last executing test programs:

4.705392021s ago: executing program 3 (id=951):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)="89c9157afde08ea4387fbe5739d1766791827bb588e5a143fea3b55347c980460b48a9d8a6579c910b46ee7b5e2ecf067a673b4bd1061bfd94c39247445926593da3717f", 0x44}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x800) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$FOU_CMD_DEL(r6, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, 0x0, 0x0) (async)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

4.393059974s ago: executing program 3 (id=955):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28180, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
accept4$phonet_pipe(r5, 0x0, 0x0, 0x80000)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000180))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)

3.620052496s ago: executing program 4 (id=963):
syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @random="ff1e9af46090", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x45, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f", @ANYRESHEX=r0], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x8010)

3.390449217s ago: executing program 4 (id=965):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/251, 0x76, 0xfb, 0x1}, 0x28)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x0)
write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f000000000084"], 0x4e)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x50)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010)
shutdown(r3, 0x1)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a00)=""/245, 0xf5, <r5=>0x0, &(0x7f0000000240)=""/21, 0x15}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=r2], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r9)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4@\x00\x00', @ANYRES16=r10, @ANYBLOB="00022dbd7000fddbdf251500000008000300", @ANYRES32=r11, @ANYBLOB="18002b8008000100030800000c0005000100000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r8, @ANYRES16=r1, @ANYBLOB="00000000ffffffffffffffdf000058b846abad0000000000003f9fc8225d8d3de18e725597b219b0a49d39a0bf6fcb06360f43cc04b04a17", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)

3.293972663s ago: executing program 3 (id=966):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$inet(0x2b, 0x801, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x8001, 0x86, {{0x10, 0x4, 0x0, 0x2, 0x40, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @remote, {[@timestamp={0x44, 0xc, 0xc, 0x0, 0x3, [0x0, 0x0]}, @rr={0x7, 0x7, 0x9a, [@multicast2]}, @timestamp={0x44, 0x18, 0xd, 0x0, 0x4, [0x400, 0xb, 0x40, 0x1, 0x8]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0))
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b00)={0x188, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x44805}, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

3.018847353s ago: executing program 1 (id=969):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r3=>0x0})
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000140)={0x0, 0xb13})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0)
pipe(&(0x7f0000000040)) (async)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
close(r1) (async)
socket$alg(0x26, 0x5, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000140)={0x0, 0xb13}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) (async)

2.726990089s ago: executing program 1 (id=973):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0xfe}]}}}]}, 0x3c}}, 0x0)

2.538432404s ago: executing program 2 (id=974):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000140)={0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d000000800200000001000000002e2e2000"], 0x0, 0x31, 0x0, 0x1, 0x7}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0xb86}, 0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0xfffe)
preadv(r4, &(0x7f0000000100), 0xa, 0x0, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r5, 0x40107447, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, 0x0, 0x4000080)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000001200)={0x60000010})
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000100)={0xa000000d})
r13 = socket$netlink(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r13, &(0x7f00000002c0))

2.252737772s ago: executing program 1 (id=976):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x0, 0x3, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0)

2.063622075s ago: executing program 2 (id=977):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0xd}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40)

2.03606992s ago: executing program 3 (id=978):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

1.909505189s ago: executing program 1 (id=980):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f00000000c0)={'gre0\x00', <r0=>0x0, 0x7, 0x7800, 0x6, 0x7, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0xfffe}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818a10000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0xe4, '\x00', r0}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x3, @vifc_lcl_addr=@rand_addr=0x64010101, @multicast2}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r6 = accept$netrom(r1, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'})

1.907864092s ago: executing program 2 (id=981):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
write$tun(0xffffffffffffffff, 0x0, 0x3e)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102)
setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg(r3, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)="8f4b", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001640)="a919fb1d", 0x4}], 0x1, &(0x7f0000001a40)=[{0x10, 0x1, 0x8}], 0x10}}], 0x2, 0x20)

1.838664237s ago: executing program 4 (id=982):
syz_emit_ethernet(0xbe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x200204)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98980000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18)
r7 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000100)="d693d330de6f2b2f58066aa7d3d098f3921046d8210c00000000000000770a6f0584f760bee0baa1649d7280de481370d2ce19", &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
pipe(&(0x7f0000000240)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
write$cgroup_subtree(r9, &(0x7f0000000240)=ANY=[], 0xa)
r12 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000280)={0x80000004})
splice(r8, 0x0, r11, 0x0, 0xb11, 0x9)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2f64}, 0x1, 0x0, 0x0, 0x8d0}, 0x810)

1.823027133s ago: executing program 4 (id=983):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f00000000c0)=0x8, 0x4)

1.743512802s ago: executing program 3 (id=984):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newtaction={0x70, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x78}}, 0x0)
mmap(&(0x7f00005d1000/0xb000)=nil, 0xb000, 0x0, 0x11, r4, 0x1000)
accept(r3, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80)

1.650666193s ago: executing program 4 (id=985):
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000080000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269"], 0xd0060)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a3200000000780004806400018009000100686173680000000054000280080007400000000108000540000000070800024000000004080003400000007e0800014000000010080006400000000c08000740000000000800064000000005080002400000000c0800044000000004100001800a00010071756f746100"], 0xcc}}, 0x24000840)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0xa4, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x54}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000004}, 0x45800)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r2, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6f}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8d}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4801}, 0x4001)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x44, r4, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0xcc52298ab9c9769e}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.649815431s ago: executing program 0 (id=986):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r0}, 0x20)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0)
pipe(&(0x7f0000000840)={<r6=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1a, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@generic={0x6, 0xd, 0x9, 0x1, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0xc, 0x8, 0x9, 0xffffffffffffffe0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x3, 0x6, 0x4, 0x40}]}, &(0x7f0000000580)='GPL\x00', 0x80000000, 0xb7, &(0x7f0000000640)=""/183, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xf, 0x3, 0x2}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000880)=[r3, r0, r0, r4, r6], &(0x7f00000008c0)=[{0x3, 0x1, 0x0, 0x9}, {0xfffffffe, 0x5, 0xa, 0x7}, {0x3, 0x1, 0x9, 0x5}, {0x3, 0x3, 0x4000, 0x7}, {0x2, 0x5, 0x0, 0xc}, {0x4, 0x5, 0xf, 0x9}, {0x4, 0x3, 0x9}, {0x1, 0x5, 0x3}, {0x1, 0x3, 0x9, 0x7}, {0x1, 0x5, 0xc, 0x9}], 0x10, 0x2}, 0x94)
r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r7, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x47)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x44}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000003f000701feffffff00070000017c000010004280040008800600dd00800a00000c00018006000600800a000018000280140017"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.559184549s ago: executing program 4 (id=987):
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r1 = socket$inet6(0xa, 0x80003, 0xff)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa052071"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}]}, 0x2c}}, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x44884)
sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x74, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x1b, 0xfe, "87801f6c4f51878f1a0a1abf1407d4887e42f186d02e32"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6}], @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x74}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void}, 0x2c)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))

1.508862869s ago: executing program 1 (id=988):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$inet(0x2b, 0x801, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r4=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x8, 0x7, 0x8001, 0x86, {{0x10, 0x4, 0x0, 0x2, 0x40, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @remote, {[@timestamp={0x44, 0xc, 0xc, 0x0, 0x3, [0x0, 0x0]}, @rr={0x7, 0x7, 0x9a, [@multicast2]}, @timestamp={0x44, 0x18, 0xd, 0x0, 0x4, [0x400, 0xb, 0x40, 0x1, 0x8]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0))
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b00)={0x188, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x44805}, 0x40000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(0x4)

1.458634108s ago: executing program 3 (id=989):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x2)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
unshare(0x6a040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201100006000128009000100766c616e0000000050000280340004800c00010001000000020000000c000100cc090000060000000c00010027060000080000000c00010005000000050000000600010000000000100003800c003900040500008b00000008000500", @ANYRES32=r2], 0x88}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x18, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x4, 0x122}]}, 0x18}}, 0x0)
unshare(0x44000000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f0000000100)={0xa, 0x4e21, 0xfffa, @empty, 0x3}, 0x1c)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r7, 0x852ac000)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890)
socket$netlink(0x10, 0x3, 0x0)

1.321167704s ago: executing program 0 (id=990):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000020000000700000000000a0e0000000000000000000000000600000d0000000009000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000090000000004000000000000080300000000000000000000090600000000008c095bde4044e3940fc4738b31a1d5ac8cb07323f29ea80163a357c66e100ba9ca46b7193ca2d2383db0176812284fe646d31e1bf0a07d"], 0x0, 0x96}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0xdf6f622dfdcc160b, 0x61, 0x30, 0x5f, 0x0, 0x30]}}, 0x0, 0x2c, 0x0, 0x1, 0xfffff91c}, 0x28)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000001c0)={@mcast2, <r2=>0x0}, &(0x7f0000000200)=0x14)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES64=r3], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000740)={'broute\x00', 0x0, 0x3, 0x7a, [0x9, 0xffffffffffffffff, 0x80, 0x0, 0x2, 0xfffffffffffffffa], 0x5, &(0x7f0000000640)=[{}, {}, {}, {}, {}], &(0x7f00000006c0)=""/122}, &(0x7f0000000240)=0x78)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x35f, '\x00', r2, r0, 0x1, 0x0, 0x3}, 0x50)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1000}, 0x4)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000200)={0x0, 0xb007}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x7, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040)

