225][T15491] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  270.951814][T15491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.255719][T15512] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  271.294726][T15512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.743763][T15535] 8021q: adding VLAN 0 to HW filter on device team0
[  271.820507][T15535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.903817][T15556] gre3: entered promiscuous mode
[  271.931457][T15556] gre3: entered allmulticast mode
[  272.138315][T15563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.164356][T15563] syzkaller0: entered promiscuous mode
[  272.174780][T15563] syzkaller0: entered allmulticast mode
[  272.267492][T15563] tipc: Resetting bearer <eth:syzkaller0>
[  272.358191][T15563] pimreg: left allmulticast mode
[  272.448810][T15580] validate_nla: 1 callbacks suppressed
[  272.448826][T15580] netlink: 'syz.2.2621': attribute type 10 has an invalid length.
[  272.468449][T15580] bridge_slave_1: left allmulticast mode
[  272.484435][T15580] bridge_slave_1: left promiscuous mode
[  272.492813][T15580] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.519151][T15580] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  272.561920][T15562] tipc: Resetting bearer <eth:syzkaller0>
[  272.600995][T15562] tipc: Disabling bearer <eth:syzkaller0>
[  273.266808][T15622] sctp: [Deprecated]: syz.0.2632 (pid 15622) Use of struct sctp_assoc_value in delayed_ack socket option.
[  273.266808][T15622] Use struct sctp_sack_info instead
[  273.311031][T15622] __nla_validate_parse: 20 callbacks suppressed
[  273.311048][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'.
[  273.366324][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'.
[  273.389289][T15635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2635'.
[  273.414753][T15635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2635'.
[  273.544078][T15633] syzkaller1: entered promiscuous mode
[  273.557308][T15633] syzkaller1: entered allmulticast mode
[  273.609328][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'.
[  273.640409][T15639] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  273.657312][T15639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.190378][T15685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2650'.
[  274.280458][T15688] ipvlan2: entered promiscuous mode
[  274.288580][T15688] bridge0: port 1(ipvlan2) entered blocking state
[  274.297616][T15688] bridge0: port 1(ipvlan2) entered disabled state
[  274.304260][T15688] ipvlan2: entered allmulticast mode
[  274.310192][T15688] bridge0: entered allmulticast mode
[  274.329563][T15688] ipvlan2: left allmulticast mode
[  274.334927][T15688] bridge0: left allmulticast mode
[  274.560425][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2658'.
[  275.030759][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2664'.
[  275.040740][T15733] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  275.061861][T15733] netlink: 'syz.3.2665': attribute type 9 has an invalid length.
[  275.069763][T15733] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.2665'.
[  275.108807][T15730] vlan4: entered promiscuous mode
[  275.113961][T15730] bridge0: entered promiscuous mode
[  275.282942][T15739] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2667'.
[  275.931464][T15771] netlink: 'syz.2.2674': attribute type 1 has an invalid length.
[  276.785644][T15828] sock: sock_timestamping_bind_phc: sock not bind to device
[  277.252356][T15858] netlink: 'syz.3.2702': attribute type 10 has an invalid length.
[  277.301785][T15858] netlink: 'syz.3.2702': attribute type 10 has an invalid length.
[  277.313512][T15859] netlink: 'syz.2.2700': attribute type 16 has an invalid length.
[  277.754354][T15892] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  278.518476][T15939] netlink: 'syz.4.2725': attribute type 10 has an invalid length.
[  278.569700][T15939] bridge_slave_1: entered promiscuous mode
[  278.581513][T15939] bridge_slave_1: entered allmulticast mode
[  278.589672][T15939] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  278.871987][T15958] __nla_validate_parse: 17 callbacks suppressed
[  278.872006][T15958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2732'.
[  278.980713][T15965] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2736'.
[  279.017033][T15965] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2736'.
[  279.046543][T15970] netlink: 'syz.3.2738': attribute type 10 has an invalid length.
[  279.054496][T15970] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2738'.
[  279.067000][T15965] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2736'.
[  279.112994][T15970] team0: Port device geneve0 added
[  279.125815][T15965] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2736'.
[  279.139943][T15965] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2736'.
[  279.162166][T15981] bond0: Device is already in use.
[  279.194265][T15965] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2736'.
[  279.210663][T15965] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2736'.
[  279.234991][T15965] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2736'.
[  279.342295][T15990] netlink: 'syz.2.2744': attribute type 1 has an invalid length.
[  279.568387][T16003] netlink: 'syz.2.2748': attribute type 24 has an invalid length.
[  279.643001][T16010] netlink: 'syz.2.2750': attribute type 33 has an invalid length.
[  279.652261][T16009] netlink: 'syz.2.2750': attribute type 33 has an invalid length.
[  280.133946][T16022] netlink: 'syz.3.2754': attribute type 33 has an invalid length.
[  280.307672][T16033] veth0: entered promiscuous mode
[  280.377444][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805bffc000: rx timeout, send abort
[  280.389138][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bffc000: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session.
[  280.712420][T16059] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  280.806782][T16064] delete_channel: no stack
[  281.436441][T16077] nftables ruleset with unbound chain
[  281.455804][T16072] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  281.463282][T16072] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  281.496752][T16072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.085739][T16120] syz.2.2782 uses old SIOCAX25GETINFO
[  282.118855][T16126] netlink: 'syz.4.2783': attribute type 1 has an invalid length.
[  282.628638][T16160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.667917][T16160] netlink: 'syz.3.2790': attribute type 11 has an invalid length.
[  282.880079][T16171] netlink: 'syz.3.2795': attribute type 13 has an invalid length.