1.163443535s ago: executing program 0 (id=991):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311", 0x3d}], 0x1}], 0x1, 0x40)
recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendto(r0, &(0x7f0000000000)="12000000feffe6ef006bbad110521256d6867199d0024db84ce5c70010e54951ebb7121da57d000000", 0x12, 0x8010, 0x0, 0x1e)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x41, 0x40002100, 0x0)

854.591762ms ago: executing program 2 (id=992):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1", 0x12}], 0x1}, 0x20000800)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000040)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x10}}}, 0x7)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r1=>r0, 0xb36, 0x8, 0x5})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x0, 0x8, 0x4, 0x28, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x20, 0x5, 0x101}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xf, 0x5, 0x6, 0x20010, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3}, 0x50)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8a78}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0xf6, 0x28, &(0x7f0000000140)=""/40, 0x41100, 0xc1, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000400)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xe, 0x9, 0xffffffff}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r4, r5], &(0x7f0000000740)=[{0x3, 0x5, 0x0, 0x8}, {0x5, 0x3, 0xe, 0x6c44ce4918456d2}, {0x4, 0x5, 0x10, 0x4}, {0x2, 0x3, 0x8, 0x1}], 0x10, 0x6}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
clock_gettime(0x6, &(0x7f00000003c0))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

852.22371ms ago: executing program 0 (id=993):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4128, 0x4)
sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async)
recvfrom(r1, &(0x7f0000000200)=""/131, 0x83, 0x2000, 0x0, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/17, @ANYRES32], 0x1c}}, 0x0)

733.637621ms ago: executing program 0 (id=994):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000015c0)={@ieee802154={0x24, @short={0x2, 0x3, 0xffff}}, {&(0x7f0000000140)=""/45, 0x2d}, &(0x7f0000000200), 0x20}, 0xa0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB="08000a00e1"], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) (async)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) (async)
write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30120005}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x6, 0x52d6a99449e9bfd8, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

488.222965ms ago: executing program 2 (id=995):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @loopback, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="434cb77703642c2e0694786c58de15b522ac677a18066c05cf919fcdf431de3b7e3ebaade460e5883c87024346cdd0c764e8660bef401a2f8d30262c3e7ac3c9b3148ea916c25e0f454400c173a3732124f02b9c4099a540f8d54bf95a9fe4163f061f", 0x63}, {&(0x7f0000000000)="69e4e70e93f754e6e223ef620144189076", 0x11}, {&(0x7f00000005c0)="44e4a3416f3809c2425689282700862e9194a6fe44c241cc7efccdd02047583a60e980965d6caf56e6e557da0d1a7c773e9db5c1fdb3f47f9956df66ceec9b276bb84ccc7e62ec8e3ec081bb0a5d1b3d7001a0af2aef386518742fcfd624ff9064f8d8292b838c4e1dd28fddefa346d5eedc3764144337cb51bbe7cd0365c0bb8f4fa85c225f66dedb52178e2be605", 0x8f}, {&(0x7f0000000340)="3b588eed1f25c7015fce29460ef155ce63278de1ce4f27ec3422bc25ce0f104cfa90254349eae3", 0x27}, {&(0x7f0000000500)="5b07ff5a0f5d1070cfc6eb92dda4d476709418e512e3f404828c9745bad95b507660b13a6cb7767f36ac3d04df5ea92e860dd64adcf78963b5bbcd9d22426d7d70aed52893aac724a9f65d197d35329277f979195f7ce05aa44c9534bdf4b317186576df5c43e50e498875088ce78b53dc673f7aaf83c0f8b9", 0x79}, {&(0x7f0000000480)="1a6c634615819cd84aa042ec74b155a7501d3e8048f132848691", 0x1a}], 0x6, 0x0, 0x0, 0x2663}, 0x4048010)
sendmsg$kcm(r1, &(0x7f0000000c40)={&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x2}, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=[{0x68, 0x101, 0x9, "ef9f5e596abd498f94c7dc329b3e9270e2fadaa333656d7c018a2e681ebd6d90a30ac401de58a1d37532791aa0b50b79ded635c1d3f0a911e1a98d057fd7128dc182266fe8c7f45758dfbdf48eba0ee9d8b3aa"}, {0x108, 0x88, 0x10000, "29a7c5968b345959a57ff8651633559e7518d028689e34fa874a07a35206ac36d76cda7897eb0edfc3246d754cc1042aa0459df6a423586124ddd3b612265eaa77a0d0e7592f6e78a0a5cc803194d53d8a730923a50ef90f07028d7ecd2bfd9030cf9e87250f641457eb68adb58ca880776929d25d996f5495d8f8bbed1b132e034cf78fbd575ba4f132574c2724f5f114376d1fb882e5b3d9bd42cd8c52f1f3c78bd0075ad8415ad5eebdb85c8208db520b3c6bdcbc564c874f1682e790b77c027183a905926ccb85f03159048d1d4dd1897b33f0846ba6bfa6051068bee68bfa55153b49040bbbfacdc977906b3f92a1dd6ade48"}, {0x100, 0x0, 0x6, "db93c3ba11140b38fe87eca0511c8d67ce8d6e4bf70aed246d02a88191b31a213b0265aec113604dace81ede0d2381fe59050645357c4a475dd7a1bd68f9e3e6e1daea3c833aa27930bb9d1cfe39232d73d898162e164f1d066d7358ff4efa063e6a201982fd6dd861db96324a6f0bee7c002524db96c2311c6d7d918d1efa24ae06c1dff3498477aa2fa311898c10d45391f28a463205d945cd6331d8beaa298e636fa097f765d8c16bffce462188e30eefc93d67cebd7c0c2ee9abf32d3d004db58c61e4fa9dd16d0fd8bb1a15310fe6026fce94ea18c2dd06a25401f70ef6ba416b395ae391694e"}, {0xe8, 0x10e, 0x3, "a540b23a872541a4994d5b5fe444529282413bc3490518dd3a9787a308276d03a6b4ecb73f9d6c03ee2a7f85ab253b1e1155bc0bcc7c0ed61db30bcebad7477b4385f7d4343e55faff879a2900d56c92c8c85bec320f512ffa9c25ed71a0f0c4c2f02d4c0a3f090b5ada3cc1a2a968023fdcc5a284765f12f25164642e5cdde038eaab650c0c5b63e13aedc2119bb2d892fe532eae3ffb31a2ff036bbc29d8a6077de9eea8cf0c5381e4409e3733fd09925b2d8b3548be6e08fd59ef3ffecceee2aabb9c74d2d173015cc4eeb3e19e2098dceff4"}, {0x40, 0x101, 0x101, "f68ab6583641c1a4b0b4d6024c231505bcc624a8701d82f7d5ab4e1e33ebab55a2a6799b144e025202d380b2"}, {0xc8, 0x13a, 0x5, "e1ec1fa49ebead177fa0529f2c511a6f33bfa46f752a5df14aab68f2f31f848412c9720da78d89ac903822cd7c23c3748ca16242d059c041d940f950c7c9ff2b9440670d6f32a7a4bb81b521d96a090ec80464aad5d6fb654b922ca95c7767a48f3018b3fa4ac9e90f861fe1a4a56b86a030c28ca24c4bf911f42b3a7004bbeb1c17a1f80e0e489a8b85e1b8999be2e94d961315294220631e636c2851ba086d120fcc1438a9ab4b91a2bb176d57f8602da91fe670df1893"}], 0x460}, 0x4048805)
r3 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r4=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d00)='freezer.state\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="6710da6feac80cefdb1fee95c3d9e3e1f688c6d104612e7e20b2a54ad94860ab7bd2b3e5b69d7666ee22483739e257e1a7bfff1124b093", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="03000000000000000100"/28], 0x50)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000e00)="580000001400192396c0834b040d8c560a067fbc45ff810500000000000158000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006ef0800", 0x58}], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r7, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xb4, 0x4)

283.280009ms ago: executing program 0 (id=996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @loopback, 0x1}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}], 0x2c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="434cb77703642c2e0694786c58de15b522ac677a18066c05cf919fcdf431de3b7e3ebaade460e5883c87024346cdd0c764e8660bef401a2f8d30262c3e7ac3c9b3148ea916c25e0f454400c173a3732124f02b9c4099a540f8d54bf95a9fe4163f061f", 0x63}, {&(0x7f0000000000)="69e4e70e93f754e6e223ef620144189076", 0x11}, {&(0x7f00000005c0)="44e4a3416f3809c2425689282700862e9194a6fe44c241cc7efccdd02047583a60e980965d6caf56e6e557da0d1a7c773e9db5c1fdb3f47f9956df66ceec9b276bb84ccc7e62ec8e3ec081bb0a5d1b3d7001a0af2aef386518742fcfd624ff9064f8d8292b838c4e1dd28fddefa346d5eedc3764144337cb51bbe7cd0365c0bb8f4fa85c225f66dedb52178e2be605", 0x8f}, {&(0x7f0000000340)="3b588eed1f25c7015fce29460ef155ce63278de1ce4f27ec3422bc25ce0f104cfa90254349eae3", 0x27}, {&(0x7f0000000500)="5b07ff5a0f5d1070cfc6eb92dda4d476709418e512e3f404828c9745bad95b507660b13a6cb7767f36ac3d04df5ea92e860dd64adcf78963b5bbcd9d22426d7d70aed52893aac724a9f65d197d35329277f979195f7ce05aa44c9534bdf4b317186576df5c43e50e498875088ce78b53dc673f7aaf83c0f8b9", 0x79}, {&(0x7f0000000480)="1a6c634615819cd84aa042ec74b155a7501d3e8048f132848691", 0x1a}], 0x6, 0x0, 0x0, 0x2663}, 0x4048010)
sendmsg$kcm(r1, &(0x7f0000000c40)={&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff, 0x2}, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=[{0x68, 0x101, 0x9, "ef9f5e596abd498f94c7dc329b3e9270e2fadaa333656d7c018a2e681ebd6d90a30ac401de58a1d37532791aa0b50b79ded635c1d3f0a911e1a98d057fd7128dc182266fe8c7f45758dfbdf48eba0ee9d8b3aa"}, {0x108, 0x88, 0x10000, "29a7c5968b345959a57ff8651633559e7518d028689e34fa874a07a35206ac36d76cda7897eb0edfc3246d754cc1042aa0459df6a423586124ddd3b612265eaa77a0d0e7592f6e78a0a5cc803194d53d8a730923a50ef90f07028d7ecd2bfd9030cf9e87250f641457eb68adb58ca880776929d25d996f5495d8f8bbed1b132e034cf78fbd575ba4f132574c2724f5f114376d1fb882e5b3d9bd42cd8c52f1f3c78bd0075ad8415ad5eebdb85c8208db520b3c6bdcbc564c874f1682e790b77c027183a905926ccb85f03159048d1d4dd1897b33f0846ba6bfa6051068bee68bfa55153b49040bbbfacdc977906b3f92a1dd6ade48"}, {0x100, 0x0, 0x6, "db93c3ba11140b38fe87eca0511c8d67ce8d6e4bf70aed246d02a88191b31a213b0265aec113604dace81ede0d2381fe59050645357c4a475dd7a1bd68f9e3e6e1daea3c833aa27930bb9d1cfe39232d73d898162e164f1d066d7358ff4efa063e6a201982fd6dd861db96324a6f0bee7c002524db96c2311c6d7d918d1efa24ae06c1dff3498477aa2fa311898c10d45391f28a463205d945cd6331d8beaa298e636fa097f765d8c16bffce462188e30eefc93d67cebd7c0c2ee9abf32d3d004db58c61e4fa9dd16d0fd8bb1a15310fe6026fce94ea18c2dd06a25401f70ef6ba416b395ae391694e"}, {0xe8, 0x10e, 0x3, "a540b23a872541a4994d5b5fe444529282413bc3490518dd3a9787a308276d03a6b4ecb73f9d6c03ee2a7f85ab253b1e1155bc0bcc7c0ed61db30bcebad7477b4385f7d4343e55faff879a2900d56c92c8c85bec320f512ffa9c25ed71a0f0c4c2f02d4c0a3f090b5ada3cc1a2a968023fdcc5a284765f12f25164642e5cdde038eaab650c0c5b63e13aedc2119bb2d892fe532eae3ffb31a2ff036bbc29d8a6077de9eea8cf0c5381e4409e3733fd09925b2d8b3548be6e08fd59ef3ffecceee2aabb9c74d2d173015cc4eeb3e19e2098dceff4"}, {0x40, 0x101, 0x101, "f68ab6583641c1a4b0b4d6024c231505bcc624a8701d82f7d5ab4e1e33ebab55a2a6799b144e025202d380b2"}, {0xc8, 0x13a, 0x5, "e1ec1fa49ebead177fa0529f2c511a6f33bfa46f752a5df14aab68f2f31f848412c9720da78d89ac903822cd7c23c3748ca16242d059c041d940f950c7c9ff2b9440670d6f32a7a4bb81b521d96a090ec80464aad5d6fb654b922ca95c7767a48f3018b3fa4ac9e90f861fe1a4a56b86a030c28ca24c4bf911f42b3a7004bbeb1c17a1f80e0e489a8b85e1b8999be2e94d961315294220631e636c2851ba086d120fcc1438a9ab4b91a2bb176d57f8602da91fe670df1893"}], 0x460}, 0x4048805)
r3 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r4=>0x0})
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d00)='freezer.state\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="6710da6feac80cefdb1fee95c3d9e3e1f688c6d104612e7e20b2a54ad94860ab7bd2b3e5b69d7666ee22483739e257e1a7bfff1124b093", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="03000000000000000100"/28], 0x50)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000e00)="580000001400192396c0834b040d8c560a067fbc45ff810500000000000158000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006ef0800", 0x58}], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r7, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xb4, 0x4)

280.516575ms ago: executing program 1 (id=997):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff000000000100000000020020", @ANYRES32=0x0, @ANYBLOB="0000000008440000380012800b00010067656e65766500002800028005000c00000000000500090001000000140007000000000000000000000000000000000108000a00", @ANYRES32=r4, @ANYBLOB="1e534557da28364a7a3fb11fcb9afde4882acd5e840ce4612589385ded22d3b76de48fd7a9b93a2abf357a63afb6b7b15aaec86d2229080730de8e9467fc650b88693a81ba230c1612f9ffe400"/88], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