[  282.947507][T16174] netlink: 'syz.1.2793': attribute type 39 has an invalid length.
[  283.217474][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.255534][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.272305][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.305296][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.326827][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.339997][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.347974][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.360276][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.370422][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.382492][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.397280][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.404248][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.412529][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.419902][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.427801][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.436700][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.444308][T16208] IPVS: length: 157 != 24
[  283.459053][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.466014][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.472829][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.480012][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.486958][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.497612][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.504444][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.511670][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.523625][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.535539][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.563539][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.591570][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.610497][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.617694][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.672535][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.683533][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.703115][T16197] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20002
[  283.750728][T16215] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.766824][T16215] syzkaller0: entered promiscuous mode
[  283.772384][T16215] syzkaller0: entered allmulticast mode
[  283.782806][T16215] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  284.241778][T16242] __nla_validate_parse: 135 callbacks suppressed
[  284.241794][T16242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2817'.
[  284.264115][T16242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2817'.
[  284.310884][T16249] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2819'.
[  284.336278][T16249] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  284.537518][T16263] pim6reg: entered allmulticast mode
[  284.777885][T16286] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2828'.
[  284.804764][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2828'.
[  284.910230][T16297] smc: net device bond0 applied user defined pnetid SYZ2
[  284.938442][T16297] smc: net device bond0 erased user defined pnetid SYZ2
[  284.961590][T16297] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0
[  285.100224][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2835'.
[  285.168396][T16315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2837'.
[  285.210275][T16319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2837'.
[  285.479317][T16333] validate_nla: 33 callbacks suppressed
[  285.479335][T16333] netlink: 'syz.0.2843': attribute type 10 has an invalid length.
[  285.530553][T16333] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  285.591075][T16333] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  285.599369][T16338] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.2844'.
[  285.803286][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'.
[  286.370050][T16378] sctp: [Deprecated]: syz.4.2854 (pid 16378) Use of int in maxseg socket option.
[  286.370050][T16378] Use struct sctp_assoc_value instead
[  286.397739][   T55] block nbd0: Possible stuck request ffff888025200000: control (read@0,1024B). Runtime 150 seconds
[  286.409161][   T55] block nbd0: Possible stuck request ffff8880252001c0: control (read@1024,1024B). Runtime 150 seconds
[  286.421033][   T55] block nbd0: Possible stuck request ffff888025200380: control (read@2048,1024B). Runtime 150 seconds
[  286.434899][   T55] block nbd0: Possible stuck request ffff888025200540: control (read@3072,1024B). Runtime 150 seconds
[  286.712832][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  286.722785][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  286.732450][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  286.770483][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  286.790161][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  286.868880][T16394] netlink: 'syz.1.2857': attribute type 1 has an invalid length.
[  286.911931][T16389] hsr0 speed is unknown, defaulting to 1000
[  286.977457][T16398] geneve3: entered promiscuous mode
[  286.995392][T16398] geneve3: entered allmulticast mode
[  287.115328][T16405] syzkaller1: entered promiscuous mode
[  287.120829][T16405] syzkaller1: entered allmulticast mode
[  287.251133][T16413] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  288.855031][   T51] Bluetooth: hci3: command tx timeout
[  288.894519][T16422] vlan1: entered allmulticast mode
[  288.899836][T16422] macvlan1: entered allmulticast mode
[  288.905444][T16422] veth1_vlan: entered allmulticast mode
[  288.911250][T16424] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  289.311569][T16407] siw: device registration error -23
[  289.393910][T16451] __nla_validate_parse: 6 callbacks suppressed
[  289.393928][T16451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2875'.
[  289.503411][T16456] netlink: 'syz.1.2877': attribute type 1 has an invalid length.
[  289.510299][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'.
[  289.613911][T16456] 8021q: adding VLAN 0 to HW filter on device bond4
[  289.682144][T16456] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  289.758228][T16461] veth11: entered promiscuous mode
[  289.778431][T16461] bond4: (slave veth11): Enslaving as an active interface with a down link
[  289.826014][T16465] vlan2: entered allmulticast mode
[  289.837661][T16465] bond4: entered allmulticast mode
[  289.857340][T16465] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  290.064529][T16482] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2884'.
[  290.100228][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2885'.
[  290.247630][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2886'.
[  290.265894][T16488] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  290.278233][T16488] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.323645][T16495] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2887'.
[  290.348679][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2887'.
[  290.406066][T16389] chnl_net:caif_netlink_parms(): no params data found
[  290.904549][T16389] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.934947][   T51] Bluetooth: hci3: command tx timeout
[  290.934947][T16389] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.935158][T16389] bridge_slave_0: entered allmulticast mode
[  290.992798][T16389] bridge_slave_0: entered promiscuous mode
[  291.122947][T16389] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.131774][T16389] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.139994][T16389] bridge_slave_1: entered allmulticast mode
[  291.149633][T16389] bridge_slave_1: entered promiscuous mode
[  291.267324][T16389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.290829][T16389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.356950][T16557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2898'.
[  291.392315][T16561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2900'.
[  291.413093][T16559] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2900'.
[  291.440259][T16557] IPv6: sit2: Disabled Multicast RS
[  291.446843][T16557] sit2: entered allmulticast mode
[  291.508901][T16389] team0: Port device team_slave_0 added
[  291.526103][T16389] team0: Port device team_slave_1 added
[  291.628502][T16389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  291.637975][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.670261][T16389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  291.705530][T16389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  291.712485][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  291.752960][T16574] netlink: 'syz.2.2905': attribute type 1 has an invalid length.
[  291.753810][T16389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  291.875160][T16580] netlink: 'syz.4.2908': attribute type 3 has an invalid length.
[  291.962003][T16389] hsr_slave_0: entered promiscuous mode
[  291.971568][T16389] hsr_slave_1: entered promiscuous mode
[  291.985426][T16389] debugfs: 'hsr0' already exists in 'hsr'
[  292.001403][T16389] Cannot create hsr debugfs directory
[  292.170663][T16594] netlink: 'syz.2.2915': attribute type 1 has an invalid length.
[  292.263089][T16598] netlink: 'syz.2.2916': attribute type 21 has an invalid length.
[  292.437479][T16389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.457905][T16389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  292.468811][T16612] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  292.593330][T16389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.606669][T16389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  292.718912][T16389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.752694][T16389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  292.836746][T16389] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.847359][T16389] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  293.003296][T16636] netlink: 'syz.0.2925': attribute type 1 has an invalid length.
[  293.031351][   T51] Bluetooth: hci3: command tx timeout
[  293.129120][T16636] 8021q: adding VLAN 0 to HW filter on device bond4
[  293.186189][T16641] 8021q: adding VLAN 0 to HW filter on device bond4
[  293.186506][T16650] netlink: 'syz.4.2928': attribute type 4 has an invalid length.
[  293.205369][T16641] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  293.217185][T16650] xt_limit: Overflow, try lower: 271964/0
[  293.227289][T16641] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  293.343188][T16636] macvlan2: entered promiscuous mode
[  293.359258][T16636] macvlan2: entered allmulticast mode
[  293.375420][T16636] bond4: entered promiscuous mode
[  293.396468][T16636] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  293.575314][T16636] bond4: left promiscuous mode
[  293.666933][T16666] netlink: 'syz.1.2934': attribute type 1 has an invalid length.
[  293.797193][T16389] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  293.833041][T16389] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  293.875582][T16389] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  293.914097][T16389] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  294.196734][T16389] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.269014][T16389] 8021q: adding VLAN 0 to HW filter on device team0
[  294.333100][ T8092] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.340332][ T8092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.386177][ T8092] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.393361][ T8092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.552944][T16710] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  294.695492][  T123] block nbd2: Possible stuck request ffff8880252e5080: control (read@0,1024B). Runtime 60 seconds
[  294.706290][  T123] block nbd2: Possible stuck request ffff8880252e5240: control (read@1024,1024B). Runtime 60 seconds
[  294.718280][  T123] block nbd2: Possible stuck request ffff8880252e5400: control (read@2048,1024B). Runtime 60 seconds
[  294.733654][  T123] block nbd2: Possible stuck request ffff8880252e55c0: control (read@3072,1024B). Runtime 60 seconds
[  294.958394][T16731] __nla_validate_parse: 7 callbacks suppressed
[  294.958411][T16731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2948'.
[  294.980695][T16732] netlink: 'syz.2.2947': attribute type 8 has an invalid length.
[  295.096624][ T5868] Bluetooth: hci3: command tx timeout
[  295.290100][T16389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.468712][T16389] veth0_vlan: entered promiscuous mode
[  295.501410][T16758] hsr0 speed is unknown, defaulting to 1000
[  295.527383][T16389] veth1_vlan: entered promiscuous mode
[  295.617059][T16389] veth0_macvtap: entered promiscuous mode
[  295.755503][T16389] veth1_macvtap: entered promiscuous mode
[  295.793928][T16389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.849216][T16389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.882912][ T8083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.907458][ T8083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.930159][ T8083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.953333][ T8083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.184041][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.205302][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.313438][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.328771][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.565709][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'.
[  297.175604][ T5868] Bluetooth: hci3: command 0x0405 tx timeout
[  297.662011][ T5868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  297.682534][ T5868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  297.715012][ T5868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  297.725825][ T5868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  297.744903][ T5868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  297.966989][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'.
[  298.099684][T16855] pimreg: entered allmulticast mode
[  298.176774][T16855] syzkaller1: entered promiscuous mode
[  298.187938][T16855] syzkaller1: entered allmulticast mode
[  298.203123][T16855] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  298.262252][T16840] hsr0 speed is unknown, defaulting to 1000
[  298.669105][T16864] netlink: 'syz.4.2980': attribute type 1 has an invalid length.
[  298.898180][T16876] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2982'.
[  298.905027][T16879] sch_tbf: peakrate 5120 is lower than or equals to rate 13523322194453681527 !
[  298.980349][T16878] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2983'.
[  299.096899][T16891] veth0: entered promiscuous mode
[  299.102157][T16884] IPVS: persistence engine module ip_vs_pe_À
 not found
[  299.182860][T16874] veth0: left promiscuous mode
[  299.407060][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2991'.
[  299.433174][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2991'.
[  299.468275][T16906] netlink: 'syz.3.2991': attribute type 1 has an invalid length.
[  299.481633][T16906] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.2991'.
[  299.503525][T16909] netlink: 'syz.0.2992': attribute type 10 has an invalid length.
[  299.511603][T16909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2992'.
[  299.561564][T16909] team0: Port device geneve0 added
[  299.816364][ T5868] Bluetooth: hci2: command tx timeout
[  299.973221][T16930] mac80211_hwsim hwsim11 ÿ
: renamed from wlan1
[  300.067630][T16840] chnl_net:caif_netlink_parms(): no params data found
[  300.180735][T16944] netlink: 'syz.4.2999': attribute type 83 has an invalid length.
[  300.227372][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3000'.
[  300.360747][T16960] netlink: 'syz.3.3000': attribute type 1 has an invalid length.