0s ago: executing program 2 (id=998):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
close(0xffffffffffffffff) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x7f09d801, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @loopback}], 0x2c) (async)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x2, 0x2}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x311a0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_PROP_LIST={0x4}]}, 0x4c}}, 0x800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts.
[   73.499068][ T5815] cgroup: Unknown subsys name 'net'
[   73.629563][ T5815] cgroup: Unknown subsys name 'cpuset'
[   73.638657][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   75.177121][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.352629][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.366487][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   79.375060][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.383320][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.393909][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.404942][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.416990][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.421781][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.425710][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   79.443152][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   79.462847][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.471161][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.473109][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   79.479589][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.493982][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   79.494053][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.511995][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   79.519541][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   79.528697][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   79.537074][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.637726][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   79.647412][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   79.656125][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   79.666982][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   79.674771][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.154196][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   80.371889][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   80.394271][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   80.413222][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   80.524725][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.532631][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.540632][ T5827] bridge_slave_0: entered allmulticast mode
[   80.547912][ T5827] bridge_slave_0: entered promiscuous mode
[   80.579293][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   80.602686][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.610727][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.618254][ T5827] bridge_slave_1: entered allmulticast mode
[   80.625729][ T5827] bridge_slave_1: entered promiscuous mode
[   80.756244][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.797753][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.805180][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.813302][ T5836] bridge_slave_0: entered allmulticast mode
[   80.820305][ T5836] bridge_slave_0: entered promiscuous mode
[   80.830436][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.870285][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.877751][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.884996][ T5826] bridge_slave_0: entered allmulticast mode
[   80.892842][ T5826] bridge_slave_0: entered promiscuous mode
[   80.900470][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.907971][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.915237][ T5826] bridge_slave_1: entered allmulticast mode
[   80.922552][ T5826] bridge_slave_1: entered promiscuous mode
[   80.941426][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.948581][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.956013][ T5836] bridge_slave_1: entered allmulticast mode
[   80.963016][ T5836] bridge_slave_1: entered promiscuous mode
[   80.982319][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.990028][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.997363][ T5825] bridge_slave_0: entered allmulticast mode
[   81.004439][ T5825] bridge_slave_0: entered promiscuous mode
[   81.042125][ T5827] team0: Port device team_slave_0 added
[   81.048391][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.055718][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.062969][ T5825] bridge_slave_1: entered allmulticast mode
[   81.070055][ T5825] bridge_slave_1: entered promiscuous mode
[   81.092476][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.115059][ T5827] team0: Port device team_slave_1 added
[   81.160659][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.185040][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.218561][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.225834][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.233140][ T5846] bridge_slave_0: entered allmulticast mode
[   81.240679][ T5846] bridge_slave_0: entered promiscuous mode
[   81.262598][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.284012][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.291460][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.319064][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.334324][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.343884][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.351508][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.358914][ T5846] bridge_slave_1: entered allmulticast mode
[   81.367013][ T5846] bridge_slave_1: entered promiscuous mode
[   81.375725][ T5826] team0: Port device team_slave_0 added
[   81.393418][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.400775][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.427163][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.440979][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.473898][ T5826] team0: Port device team_slave_1 added
[   81.482173][ T5836] team0: Port device team_slave_0 added
[   81.496528][ T5834] Bluetooth: hci2: command tx timeout
[   81.552071][ T5836] team0: Port device team_slave_1 added
[   81.566043][ T5834] Bluetooth: hci0: command tx timeout
[   81.566059][ T5829] Bluetooth: hci3: command tx timeout
[   81.566238][ T5146] Bluetooth: hci1: command tx timeout
[   81.597681][ T5825] team0: Port device team_slave_0 added
[   81.608703][ T5827] hsr_slave_0: entered promiscuous mode
[   81.615234][ T5827] hsr_slave_1: entered promiscuous mode
[   81.624701][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.660238][ T5825] team0: Port device team_slave_1 added
[   81.683448][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.693750][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.701580][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.726082][ T5146] Bluetooth: hci4: command tx timeout
[   81.733966][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.752238][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.759535][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.785552][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.797670][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.804881][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.832801][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.880566][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.887829][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.915580][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.952130][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.960292][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   81.996322][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.030965][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.040041][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.066763][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.136093][ T5846] team0: Port device team_slave_0 added
[   82.144699][ T5846] team0: Port device team_slave_1 added
[   82.187723][ T5826] hsr_slave_0: entered promiscuous mode
[   82.194319][ T5826] hsr_slave_1: entered promiscuous mode
[   82.200699][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   82.206734][ T5826] Cannot create hsr debugfs directory
[   82.276569][ T5836] hsr_slave_0: entered promiscuous mode
[   82.283301][ T5836] hsr_slave_1: entered promiscuous mode
[   82.289853][ T5836] debugfs: 'hsr0' already exists in 'hsr'
[   82.295758][ T5836] Cannot create hsr debugfs directory
[   82.314645][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.321790][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.348714][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.361572][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.369422][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.395726][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.468927][ T5825] hsr_slave_0: entered promiscuous mode
[   82.475229][ T5825] hsr_slave_1: entered promiscuous mode
[   82.482059][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   82.488423][ T5825] Cannot create hsr debugfs directory
[   82.647579][ T5846] hsr_slave_0: entered promiscuous mode
[   82.654059][ T5846] hsr_slave_1: entered promiscuous mode
[   82.660779][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   82.667182][ T5846] Cannot create hsr debugfs directory
[   82.994462][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.040678][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.071882][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.090416][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.138764][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.149965][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.165204][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.190149][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.242757][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.267590][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.281852][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.291920][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.441824][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.480302][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.493802][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.520858][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.566463][ T5834] Bluetooth: hci2: command tx timeout
[   83.574334][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.591643][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.602967][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.613640][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.625131][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.645563][ T5834] Bluetooth: hci0: command tx timeout
[   83.645694][ T5829] Bluetooth: hci3: command tx timeout
[   83.657270][ T5146] Bluetooth: hci1: command tx timeout
[   83.682116][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   83.716583][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.723899][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.748961][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.775361][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.782572][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.798729][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.807115][ T5829] Bluetooth: hci4: command tx timeout
[   83.852118][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   83.875096][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.882428][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.921650][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.929013][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.941771][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   83.992484][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.999703][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.044853][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.052824][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.081967][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.111115][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   84.123508][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.228004][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   84.254546][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.262306][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.282816][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.290145][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.372444][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.454598][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.541228][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   84.562449][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.569942][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.602336][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.619469][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.626985][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.771814][ T5827] veth0_vlan: entered promiscuous mode