[  300.375347][T16840] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.382487][T16840] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.389996][T16960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3000'.
[  300.400511][T16840] bridge_slave_0: entered allmulticast mode
[  300.427801][T16840] bridge_slave_0: entered promiscuous mode
[  300.467132][T16958] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  300.469227][T16955] netdevsim netdevsim1: Direct firmware load for 	 failed with error -2
[  300.503349][T16955] netdevsim netdevsim1: Falling back to sysfs fallback for: 	
[  300.530422][T16840] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.555380][T16840] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.601175][T16840] bridge_slave_1: entered allmulticast mode
[  300.618938][T16840] bridge_slave_1: entered promiscuous mode
[  300.674273][T16840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.708634][T16840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.828221][T16840] team0: Port device team_slave_0 added
[  300.870946][T16840] team0: Port device team_slave_1 added
[  300.948045][T16840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.960373][T16840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.998973][T16840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.041114][T16840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.063969][T16840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.091333][T16840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.299932][T16840] hsr_slave_0: entered promiscuous mode
[  301.317063][T16840] hsr_slave_1: entered promiscuous mode
[  301.323623][T16840] debugfs: 'hsr0' already exists in 'hsr'
[  301.340259][T16840] Cannot create hsr debugfs directory
[  301.572255][T17007] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3011'.
[  301.846583][T17019] team0: Cannot enslave team device to itself
[  301.876874][T17021] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  301.913522][ T5868] Bluetooth: hci2: command tx timeout
[  301.943764][T17032] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0
[  302.321090][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3024'.
[  302.521772][T17064] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3028'.
[  302.849240][T17068] syzkaller1: entered promiscuous mode
[  302.865010][T17068] syzkaller1: entered allmulticast mode
[  302.927860][T17082] netlink: 'syz.0.3031': attribute type 39 has an invalid length.
[  303.176239][T16840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  303.218859][T16840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  303.246853][T16840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  303.330215][T16840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  303.543690][T17101] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.551494][T17101] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.653242][T17101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.667919][T17101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.781325][ T8090] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.797982][ T8090] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.832128][ T8090] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.876715][ T8090] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.958364][T17118] vlan2: entered allmulticast mode
[  303.963686][T17118] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  303.977944][T17119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  303.984954][ T5868] Bluetooth: hci2: command tx timeout
[  304.095387][T17125] netlink: 'syz.1.3042': attribute type 10 has an invalid length.
[  304.125605][T17125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3042'.
[  304.166114][T16840] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.178202][T17125] team0: Port device geneve0 added
[  304.275892][T16840] 8021q: adding VLAN 0 to HW filter on device team0
[  304.649234][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.656450][ T8090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.683156][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.690378][ T8090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.733276][ T8083] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.748137][ T8083] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  304.763044][ T8083] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  304.780643][ T8083] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.790767][ T8083] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  304.798192][T17152] netlink: 'syz.3.3048': attribute type 21 has an invalid length.
[  304.801628][T17153] netlink: 'syz.3.3048': attribute type 21 has an invalid length.
[  304.816155][ T8083] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  304.840527][ T8083] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  304.851503][ T8083] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  304.861260][ T8083] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  304.962170][T17161] ieee802154 phy0 wpan0: encryption failed: -22
[  305.107145][T16840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  305.543062][T17185] IPv6: sit2: Disabled Multicast RS
[  305.565742][T17185] sit2: entered allmulticast mode
[  305.691971][T16840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.795184][T17197] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3060'.
[  305.813333][T16840] veth0_vlan: entered promiscuous mode
[  305.835570][T16840] veth1_vlan: entered promiscuous mode
[  305.902471][T16840] veth0_macvtap: entered promiscuous mode
[  305.942367][T16840] veth1_macvtap: entered promiscuous mode
[  306.022631][T17210] netlink: 'syz.3.3065': attribute type 21 has an invalid length.
[  306.036513][T16840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.048177][T17212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3066'.
[  306.058687][ T5868] Bluetooth: hci2: command tx timeout
[  306.091627][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'.
[  306.093077][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3065'.
[  306.113660][T17212] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3066'.
[  306.121706][T16840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.139457][T17215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3065'.
[  306.299462][T17222] netlink: 'syz.3.3068': attribute type 4 has an invalid length.
[  306.322951][T17212] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  306.323597][T17222] netlink: 'syz.3.3068': attribute type 4 has an invalid length.
[  306.407442][ T8083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.416964][ T8083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.473307][T17229] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  306.482932][T17227] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  306.504907][ T8083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.526995][ T8083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.847328][T17250] netlink: 'syz.4.3073': attribute type 2 has an invalid length.
[  306.855648][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  306.874999][T10558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.883235][T10558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.923304][T17250] netlink: 'syz.4.3073': attribute type 1 has an invalid length.
[  306.938777][T10558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.982699][T10558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.992707][T17256] pimreg: entered allmulticast mode
[  307.042562][T17255] netlink: 'syz.4.3073': attribute type 11 has an invalid length.
[  307.054975][T17255] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3073'.
[  307.795021][T17258] IPVS: length: 120 != 8
[  307.795264][T17280] netlink: 'syz.2.3080': attribute type 4 has an invalid length.
[  307.858675][T17283] netlink: 'syz.2.3080': attribute type 4 has an invalid length.
[  308.101350][T17288] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  308.127179][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  308.138866][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.148682][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  308.159691][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  308.168153][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.225015][T17292] hsr0 speed is unknown, defaulting to 1000
[  308.326949][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  308.393601][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3085'.
[  308.443567][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3086'.