[   84.874295][ T5827] veth1_vlan: entered promiscuous mode
[   84.891123][ T5836] veth0_vlan: entered promiscuous mode
[   84.909158][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.974504][ T5836] veth1_vlan: entered promiscuous mode
[   85.069214][ T5827] veth0_macvtap: entered promiscuous mode
[   85.080164][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.098835][ T5827] veth1_macvtap: entered promiscuous mode
[   85.143057][ T5836] veth0_macvtap: entered promiscuous mode
[   85.163432][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.185178][ T5836] veth1_macvtap: entered promiscuous mode
[   85.221409][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.251840][   T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.285248][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.296374][   T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.309277][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.318532][ T5825] veth0_vlan: entered promiscuous mode
[   85.338958][   T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.373619][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.385241][   T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.405249][ T5825] veth1_vlan: entered promiscuous mode
[   85.418792][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.450014][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.459666][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.502606][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.609585][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.619452][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.627755][ T5825] veth0_macvtap: entered promiscuous mode
[   85.646425][ T5829] Bluetooth: hci2: command tx timeout
[   85.667600][ T5825] veth1_macvtap: entered promiscuous mode
[   85.709456][ T5846] veth0_vlan: entered promiscuous mode
[   85.726956][ T5829] Bluetooth: hci3: command tx timeout
[   85.733007][ T5829] Bluetooth: hci1: command tx timeout
[   85.739892][ T5146] Bluetooth: hci0: command tx timeout
[   85.743045][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.752290][ T5826] veth0_vlan: entered promiscuous mode
[   85.760336][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.769795][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.778723][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.822590][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.832107][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.844602][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.854756][ T5846] veth1_vlan: entered promiscuous mode
[   85.867111][ T5826] veth1_vlan: entered promiscuous mode
[   85.885797][ T5829] Bluetooth: hci4: command tx timeout
[   85.902863][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.929156][ T3507] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.942134][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   85.987595][ T3507] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.998004][ T3507] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.008631][ T3507] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.140727][ T5826] veth0_macvtap: entered promiscuous mode
[   86.210865][ T5846] veth0_macvtap: entered promiscuous mode
[   86.221242][ T5826] veth1_macvtap: entered promiscuous mode
[   86.258002][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.293928][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.311776][ T5846] veth1_macvtap: entered promiscuous mode
[   86.385845][ T5953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6'.
[   86.402318][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.449548][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.460026][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.479400][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.497693][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.515231][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.543453][ T3507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.600916][ T3507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.642085][ T3507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.672658][ T3507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.706229][ T3507] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.762686][ T3507] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.797920][ T3507] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.822762][ T3507] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.852448][  T982] cfg80211: failed to load regulatory.db
[   86.965264][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.982302][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.043571][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.053560][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   87.070270][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.102711][ T5962] 8021q: VLANs not supported on caif0
[   87.230752][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.251192][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.340836][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.357986][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.379214][ T5976] vlan2: entered promiscuous mode
[   87.385021][ T5976] geneve1: entered promiscuous mode
[   87.392345][ T5976] vlan2: entered allmulticast mode
[   87.397747][ T5976] geneve1: entered allmulticast mode
[   87.437279][ T5976] netlink: 'syz.3.10': attribute type 37 has an invalid length.
[   87.467854][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'.
[   87.505723][ T5979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.578720][ T5983] xt_HMARK: spi-set and port-set can't be combined
[   87.736910][ T5829] Bluetooth: hci2: command tx timeout
[   87.806203][ T5829] Bluetooth: hci3: command tx timeout
[   87.812143][ T5829] Bluetooth: hci1: command tx timeout
[   87.818051][ T5146] Bluetooth: hci0: command tx timeout
[   87.966012][ T5829] Bluetooth: hci4: command tx timeout
[   88.079086][ T6000] Zero length message leads to an empty skb
[   88.197577][ T6003] netlink: 64 bytes leftover after parsing attributes in process `syz.4.15'.
[   88.241484][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'.
[   88.253666][ T6010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'.
[   88.281453][ T6005] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   88.572340][ T6021] netlink: 'syz.4.20': attribute type 1 has an invalid length.
[   88.598251][ T6021] netlink: 'syz.4.20': attribute type 1 has an invalid length.
[   88.748367][ T6034] bridge0: entered promiscuous mode
[   88.773404][ T6028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20'.
[   89.067589][ T6042] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET)
[   89.112728][ T6042] tun0: tun_chr_ioctl cmd 1074025675
[   89.125721][ T6042] tun0: persist enabled
[   89.132536][ T6042] tun0: tun_chr_ioctl cmd 1074025675
[   89.146607][ T6042] tun0: persist enabled
[   89.177449][ T6045] tun0: tun_chr_ioctl cmd 1074025673
[   89.591675][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'.
[   89.740943][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.755542][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.785103][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.837572][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.522477][ T6076] netlink: 'syz.0.31': attribute type 29 has an invalid length.
[   90.586729][ T6076] netlink: 'syz.0.31': attribute type 29 has an invalid length.
[   90.658549][ T6076] netlink: 500 bytes leftover after parsing attributes in process `syz.0.31'.
[   90.738837][ T6076] unsupported nla_type 58
[   90.909398][ T6039] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   91.279980][   T67] tipc: Subscription rejected, illegal request
[   91.301356][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'.
[   91.444627][ T6100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.455970][ T6100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.686700][ T6104] netlink: 'syz.4.37': attribute type 5 has an invalid length.
[   91.694839][ T6104] netlink: 64 bytes leftover after parsing attributes in process `syz.4.37'.
[   91.749517][ T6104] block nbd0: not configured, cannot reconfigure
[   91.766986][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.770338][ T6100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   91.798696][ T6100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.843501][ T6109] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   91.863670][ T6109] netlink: 468 bytes leftover after parsing attributes in process `syz.2.36'.
[   91.922831][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'.
[   91.993364][ T6106] netlink: 212 bytes leftover after parsing attributes in process `syz.1.38'.
[   92.005199][ T6100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.055594][ T6100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.195864][ T6123] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   92.212015][ T6123] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   92.234614][ T6123] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   92.255037][ T6132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.327240][ T6100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.339449][ T6100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.375767][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'.
[   92.685039][   T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.697456][ T6146] netlink: 256 bytes leftover after parsing attributes in process `syz.2.49'.
[   92.708178][   T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.738541][   T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.748609][   T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.015784][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.036656][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.058506][ T6100] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.095690][ T6100] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.324193][ T6158] netlink: 'syz.4.51': attribute type 12 has an invalid length.
[   93.365805][ T6161] netlink: 'syz.4.51': attribute type 4 has an invalid length.
[   93.581838][ T6163] netlink: zone id is out of range
[   93.583547][ T6100] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.588009][ T6163] netlink: get zone limit has 4 unknown bytes
[   93.608833][ T6100] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.772131][ T6166] netlink: 11 bytes leftover after parsing attributes in process `syz.1.54'.
[   93.818240][ T6100] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   93.849574][ T6100] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.247933][   T30] audit: type=1800 audit(1760848301.990:2): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.59" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[   94.248249][ T6185] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[   94.284129][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'.
[   94.294542][ T6185] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[   94.321706][ T6185] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.815853][ T6206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'.
[   94.855760][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.63'.
[   95.213595][ T6222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.774030][ T6275] Cannot find del_set index 2 as target
[   97.326308][ T5146] Bluetooth: hci4: command 0x0405 tx timeout
[   97.663716][ T6311] __nla_validate_parse: 2 callbacks suppressed
[   97.663735][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[   98.288278][ T6341] netlink: 'syz.2.83': attribute type 1 has an invalid length.
[   98.324537][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'.
[   98.351142][ T6341] nbd: illegal input index 65560
[   98.443854][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'.
[   98.492768][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'.
[   98.557837][ T6347] netlink: 'syz.1.86': attribute type 6 has an invalid length.
[   98.568697][ T6347] IPv6: NLM_F_CREATE should be specified when creating new route
[   98.611777][ T6349] batadv_slave_1: entered promiscuous mode
[   98.618311][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'.
[   98.663172][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'.
[   98.674474][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.774525][ T6349] batadv_slave_1 (unregistering): left promiscuous mode
[   98.802743][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.896112][ T6394] bond1: invalid ARP target 0.0.0.0 specified for addition
[   99.904132][ T6394] bond1: option arp_ip_target: invalid value (0)
[   99.934277][ T6394] bond1 (unregistering): Released all slaves
[  100.635506][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'.
[  101.313086][ T6470] netlink: 'syz.3.112': attribute type 9 has an invalid length.
[  101.383809][ T6475] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.475774][ T6473] netlink: 96 bytes leftover after parsing attributes in process `syz.3.112'.
[  101.785924][ T6491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.117'.
[  101.813415][ T6491] netlink: 152 bytes leftover after parsing attributes in process `syz.2.117'.
[  103.121918][ T6532] netlink: 72 bytes leftover after parsing attributes in process `syz.0.124'.