[  308.483441][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  308.625519][T17317] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3088'.
[  308.672104][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  308.955906][T17329] sctp: [Deprecated]: syz.2.3091 (pid 17329) Use of int in max_burst socket option deprecated.
[  308.955906][T17329] Use struct sctp_assoc_value instead
[  309.109570][T17335] openvswitch: netlink: Multiple metadata blocks provided
[  309.714007][T17360] validate_nla: 1 callbacks suppressed
[  309.714025][T17360] netlink: 'syz.0.3095': attribute type 4 has an invalid length.
[  309.775710][T17350] netlink: 'syz.0.3095': attribute type 4 has an invalid length.
[  310.113947][   T49] bond6 (unregistering): (slave gretap0): Releasing active interface
[  310.226448][ T5868] Bluetooth: hci4: command tx timeout
[  310.257676][   T49] dvmrp1 (unregistering): left allmulticast mode
[  310.322799][   T49] bridge0 (unregistering): left allmulticast mode
[  310.618737][   T49] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  310.628353][   T49] bridge_slave_1: left promiscuous mode
[  310.634446][   T49] bridge_slave_1: left allmulticast mode
[  310.640950][   T49] bond0 (unregistering): Released all slaves
[  310.739205][   T49] bond1 (unregistering): Released all slaves
[  310.841764][   T49] bond2 (unregistering): Released all slaves
[  310.859630][   T49] bond3 (unregistering): Released all slaves
[  310.957101][   T49] bond4 (unregistering): Released all slaves
[  311.050246][   T49] bond5 (unregistering): Released all slaves
[  311.063527][   T49] bond6 (unregistering): Released all slaves
[  311.077151][   T49] bond7 (unregistering): Released all slaves
[  311.090327][   T49] bond8 (unregistering): Released all slaves
[  311.112792][   T49] bond9 (unregistering): Released all slaves
[  311.125858][   T49] bond10 (unregistering): Released all slaves
[  311.142042][   T49] bond11 (unregistering): Released all slaves
[  311.159443][   T49] bond12 (unregistering): Released all slaves
[  311.173002][   T49] bond13 (unregistering): Released all slaves
[  311.191311][   T49] bond14 (unregistering): Released all slaves
[  311.209184][   T49] bond15 (unregistering): Released all slaves
[  311.238551][T17380] netlink: 'syz.1.3100': attribute type 1 has an invalid length.
[  311.282074][T17380] __nla_validate_parse: 3 callbacks suppressed
[  311.282090][T17380] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3100'.
[  311.540624][   T49] tipc: Left network mode
[  311.621620][T17399] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  311.779228][T17399] bond5: entered allmulticast mode
[  312.111045][T17421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3108'.
[  312.308093][ T5868] Bluetooth: hci4: command tx timeout
[  312.473378][T17438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3110'.
[  312.543127][T17451] veth0_to_team: entered promiscuous mode
[  312.550026][T17451] veth0_to_team: entered allmulticast mode
[  312.694922][T17459] sock: sock_timestamping_bind_phc: sock not bind to device
[  312.982096][T17292] chnl_net:caif_netlink_parms(): no params data found
[  313.101667][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3118'.
[  313.737274][T17504] netlink: 'syz.2.3125': attribute type 39 has an invalid length.
[  313.818973][   T49] batadv0: left promiscuous mode
[  313.830839][   T49] hsr_slave_0: left promiscuous mode
[  313.858195][   T49] pimreg (unregistering): left allmulticast mode
[  314.001636][T17510] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3127'.
[  314.056871][T17512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3127'.
[  314.076923][T17513] netlink: 'syz.3.3126': attribute type 10 has an invalid length.
[  314.380681][ T5868] Bluetooth: hci4: command tx timeout
[  314.750958][T17292] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.759688][T17292] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.768043][T17292] bridge_slave_0: entered allmulticast mode
[  314.784056][T17292] bridge_slave_0: entered promiscuous mode
[  314.793463][T17292] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.807457][T17292] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.819182][T17292] bridge_slave_1: entered allmulticast mode
[  314.827278][T17292] bridge_slave_1: entered promiscuous mode
[  314.902950][T17292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.997615][T17292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.048842][T17529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3129'.
[  315.179493][T17292] team0: Port device team_slave_0 added
[  315.213964][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'.
[  315.233688][T17292] team0: Port device team_slave_1 added
[  315.263252][T17536] ksmbd: Daemon and kernel module version mismatch. ksmbd: 43, kernel module: 1. User-space ksmbd should terminate.
[  315.297340][T17529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3129'.
[  315.489428][T17292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.507874][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.534491][T17292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.572890][T17292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.611715][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.730577][T17292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.813893][T17573] netlink: 'syz.3.3137': attribute type 1 has an invalid length.
[  315.927682][T17573] bond2: entered promiscuous mode
[  315.933147][T17573] 8021q: adding VLAN 0 to HW filter on device bond2
[  315.936508][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3136'.
[  315.944537][   T49] IPVS: stop unused estimator thread 0...
[  316.266128][T17292] hsr_slave_0: entered promiscuous mode
[  316.293199][T17292] hsr_slave_1: entered promiscuous mode
[  316.295132][T17595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3141'.
[  316.309505][T17292] debugfs: 'hsr0' already exists in 'hsr'
[  316.342789][T17292] Cannot create hsr debugfs directory
[  316.360279][T17599] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.3141'.