[  103.700427][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'.
[  103.869847][ T6592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.133'.
[  104.021455][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'.
[  104.113165][ T6601] netlink: 248 bytes leftover after parsing attributes in process `syz.0.134'.
[  104.192352][ T6611] netlink: 'syz.1.138': attribute type 1 has an invalid length.
[  104.487060][ T6611] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.552008][ T6623] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  104.581055][ T6616] bond1: (slave geneve2): making interface the new active one
[  104.649835][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.139'.
[  104.658871][ T6616] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  104.818444][ T6623] xt_TCPMSS: Only works on TCP SYN packets
[  105.194816][ T6648] vlan2: entered allmulticast mode
[  105.672875][ T6668] veth1_macvtap: left promiscuous mode
[  105.686372][ T6668] macsec0: entered allmulticast mode
[  105.706877][ T6669] veth1_macvtap: entered promiscuous mode
[  105.732373][ T6669] veth1_macvtap: entered allmulticast mode
[  105.757447][ T6669] macsec0: left allmulticast mode
[  105.778629][ T6669] veth1_macvtap: left allmulticast mode
[  106.103714][ T6683] netlink: 'syz.3.153': attribute type 1 has an invalid length.
[  106.292551][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'.
[  106.334370][ T6694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.152'.
[  106.393412][ T6683] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.476718][ T6690] bond1: (slave geneve3): making interface the new active one
[  106.487387][ T6690] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  106.868473][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[  107.263531][ T6712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.368373][ T6712] ip6t_srh: unknown srh match flags  4000
[  107.389374][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[  107.704174][ T6721] syz.4.162 (6721) used greatest stack depth: 16056 bytes left
[  108.044991][ T6738] syzkaller1: entered promiscuous mode
[  108.054492][ T6738] syzkaller1: entered allmulticast mode
[  108.427663][ T6765] netlink: 14 bytes leftover after parsing attributes in process `syz.0.172'.
[  108.509517][  T982] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[  108.543562][  T982] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  108.709967][ T6770] fido_id[6770]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory
[  109.053270][ T6773] sctp: [Deprecated]: syz.1.173 (pid 6773) Use of int in maxseg socket option.
[  109.053270][ T6773] Use struct sctp_assoc_value instead
[  109.072588][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'.
[  109.570797][ T6791] netlink: 'syz.2.178': attribute type 1 has an invalid length.
[  109.660578][ T6791] bond2 (unregistering): Released all slaves
[  109.698401][ T6796] sctp: [Deprecated]: syz.3.180 (pid 6796) Use of int in maxseg socket option.
[  109.698401][ T6796] Use struct sctp_assoc_value instead
[  110.014935][ T6812] Bluetooth: MGMT ver 1.23
[  110.039757][ T6816] Cannot find add_set index 2 as target
[  110.057018][ T6812] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  110.085636][ T6813] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  110.534999][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'.
[  111.142450][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'.
[  111.218132][   T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.218207][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.193'.
[  111.279045][   T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.353325][   T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.435821][   T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  111.738119][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'.
[  111.831727][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'.
[  111.920840][ T6861] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  111.963646][ T6861] bond2 (unregistering): Released all slaves
[  112.093822][ T6885] netlink: 'syz.3.205': attribute type 8 has an invalid length.
[  112.312721][ T6895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.206'.
[  112.335142][ T6896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.206'.
[  112.950411][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'.
[  113.279335][ T6938] Illegal XDP return value 4294967274 on prog  (id 89) dev N/A, expect packet loss!
[  113.357664][ T6937] netlink: 'syz.4.214': attribute type 1 has an invalid length.
[  114.941949][ T6937] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  114.952625][ T6939] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  115.154030][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'.
[  115.166211][ T6954] netlink: 68 bytes leftover after parsing attributes in process `syz.2.215'.
[  115.215791][ T6954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.239584][ T6956] ������: renamed from vlan0 (while UP)
[  115.259174][ T6961] netlink: 68 bytes leftover after parsing attributes in process `syz.2.215'.
[  115.291665][ T6960] netlink: 44 bytes leftover after parsing attributes in process `syz.1.218'.
[  115.306079][ T6965] netlink: 34 bytes leftover after parsing attributes in process `syz.1.218'.
[  115.710619][ T6978] netlink: 'syz.3.223': attribute type 142 has an invalid length.
[  115.829148][ T6982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.221'.
[  115.883251][ T6985] xt_policy: output policy not valid in PREROUTING and INPUT
[  116.137708][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.229'.
[  116.293552][ T6995] IPVS: length: 168 != 12312
[  116.362478][ T7004] netlink: 308 bytes leftover after parsing attributes in process `syz.3.231'.
[  116.414964][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'.
[  116.508935][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'.
[  116.532618][ T7004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.706919][ T7004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.797238][ T7015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.832908][ T7004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.012526][ T7004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.299135][ T6556] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.419402][ T6556] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.459471][ T6556] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.513357][ T6556] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.610720][ T7057] x_tables: duplicate underflow at hook 1
[  118.410962][ T7089] netlink: 'syz.4.255': attribute type 1 has an invalid length.
[  118.471986][ T7089] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.557920][ T7089] bond1: (slave geneve2): making interface the new active one
[  118.594111][ T7089] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  118.829784][ T7107] �����: renamed from hsr0 (while UP)
[  119.246396][ T5829] Bluetooth: hci1: command tx timeout
[  119.925200][ T7140] bridge0: left promiscuous mode
[  119.978415][ T7140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.288125][ T7166] __nla_validate_parse: 8 callbacks suppressed
[  121.288151][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.268'.
[  121.439511][ T7175] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  121.483625][ T7175] macvtap1: entered allmulticast mode
[  121.516890][ T7175] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  121.657518][ T7175] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  121.682277][ T7175] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  121.947563][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'.
[  122.395989][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'.
[  123.021308][ T7216] tap0: tun_chr_ioctl cmd 1074025694
[  123.798740][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'.
[  124.600503][ T7266] syz_tun: entered allmulticast mode
[  124.804046][ T7274] netlink: 'syz.0.291': attribute type 8 has an invalid length.
[  124.895955][ T7274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.963906][ T7265] syz_tun: left allmulticast mode
[  125.496475][ T7290] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0
[  125.691065][ T7302] netlink: 'syz.3.298': attribute type 9 has an invalid length.
[  125.711327][ T7307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'.
[  125.741901][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'.
[  125.831403][ T7313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'.
[  125.918371][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'.
[  126.001540][ T7307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'.
[  126.492798][ T7323] pim6reg: entered allmulticast mode
[  126.604951][ T7323] tipc: Started in network mode
[  126.612337][ T5841] udevd[5841]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  126.616238][ T7323] tipc: Node identity b6720f4222d7, cluster identity 4711
[  126.644475][ T7323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.672450][ T7329] syzkaller0: entered promiscuous mode
[  126.679541][ T7329] syzkaller0: entered allmulticast mode
[  127.071891][ T7322] pim6reg: left allmulticast mode
[  127.094830][ T7349] netlink: 'syz.0.310': attribute type 1 has an invalid length.
[  127.270839][ T7322] tipc: Resetting bearer <eth:syzkaller0>
[  127.311636][ T7322] tipc: Disabling bearer <eth:syzkaller0>
[  127.625586][ T7367] tipc: Started in network mode
[  127.630492][ T7367] tipc: Node identity 4, cluster identity 4711
[  127.705800][ T7367] tipc: Node number set to 4
[  127.870871][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'.
[  127.944748][ T7385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'.
[  128.142025][ T7382] 
: option downdelay: invalid value (18446744073709551615)
[  128.177762][ T7382] 
: option downdelay: allowed values 0 - 2147483647
[  128.213472][ T7382] 
 (unregistering): Released all slaves
[  128.392628][ T7396] tipc: Started in network mode
[  128.404346][ T7396] tipc: Node identity 4ee85f7de848, cluster identity 4711
[  128.422898][ T7396] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.456085][ T7395] syzkaller0: entered promiscuous mode
[  128.461927][ T7395] syzkaller0: entered allmulticast mode
[  128.605800][ T7396] tipc: Resetting bearer <eth:syzkaller0>
[  128.646807][ T7396] tipc: Disabling bearer <eth:syzkaller0>
[  128.979635][ T7415] pim6reg1: entered promiscuous mode
[  129.005463][ T7415] pim6reg1: entered allmulticast mode
[  129.282941][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.326'.
[  129.323742][ T7421] ip6tnl1: entered promiscuous mode
[  129.346164][ T7421] ip6tnl1: entered allmulticast mode
[  129.360086][ T7421] team0: Device ip6tnl1 is of different type
[  129.750993][ T7449] netlink: 'syz.2.331': attribute type 1 has an invalid length.
[  129.912153][ T7449] 8021q: adding VLAN 0 to HW filter on device bond2
[  129.960061][ T7450] bond2: (slave geneve2): making interface the new active one
[  129.995819][ T7450] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  130.556101][ T7470] netlink: 136 bytes leftover after parsing attributes in process `syz.0.335'.
[  131.031759][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'.
[  131.192736][ T7486] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  131.534416][ T7496] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  132.069748][ T7513] netlink: 'syz.1.347': attribute type 1 has an invalid length.
[  132.155993][ T7513] 8021q: adding VLAN 0 to HW filter on device bond2
[  132.324821][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'.
[  132.347517][ T7513] 8021q: adding VLAN 0 to HW filter on device bond2
[  132.386943][ T7513] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  132.409664][ T7513] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  132.467916][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.351'.
[  132.524242][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'.
[  132.604365][ T7533] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'.
[  132.616099][ T7533] netlink: 5 bytes leftover after parsing attributes in process `syz.3.351'.
[  132.924763][ T7550] __nla_validate_parse: 2 callbacks suppressed
[  132.924781][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'.
[  132.948343][ T7550] netlink: 84 bytes leftover after parsing attributes in process `syz.0.355'.
[  132.949219][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  132.979819][ T7549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.987531][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'.
[  133.004985][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.355'.
[  133.056863][ T7546] syzkaller0: entered promiscuous mode
[  133.093046][ T7546] syzkaller0: entered allmulticast mode
[  133.369879][ T7569] netlink: 388 bytes leftover after parsing attributes in process `syz.1.361'.
[  133.602642][ T7576] netlink: 216 bytes leftover after parsing attributes in process `syz.0.363'.
[  133.614580][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.363'.
[  133.651338][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.363'.
[  133.719355][ T7543] tipc: Resetting bearer <eth:syzkaller0>
[  133.733075][ T7585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.754552][ T7578] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[  133.776312][ T7543] tipc: Disabling bearer <eth:syzkaller0>