[  316.455397][ T5868] Bluetooth: hci4: command tx timeout
[  316.460980][   T55] block nbd0: Possible stuck request ffff888025200000: control (read@0,1024B). Runtime 180 seconds
[  316.473616][   T55] block nbd0: Possible stuck request ffff8880252001c0: control (read@1024,1024B). Runtime 180 seconds
[  316.485251][   T55] block nbd0: Possible stuck request ffff888025200380: control (read@2048,1024B). Runtime 180 seconds
[  316.496522][   T55] block nbd0: Possible stuck request ffff888025200540: control (read@3072,1024B). Runtime 180 seconds
[  316.714286][T17601] pim6reg1: entered promiscuous mode
[  316.732823][T17601] pim6reg1: entered allmulticast mode
[  316.800254][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3143'.
[  316.822742][T17601] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3143'.
[  317.398736][T17642] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3153'.
[  317.444191][T17646] netlink: 'syz.2.3154': attribute type 1 has an invalid length.
[  317.454910][T17645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3155'.
[  317.493328][T17646] netlink: 'syz.2.3154': attribute type 1 has an invalid length.
[  317.534995][T17646] netlink: 'syz.2.3154': attribute type 1 has an invalid length.
[  317.574847][T17650] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3154'.
[  317.601927][T17646] netlink: 'syz.2.3154': attribute type 2 has an invalid length.
[  317.639342][T17646] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3154'.
[  317.669874][T17658] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3158'.
[  318.097617][T17679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3159'.
[  318.179211][T17685] openvswitch: netlink: VXLAN extension message has 11 unknown bytes.
[  318.297355][T17687] netlink: 'syz.0.3163': attribute type 1 has an invalid length.
[  318.486164][T17292] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  318.545394][T17292] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  318.627455][T17292] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  318.660491][T17292] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  319.084522][T17736] netlink: 'syz.1.3172': attribute type 2 has an invalid length.
[  319.181989][T17738] 8021q: adding VLAN 0 to HW filter on device bond1
[  319.203858][T17739] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  319.223420][T17292] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.408434][T17292] 8021q: adding VLAN 0 to HW filter on device team0
[  319.560800][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.567993][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.612072][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.619278][ T8090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.732402][T17776] netlink: 'syz.3.3180': attribute type 17 has an invalid length.
[  319.773447][T17777] netlink: 'syz.3.3180': attribute type 17 has an invalid length.
[  319.827807][T17292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  319.870743][T17783] netlink: 'syz.0.3182': attribute type 21 has an invalid length.
[  320.270800][T17292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.613103][T17821] netlink: zone id is out of range
[  320.631495][T17821] netlink: zone id is out of range
[  320.662758][T17821] netlink: zone id is out of range
[  320.690908][T17821] netlink: zone id is out of range
[  320.698898][T17821] netlink: zone id is out of range
[  320.729178][T17821] netlink: zone id is out of range
[  320.748954][T17821] netlink: zone id is out of range
[  320.782643][T17821] netlink: zone id is out of range
[  320.807273][T17821] netlink: zone id is out of range
[  321.081664][T17842] IPVS: length: 8 != 1152
[  321.332228][T17854] __nla_validate_parse: 11 callbacks suppressed
[  321.332248][T17854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3196'.
[  321.406722][T17292] veth0_vlan: entered promiscuous mode
[  321.441186][T17854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3196'.
[  321.457188][T17292] veth1_vlan: entered promiscuous mode
[  321.512565][T17864] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3198'.
[  321.755926][T17292] veth0_macvtap: entered promiscuous mode
[  321.796738][T17292] veth1_macvtap: entered promiscuous mode
[  321.804364][T17880] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  321.923333][T17292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.995380][T17292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.031275][T17893] Unsupported ieee802154 address type: 0
[  322.113202][T17898] validate_nla: 1 callbacks suppressed
[  322.113220][T17898] netlink: 'syz.2.3207': attribute type 15 has an invalid length.
[  322.145630][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.157992][T17898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3207'.
[  322.179401][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.228390][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.330731][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.501674][T17912] C: left promiscuous mode
[  322.615897][ T8090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.644421][ T8090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.669465][T17926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3214'.
[  322.717467][T10558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.740446][T10558] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.749012][  T980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.771946][T10558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.782507][T10558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.836437][  T980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  323.159045][T17940] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3217'.
[  323.207855][  T980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  323.859043][T17959] net_ratelimit: 8 callbacks suppressed
[  323.859062][T17959] openvswitch: netlink: Multiple metadata blocks provided
[  323.882438][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'.
[  323.895758][T17963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3224'.
[  323.925611][T17959] netlink: 'syz.1.3222': attribute type 5 has an invalid length.
[  323.933381][T17959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3222'.
[  324.011416][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  324.032296][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  324.057707][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  324.066717][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  324.079019][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  324.249460][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'.
[  324.297691][T17975] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  324.396275][T17968] hsr0 speed is unknown, defaulting to 1000
[  324.636532][T17996] netlink: 'syz.3.3232': attribute type 12 has an invalid length.
[  324.791669][  T123] block nbd2: Possible stuck request ffff8880252e5080: control (read@0,1024B). Runtime 90 seconds
[  324.802773][  T123] block nbd2: Possible stuck request ffff8880252e5240: control (read@1024,1024B). Runtime 90 seconds
[  324.813838][  T123] block nbd2: Possible stuck request ffff8880252e5400: control (read@2048,1024B). Runtime 90 seconds
[  324.825126][  T123] block nbd2: Possible stuck request ffff8880252e55c0: control (read@3072,1024B). Runtime 90 seconds
[  325.062950][T18011] netlink: 'syz.3.3238': attribute type 3 has an invalid length.
[  325.970688][T17968] chnl_net:caif_netlink_parms(): no params data found
[  326.135174][   T51] Bluetooth: hci1: command tx timeout
[  326.207118][T18071] netlink: 'syz.4.3256': attribute type 1 has an invalid length.
[  326.305227][T17968] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.316987][T17968] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.324359][T17968] bridge_slave_0: entered allmulticast mode
[  326.332357][T17968] bridge_slave_0: entered promiscuous mode
[  326.356433][T18083] __nla_validate_parse: 5 callbacks suppressed
[  326.356450][T18083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3256'.
[  326.409602][T18078] veth3: entered promiscuous mode
[  326.445116][T17968] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.455538][T17968] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.462784][T17968] bridge_slave_1: entered allmulticast mode
[  326.471622][T17968] bridge_slave_1: entered promiscuous mode
[  326.548654][T18090] syzkaller0: entered promiscuous mode
[  326.554220][T18090] syzkaller0: entered allmulticast mode
[  326.944871][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  328.215837][   T51] Bluetooth: hci1: command tx timeout
[  328.250984][T18104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  328.317954][T17968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.362762][T17968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.628145][T17968] team0: Port device team_slave_0 added
[  328.825989][T18134] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  328.960716][T18142] Bluetooth: MGMT ver 1.23
[  329.155759][T18150] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3281'.
[  330.297426][   T51] Bluetooth: hci1: command tx timeout
[  330.393545][T17968] team0: Port device team_slave_1 added
[  330.399969][T18136] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  330.554032][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3285'.
[  330.586293][T18155] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3282'.
[  330.596210][T18158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3285'.
[  330.667776][T17968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.675318][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.705887][T17968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.712318][T18164] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3284'.
[  330.719407][T17968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.736333][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.763281][T17968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.793487][T18168] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3286'.
[  331.001982][T17968] hsr_slave_0: entered promiscuous mode
[  331.020525][T17968] hsr_slave_1: entered promiscuous mode
[  331.028342][T17968] debugfs: 'hsr0' already exists in 'hsr'
[  331.034221][T17968] Cannot create hsr debugfs directory
[  331.078001][T18170] netlink: 'syz.2.3287': attribute type 29 has an invalid length.
[  331.091231][T18179] netlink: 'syz.3.3290': attribute type 1 has an invalid length.
[  331.102612][T18179] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3290'.
[  331.152664][T18170] dvmrp1: entered allmulticast mode
[  331.193421][T18183] openvswitch: netlink: IPv4 tun info is not correct
[  331.292931][T18183] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.3291'.
[  331.312502][T18183] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  331.908702][T17968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  331.925304][T17968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.939722][T17968] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  331.980414][T18220] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.002691][T18215] tipc: Resetting bearer <eth:syzkaller0>
[  332.093424][T17968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.142620][T17968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.155385][T17968] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  332.247506][T17968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.265065][T17968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.285033][T17968] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  332.375801][   T51] Bluetooth: hci1: command tx timeout
[  332.451855][T17968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  332.470998][T17968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.485068][T17968] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  332.528026][T18237] batman_adv: batadv0: Adding interface: dummy0
[  332.534454][T18237] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.562709][T18237] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  332.632891][T18210] tipc: Disabling bearer <eth:syzkaller0>
[  332.664837][T18239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3304'.
[  332.673822][T18239] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3304'.
[  332.718635][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3305'.
[  332.821440][T18242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.911610][T18242] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.123966][T17968] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  333.151398][T17968] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  333.199967][T17968] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  333.223433][T17968] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  333.276292][T18254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3309'.
[  333.306291][T18254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3309'.
[  333.390249][T18263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3309'.
[  333.442877][T18263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3309'.
[  333.489269][T17968] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.532231][T18241] infiniband syz0: set active
[  333.532465][T17968] 8021q: adding VLAN 0 to HW filter on device team0
[  333.560663][T18241] infiniband syz0: added ipvlan1
[  333.580602][T18273] netlink: 'syz.4.3311': attribute type 5 has an invalid length.
[  333.591487][T10558] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.598676][T10558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.717488][T17968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  333.736659][T17968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  333.756632][T18277] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  333.777958][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.785191][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.847890][T18241] RDS/IB: syz0: added
[  333.852416][T18241] smc: adding ib device syz0 with port count 1
[  333.891986][T18241] smc:    ib device syz0 port 1 has pnetid 
[  334.412140][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'.