[  133.793629][ T7578] netlink: 144 bytes leftover after parsing attributes in process `syz.1.364'.
[  133.819049][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.364'.
[  133.950235][ T7597] Unsupported ieee802154 address type: 0
[  134.389123][ T7617] netlink: 'syz.4.376': attribute type 1 has an invalid length.
[  134.428640][ T7617] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  135.868248][ T7679] 8021q: adding VLAN 0 to HW filter on device bond3
[  136.014215][ T7682] bond3 (unregistering): Released all slaves
[  136.709825][ T7712] 8021q: VLANs not supported on caif0
[  137.642034][ T7755] pim6reg: entered allmulticast mode
[  137.848541][ T7770] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[  137.914827][ T7770] 8021q: adding VLAN 0 to HW filter on device bond3
[  138.509809][ T7802] netlink: 'syz.4.424': attribute type 1 has an invalid length.
[  138.547565][   T30] audit: type=1107 audit(1760848346.270:3): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  138.560599][ T7802] __nla_validate_parse: 7 callbacks suppressed
[  138.560618][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'.
[  138.616485][ T7808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'.
[  138.692006][ T7808] 8021q: adding VLAN 0 to HW filter on device bond2
[  138.758809][ T7813] netlink: 'syz.1.427': attribute type 10 has an invalid length.
[  138.802910][ T7813] bridge0: port 3(macsec0) entered blocking state
[  138.832149][ T7813] bridge0: port 3(macsec0) entered disabled state
[  138.845597][ T7813] macsec0: entered allmulticast mode
[  138.851688][ T7813] veth1_macvtap: entered allmulticast mode
[  138.862166][ T7813] macsec0: entered promiscuous mode
[  138.872800][ T7813] bridge0: port 3(macsec0) entered blocking state
[  138.879717][ T7813] bridge0: port 3(macsec0) entered forwarding state
[  139.122194][ T7828] netlink: 14436 bytes leftover after parsing attributes in process `syz.3.429'.
[  139.287050][ T5835] IPVS: starting estimator thread 0...
[  139.398071][ T7834] IPVS: using max 33 ests per chain, 79200 per kthread
[  139.455535][ T7843] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  139.553508][ T7846] netlink: 'syz.0.436': attribute type 1 has an invalid length.
[  139.605592][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'.
[  139.641399][ T7850] netlink: 'syz.4.437': attribute type 6 has an invalid length.
[  139.664829][ T7850] netlink: 167332 bytes leftover after parsing attributes in process `syz.4.437'.
[  139.678684][ T7846] 8021q: adding VLAN 0 to HW filter on device bond3
[  140.176045][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'.
[  140.932319][ T7889] netlink: 'syz.1.446': attribute type 8 has an invalid length.
[  140.976076][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[  141.067470][ T7891] netlink: 'syz.1.446': attribute type 8 has an invalid length.
[  141.099160][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[  141.186552][ T7889] bond0: entered promiscuous mode
[  141.199238][ T7889] bond_slave_0: entered promiscuous mode
[  141.271116][ T7889] bond_slave_1: entered promiscuous mode
[  141.295523][ T7889] bond0: left promiscuous mode
[  141.300348][ T7889] bond_slave_0: left promiscuous mode
[  141.327726][ T7889] bond_slave_1: left promiscuous mode
[  141.465184][ T5146] Bluetooth: hci4: link tx timeout
[  141.472217][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  141.491547][ T7891] bond0: entered promiscuous mode
[  141.497357][ T7891] bond_slave_0: entered promiscuous mode
[  141.506658][ T7891] bond_slave_1: entered promiscuous mode
[  141.519373][ T7891] bond0: left promiscuous mode
[  141.524472][ T7891] bond_slave_0: left promiscuous mode
[  141.560546][ T7891] bond_slave_1: left promiscuous mode
[  141.658576][ T7898] syzkaller0: entered promiscuous mode
[  141.664722][ T7898] syzkaller0: entered allmulticast mode
[  141.728015][ T7919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.737125][ T7919] IPv6: NLM_F_CREATE should be set when creating new route
[  141.745648][ T7919] IPv6: NLM_F_CREATE should be set when creating new route
[  141.964487][ T7928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.453'.
[  142.233481][ T7936] syzkaller1: entered promiscuous mode
[  142.254438][ T7936] syzkaller1: entered allmulticast mode
[  142.513876][ T7947] netlink: 'syz.1.459': attribute type 1 has an invalid length.
[  142.539009][ T7948] gretap1: entered promiscuous mode
[  142.650732][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'.
[  142.690980][ T7947] 8021q: adding VLAN 0 to HW filter on device bond4
[  142.709314][ T7959] Cannot find add_set index 0 as target
[  142.793278][ T7965] netlink: 'syz.0.460': attribute type 13 has an invalid length.
[  142.802343][ T7965] netlink: 'syz.0.460': attribute type 17 has an invalid length.
[  142.913391][ T7969] netlink: 'syz.3.463': attribute type 1 has an invalid length.
[  142.996860][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.020133][ T7965] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.042824][ T7979] xt_TCPMSS: Only works on TCP SYN packets
[  143.149142][ T7969] 8021q: adding VLAN 0 to HW filter on device bond2
[  143.485538][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  144.152315][ T7998] Cannot find set identified by id 65534 to match
[  144.216202][ T7999] __nla_validate_parse: 4 callbacks suppressed
[  144.216220][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'.
[  144.291285][ T8009] ip6t_srh: unknown srh match flags  4000
[  144.526424][ T8021] netlink: 'syz.1.475': attribute type 13 has an invalid length.
[  144.547152][ T8019] netlink: 'syz.1.475': attribute type 13 has an invalid length.
[  144.579290][ T8021] netlink: 'syz.1.475': attribute type 17 has an invalid length.
[  144.599502][ T8019] netlink: 'syz.1.475': attribute type 17 has an invalid length.
[  144.774412][ T8021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.854149][ T8019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.884947][ T8038] netlink: 'syz.4.478': attribute type 1 has an invalid length.
[  144.983702][ T8038] 8021q: adding VLAN 0 to HW filter on device bond3
[  144.993850][ T8041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.054981][ T8041] tipc: Disabling bearer <eth:syzkaller0>
[  145.177323][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'.
[  145.241505][ T8048] syzkaller1: entered promiscuous mode
[  145.257097][ T8048] syzkaller1: entered allmulticast mode
[  145.572112][ T8066] ip6erspan0: entered allmulticast mode
[  145.627960][ T8071] netlink: 'syz.1.487': attribute type 10 has an invalid length.
[  145.749184][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'.
[  145.769312][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.778830][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.847445][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'.
[  146.066562][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.086657][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.340231][ T8063] ip6erspan0: left allmulticast mode
[  146.376605][ T8079] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  146.401073][ T6561] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.435858][ T6561] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.453602][ T6561] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.473750][ T6561] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.515293][ T6561] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.549612][ T6561] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.613816][ T6561] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.656433][ T6561] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  146.679085][ T8107] caif0: entered allmulticast mode
[  146.697477][ T8111] netlink: 'syz.2.491': attribute type 1 has an invalid length.
[  146.917157][ T8111] 8021q: adding VLAN 0 to HW filter on device bond3
[  146.927102][ T8117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.492'.
[  147.130958][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'.
[  147.212826][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'.
[  147.232778][ T8127] bridge3: the hash_elasticity option has been deprecated and is always 16
[  147.253441][ T8130] netlink: 52 bytes leftover after parsing attributes in process `syz.0.496'.
[  147.266681][ T8127] bridge3: entered allmulticast mode
[  147.719646][ T5196] udevd[5196]: worker [5841] terminated by signal 33 (Unknown signal 33)
[  147.767422][ T5196] udevd[5196]: worker [5841] failed while handling '/devices/virtual/block/loop3'
[  147.805820][ T8138] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[  147.816309][ T8138] netlink: 'syz.1.498': attribute type 1 has an invalid length.
[  147.993413][ T8143] syz.0.499: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  148.053998][ T8143] CPU: 1 UID: 0 PID: 8143 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT(full) 
[  148.054023][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  148.054040][ T8143] Call Trace:
[  148.054047][ T8143]  <TASK>
[  148.054055][ T8143]  dump_stack_lvl+0x189/0x250
[  148.054080][ T8143]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.054098][ T8143]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.054135][ T8143]  warn_alloc+0x214/0x310
[  148.054164][ T8143]  ? __pfx_warn_alloc+0x10/0x10
[  148.054193][ T8143]  ? __get_vm_area_node+0x28f/0x300
[  148.054211][ T8143]  ? xskq_create+0xbf/0x170
[  148.054236][ T8143]  __vmalloc_node_range_noprof+0x690/0x12d0
[  148.054280][ T8143]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  148.054303][ T8143]  ? __kasan_kmalloc+0x93/0xb0
[  148.054327][ T8143]  vmalloc_user_noprof+0xad/0xf0
[  148.054345][ T8143]  ? xskq_create+0xbf/0x170
[  148.054368][ T8143]  xskq_create+0xbf/0x170
[  148.054393][ T8143]  xsk_init_queue+0xb0/0x110
[  148.054418][ T8143]  xsk_setsockopt+0x57b/0x8d0
[  148.054442][ T8143]  ? __pfx_xsk_setsockopt+0x10/0x10
[  148.054465][ T8143]  ? __pfx_aa_sk_perm+0x10/0x10
[  148.054484][ T8143]  ? aa_sock_opt_perm+0xff/0x1b0
[  148.054514][ T8143]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  148.054534][ T8143]  ? __pfx_xsk_setsockopt+0x10/0x10
[  148.054556][ T8143]  do_sock_setsockopt+0x17c/0x1b0
[  148.054586][ T8143]  __x64_sys_setsockopt+0x13f/0x1b0
[  148.054616][ T8143]  do_syscall_64+0xfa/0xfa0
[  148.054632][ T8143]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.054649][ T8143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.054666][ T8143]  ? clear_bhb_loop+0x60/0xb0
[  148.054703][ T8143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.054719][ T8143] RIP: 0033:0x7f013ad8efc9
[  148.054742][ T8143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  148.054756][ T8143] RSP: 002b:00007f013bb87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  148.054775][ T8143] RAX: ffffffffffffffda RBX: 00007f013afe6090 RCX: 00007f013ad8efc9
[  148.054787][ T8143] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006
[  148.054796][ T8143] RBP: 00007f013ae11f91 R08: 0000000000000004 R09: 0000000000000000
[  148.054806][ T8143] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  148.054816][ T8143] R13: 00007f013afe6128 R14: 00007f013afe6090 R15: 00007ffd55685d58
[  148.054842][ T8143]  </TASK>
[  148.054921][ T8143] Mem-Info:
[  148.148152][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'.
[  148.185586][ T8143] active_anon:8818 inactive_anon:0 isolated_anon:0
[  148.185586][ T8143]  active_file:3205 inactive_file:39935 isolated_file:0
[  148.185586][ T8143]  unevictable:768 dirty:99 writeback:0
[  148.185586][ T8143]  slab_reclaimable:10574 slab_unreclaimable:120849
[  148.185586][ T8143]  mapped:29313 shmem:1428 pagetables:1226
[  148.185586][ T8143]  sec_pagetables:0 bounce:0
[  148.185586][ T8143]  kernel_misc_reclaimable:0
[  148.185586][ T8143]  free:1296023 free_pcp:20366 free_cma:0
[  148.400701][ T8143] Node 0 active_anon:35272kB inactive_anon:0kB active_file:12820kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117252kB dirty:392kB writeback:0kB shmem:4276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13044kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  148.445549][ T8143] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  148.521714][ T8161] netlink: 64 bytes leftover after parsing attributes in process `syz.2.503'.
[  148.544384][ T8143] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  148.610200][ T8143] lowmem_reserve[]: 0 2501 2503 2503 2503
[  148.628203][ T8143] Node 0 DMA32 free:1278472kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34972kB inactive_anon:0kB active_file:12820kB inactive_file:159544kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2561632kB mlocked:0kB bounce:0kB free_pcp:63968kB local_pcp:26376kB free_cma:0kB
[  148.628885][ T8166] netlink: 'syz.4.505': attribute type 1 has an invalid length.
[  148.711207][ T8143] lowmem_reserve[]: 0 0 1 1 1
[  148.735635][ T8143] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  148.770206][ T8166] 8021q: adding VLAN 0 to HW filter on device bond4
[  148.775869][ T8143] lowmem_reserve[]: 0 0 0 0 0
[  148.784995][ T8143] Node 1 Normal free:3889816kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17024kB local_pcp:8320kB free_cma:0kB
[  148.858427][ T8143] lowmem_reserve[]: 0 0 0 0 0