[  334.642659][T17968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.772148][T18314] syzkaller0: entered promiscuous mode
[  334.784788][T18314] syzkaller0: entered allmulticast mode
[  335.665107][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  336.504078][T18324] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  336.570044][T17968] veth0_vlan: entered promiscuous mode
[  336.672776][T17968] veth1_vlan: entered promiscuous mode
[  336.826382][T17968] veth0_macvtap: entered promiscuous mode
[  336.855955][T17968] veth1_macvtap: entered promiscuous mode
[  336.924115][T17968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.988712][T17968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  337.019553][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  337.033584][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  337.059224][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  337.070336][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  337.685185][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  337.693546][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  337.704611][    C1] BUG: kernel NULL pointer dereference, address: 0000000000000649
[  337.712421][    C1] #PF: supervisor write access in kernel mode
[  337.718476][    C1] #PF: error_code(0x0002) - not-present page
[  337.724433][    C1] PGD 8000000029f44067 P4D 8000000029f44067 PUD 0 
[  337.730935][    C1] Oops: Oops: 0002 [#1] SMP KASAN PTI
[  337.736292][    C1] CPU: 1 UID: 0 PID: 18345 Comm: syz.3.3326 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  337.748000][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  337.758044][    C1] RIP: 0010:llc_ui_setsockopt+0x4e1/0x5f0
[  337.763762][    C1] Code: a2 f8 eb 4b e8 60 a8 3e f8 4c 6b f3 64 49 8d 9f a0 06 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cf 13 a2 f8 <4c> 89 33 eb 23 e8 35 a8 3e f8 4d 8d b7 0d 07 00 00 4c 89 f0 48 c1
[  337.783357][    C1] RSP: 0000:ffffc90003e2fad8 EFLAGS: 00010246
[  337.789425][    C1] RAX: 00000000000000c9 RBX: 0000000000000649 RCX: ffff888054200000
[  337.797381][    C1] RDX: 0000000000000100 RSI: ffffffff8be32660 RDI: ffff8880580e3c10
[  337.805337][    C1] RBP: ffffc90003e2fbd0 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6
[  337.813297][    C1] R10: dffffc0000000000 R11: ffffffff89810270 R12: 1ffff920007c5f60
[  337.821257][    C1] R13: ffff8880580e3c10 R14: 0000000000000001 R15: 0000000000000001
[  337.829216][    C1] FS:  000055558d574500(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000
[  337.838131][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.844695][    C1] CR2: 0000000000000649 CR3: 0000000075f82000 CR4: 00000000003526f0
[  337.852652][    C1] Call Trace:
[  337.855916][    C1]  <TASK>
[  337.858831][    C1]  ? call_timer_fn+0x17e/0x5f0
[  337.863600][    C1]  ? llc_ui_setsockopt+0x3e0/0x5f0
[  337.868704][    C1]  ? call_timer_fn+0xbe/0x5f0
[  337.873377][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  337.878482][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.883671][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.888852][    C1]  ? llc_ui_setsockopt+0x3e0/0x5f0
[  337.893958][    C1]  __run_timer_base+0x61a/0x860
[  337.898799][    C1]  ? ktime_get+0x3e/0x1f0
[  337.903118][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  337.908483][    C1]  run_timer_softirq+0xb7/0x180
[  337.913325][    C1]  handle_softirqs+0x283/0x870
[  337.918075][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  337.922824][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  337.928101][    C1]  __irq_exit_rcu+0xca/0x1f0
[  337.932679][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  337.937869][    C1]  irq_exit_rcu+0x9/0x30
[  337.942092][    C1]  sysvec_apic_timer_interrupt+0x57/0xc0
[  337.947714][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  337.953679][    C1] RIP: 0033:0x7fa00586ecd0
[  337.958089][    C1] Code: ff 48 8b 43 38 83 43 28 04 48 8d 50 fc 48 89 53 38 44 89 68 fc 8b 43 28 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 00 <c6> 44 24 1e 01 48 89 ee 44 89 e7 4c 89 44 24 10 4c 89 54 24 08 e8
[  337.978133][    C1] RSP: 002b:00007ffe037461b0 EFLAGS: 00000246
[  337.984228][    C1] RAX: ffffffff823c77ed RBX: 00007fa0066e5720 RCX: 000000000000276c
[  337.992184][    C1] RDX: ffffffff823c6aee RSI: ffffffff823c77ed RDI: 000000000000000e
[  338.000140][    C1] RBP: ffffffff823c6aee R08: 00007fa005bb6128 R09: 00007fa005ba2000
[  338.008098][    C1] R10: 00007fa004ff5008 R11: 000000000000000e R12: 000000000000000e
[  338.016056][    C1] R13: 0000000000000000 R14: ffffffff823c6aee R15: 000000000000276c
[  338.024136][    C1]  ? __fget_files+0x1e/0x420
[  338.028725][    C1]  ? __fget_files+0x1e/0x420
[  338.033308][    C1]  ? fdget+0x1d/0x1e0
[  338.037270][    C1]  ? __fget_files+0x1e/0x420
[  338.041850][    C1]  ? fdget+0x1d/0x1e0
[  338.045819][    C1]  </TASK>
[  338.048821][    C1] Modules linked in:
[  338.052714][    C1] CR2: 0000000000000649
[  338.056854][    C1] ---[ end trace 0000000000000000 ]---
[  338.062289][    C1] RIP: 0010:llc_ui_setsockopt+0x4e1/0x5f0
[  338.068000][    C1] Code: a2 f8 eb 4b e8 60 a8 3e f8 4c 6b f3 64 49 8d 9f a0 06 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 cf 13 a2 f8 <4c> 89 33 eb 23 e8 35 a8 3e f8 4d 8d b7 0d 07 00 00 4c 89 f0 48 c1
[  338.087592][    C1] RSP: 0000:ffffc90003e2fad8 EFLAGS: 00010246
[  338.093651][    C1] RAX: 00000000000000c9 RBX: 0000000000000649 RCX: ffff888054200000
[  338.101605][    C1] RDX: 0000000000000100 RSI: ffffffff8be32660 RDI: ffff8880580e3c10
[  338.109567][    C1] RBP: ffffc90003e2fbd0 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6
[  338.117533][    C1] R10: dffffc0000000000 R11: ffffffff89810270 R12: 1ffff920007c5f60
[  338.125494][    C1] R13: ffff8880580e3c10 R14: 0000000000000001 R15: 0000000000000001
[  338.133456][    C1] FS:  000055558d574500(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000
[  338.142373][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  338.148942][    C1] CR2: 0000000000000649 CR3: 0000000075f82000 CR4: 00000000003526f0
[  338.156901][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  338.164343][    C1] Kernel Offset: disabled
[  338.168656][    C1] Rebooting in 86400 seconds..