[  148.863208][ T8143] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  148.883570][ T8143] Node 0 DMA32: 689*4kB (ME) 673*8kB (UM) 281*16kB (UME) 186*32kB (UM) 164*64kB (UM) 58*128kB (UME) 33*256kB (UM) 17*512kB (UM) 9*1024kB (UME) 3*2048kB (UM) 295*4096kB (M) = 1277340kB
[  148.976164][ T8143] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  148.988349][ T8143] Node 1 Normal: 170*4kB (UME) 42*8kB (UME) 34*16kB (UME) 86*32kB (UME) 31*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3889816kB
[  149.086791][ T8143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.127256][ T8143] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.144754][ T8143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  149.159054][ T8143] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  149.162986][ T8187] 0�X��D: renamed from gretap0
[  149.169703][ T8143] 44539 total pagecache pages
[  149.179674][ T8143] 0 pages in swap cache
[  149.184524][ T8143] Free swap  = 124996kB
[  149.190413][ T8143] Total swap = 124996kB
[  149.194864][ T8143] 2097051 pages RAM
[  149.200839][ T8143] 0 pages HighMem/MovableOnly
[  149.206052][ T8143] 424553 pages reserved
[  149.211930][ T8187] 0�X��D: entered allmulticast mode
[  149.212331][ T8143] 0 pages cma reserved
[  149.242382][ T8187] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  149.300475][ T8194] __nla_validate_parse: 1 callbacks suppressed
[  149.300493][ T8194] netlink: 766 bytes leftover after parsing attributes in process `syz.3.510'.
[  149.332268][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'.
[  149.402830][ T8201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'.
[  149.671697][ T8210] bridge1: entered allmulticast mode
[  149.700783][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'.
[  149.934378][ T8221] netlink: 'syz.3.519': attribute type 2 has an invalid length.
[  149.943829][ T8221] netlink: 244 bytes leftover after parsing attributes in process `syz.3.519'.
[  151.125259][ T8252] netlink: del zone limit has 8 unknown bytes
[  151.204224][ T8256] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  151.278274][ T8256] bridge3: entered promiscuous mode
[  151.312727][ T8256] bridge3: entered allmulticast mode
[  151.326471][ T8256] team0: Port device bridge3 added
[  151.334836][ T8264] bridge0: port 3(team0) entered blocking state
[  151.344658][ T8264] bridge0: port 3(team0) entered disabled state
[  151.357275][ T8264] team0: entered allmulticast mode
[  151.379415][ T8264] team_slave_0: entered allmulticast mode
[  151.386014][ T8264] team_slave_1: entered allmulticast mode
[  151.394588][ T8264] team0: entered promiscuous mode
[  151.400514][ T8264] team_slave_0: entered promiscuous mode
[  151.448539][ T8264] team_slave_1: entered promiscuous mode
[  151.471500][ T8264] bridge0: port 3(team0) entered blocking state
[  151.478435][ T8264] bridge0: port 3(team0) entered forwarding state
[  151.589458][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.533'.
[  151.737849][ T8280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  151.783167][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'.
[  152.107907][ T8281] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  152.136328][ T8281] macvtap1: entered allmulticast mode
[  152.157386][ T8281] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  152.194516][ T8281] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  152.217039][ T8281] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  152.379791][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'.
[  152.609130][ T8298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.538'.
[  153.156008][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'.
[  153.330243][ T8322] x_tables: duplicate underflow at hook 1
[  154.117209][ T8348] Unsupported ieee802154 address type: 0
[  154.317569][ T8354] tun0: tun_chr_ioctl cmd 1074025675
[  154.323300][ T8354] tun0: persist enabled
[  154.336552][ T8354] tun0: tun_chr_ioctl cmd 1074025675
[  154.342376][ T8354] tun0: persist enabled
[  154.343490][   T30] audit: type=1800 audit(1760848362.070:4): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.553" name="memory.events" dev="tmpfs" ino=583 res=0 errno=0
[  154.379972][ T8354] xt_hashlimit: max too large, truncated to 1048576
[  154.450589][ T8361] netlink: 'syz.2.554': attribute type 1 has an invalid length.
[  154.561996][ T8366] netlink: 'syz.0.556': attribute type 1 has an invalid length.
[  154.627036][ T8356] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  154.638465][ T8356] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  154.768597][ T8366] 8021q: adding VLAN 0 to HW filter on device bond4
[  154.776065][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'.
[  154.833952][ T8361] bond4: (slave gretap0): making interface the new active one
[  154.855871][ T8361] bond4: (slave gretap0): Enslaving as an active interface with an up link
[  154.878475][ T8377] bond4: (slave geneve2): making interface the new active one
[  154.903222][ T8377] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  154.924392][ T8383] vlan0: entered promiscuous mode
[  154.935678][ T8383] gretap0: entered promiscuous mode
[  155.029920][ T8387] netlink: 32 bytes leftover after parsing attributes in process `syz.3.559'.
[  155.049081][ T8393] Bluetooth: hci0: unsupported parameter 512
[  155.052328][ T8387] dummy0: entered promiscuous mode
[  155.059394][ T8393] Bluetooth: hci0: invalid length 11, exp 2 for type 3
[  155.357374][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'.
[  155.631827][ T8434] netlink: 'syz.2.573': attribute type 1 has an invalid length.
[  155.743467][ T8434] 8021q: adding VLAN 0 to HW filter on device bond5
[  156.304498][ T8462] netlink: 14 bytes leftover after parsing attributes in process `syz.1.576'.
[  156.367727][ T8461] 8021q: adding VLAN 0 to HW filter on device bond5
[  156.378578][ T8461] bond0: (slave bond5): Enslaving as an active interface with an up link
[  156.389221][ T8461] netlink: 14 bytes leftover after parsing attributes in process `syz.1.576'.
[  157.087074][ T8462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.136152][ T8462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.167207][ T8462] bond0 (unregistering): (slave bond5): Releasing backup interface
[  157.196091][ T8497] netlink: 165 bytes leftover after parsing attributes in process `syz.4.582'.
[  157.198715][ T8462] bond0 (unregistering): Released all slaves
[  157.325168][ T8499] 8021q: VLANs not supported on nlmon0
[  157.623453][ T8508] netlink: 'syz.1.585': attribute type 1 has an invalid length.
[  157.635501][ T8509] xt_hashlimit: size too large, truncated to 1048576
[  157.646950][ T8511] netdevsim netdevsim4 ������: renamed from netdevsim0 (while UP)
[  157.808113][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.083756][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'.
[  158.110812][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'.
[  158.133886][ T8545] netlink: 32 bytes leftover after parsing attributes in process `syz.0.596'.
[  158.390489][ T8547] veth3: entered promiscuous mode
[  158.476074][ T8557] macvlan2: entered promiscuous mode
[  158.485959][ T8557] vlan0: entered promiscuous mode
[  158.557132][ T8559] tipc: Started in network mode
[  158.592595][ T8559] tipc: Node identity e2e67c4db93d, cluster identity 4711
[  158.623787][ T8559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.637515][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.602'.
[  158.667728][ T8559] tipc: Resetting bearer <eth:syzkaller0>
[  158.726218][ T8569] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[  158.742035][ T8559] : entered promiscuous mode
[  158.759049][ T8558] tipc: Disabling bearer <eth:syzkaller0>
[  158.849349][ T8569] 8021q: adding VLAN 0 to HW filter on device bond5
[  159.117070][ T8583] trusted_key: syz.0.607 sent an empty control message without MSG_MORE.
[  159.709652][ T8084] IPVS: starting estimator thread 0...
[  159.806010][ T8605] IPVS: using max 36 ests per chain, 86400 per kthread
[  159.919876][ T8613] __nla_validate_parse: 5 callbacks suppressed
[  159.919894][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'.
[  159.921747][ T8604] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.962491][ T8604] bond0: (slave rose0): Enslaving as an active interface with an up link
[  160.094240][ T8619] netlink: 'syz.4.617': attribute type 1 has an invalid length.
[  160.183124][ T8619] 8021q: adding VLAN 0 to HW filter on device bond5
[  160.288426][ T8632] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  160.329385][ T8633] netlink: 'syz.4.621': attribute type 4 has an invalid length.
[  160.355246][ T8633] netlink: 152 bytes leftover after parsing attributes in process `syz.4.621'.
[  160.382547][ T8633] .`: renamed from bond0 (while UP)
[  161.110007][ T8661] netlink: 'syz.3.631': attribute type 1 has an invalid length.
[  161.149442][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'.
[  161.310293][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'.
[  161.341107][ T8673] netlink: 'syz.4.632': attribute type 11 has an invalid length.
[  161.364276][ T8074] IPVS: starting estimator thread 0...
[  161.440283][ T8661] 8021q: adding VLAN 0 to HW filter on device bond3
[  161.465453][ T8675] IPVS: using max 31 ests per chain, 74400 per kthread
[  161.476232][ T8663] bond6: entered promiscuous mode
[  161.483447][ T8663] 8021q: adding VLAN 0 to HW filter on device bond6
[  161.897864][ T8694] netlink: 'syz.4.638': attribute type 4 has an invalid length.
[  162.003905][ T8700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.141212][ T8710] netlink: 'syz.1.639': attribute type 11 has an invalid length.
[  162.170132][ T8710] netlink: 140 bytes leftover after parsing attributes in process `syz.1.639'.
[  162.506654][   T67] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.519387][   T67] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.547832][   T67] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.556965][   T67] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.566505][ T8726] veth0: entered promiscuous mode
[  162.573623][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'.
[  162.622687][ T8726] veth0 (unregistering): left promiscuous mode
[  162.637617][ T8732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.667081][   T67] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.676356][   T67] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.696483][ T6561] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.707399][ T6561] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.802732][ T8734] Cannot find del_set index 4 as target
[  162.875886][ T8734] bridge2: entered promiscuous mode
[  162.927607][ T8734] bridge2: entered allmulticast mode
[  162.977680][ T8734] team0: Port device bridge2 added
[  163.263918][ T8753] syzkaller0: entered allmulticast mode
[  163.396652][ T8762] bridge0: entered promiscuous mode
[  163.420900][ T8762] macsec1: entered promiscuous mode
[  163.457760][ T8762] bridge0: port 4(macsec1) entered blocking state
[  163.468525][ T8762] bridge0: port 4(macsec1) entered disabled state
[  163.482622][ T8762] macsec1: entered allmulticast mode
[  163.490636][ T8762] bridge0: entered allmulticast mode
[  163.498833][ T8762] macsec1: left allmulticast mode
[  163.525449][ T8762] bridge0: left allmulticast mode
[  163.562795][ T8762] bridge0: left promiscuous mode
[  163.674991][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'.
[  163.902523][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[  163.939752][ T8783] netlink: 52 bytes leftover after parsing attributes in process `syz.1.659'.
[  164.728666][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  165.067272][ T8826] netlink: 68 bytes leftover after parsing attributes in process `syz.3.674'.
[  165.187476][ T8836] netlink: 'syz.4.679': attribute type 1 has an invalid length.
[  165.234088][ T8836] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.234706][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.676'.
[  165.783506][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'.
[  165.826524][ T8868] 8021q: adding VLAN 0 to HW filter on device bond6
[  165.852158][ T8868] 8021q: adding VLAN 0 to HW filter on device bond6
[  165.863551][ T8868] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address
[  165.942593][ T8868] bond6: (slave wireguard0): Error -95 calling set_mac_address
[  165.971766][ T8874] netlink: 240 bytes leftover after parsing attributes in process `syz.3.681'.
[  166.109890][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'.
[  166.174367][ T8880] netlink: 'syz.4.687': attribute type 10 has an invalid length.
[  166.193357][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'.
[  166.284012][ T8883] netlink: 'syz.1.688': attribute type 7 has an invalid length.
[  166.360787][ T8888] netlink: 'syz.3.690': attribute type 1 has an invalid length.
[  166.393361][ T8888] 8021q: adding VLAN 0 to HW filter on device bond4
[  166.713596][ T8900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.693'.
[  166.867694][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'.
[  166.998113][ T8905] syzkaller1: entered promiscuous mode
[  167.004383][ T8905] syzkaller1: entered allmulticast mode
[  167.023513][ T8913] netlink: 84 bytes leftover after parsing attributes in process `syz.4.697'.
[  167.052521][ T8913] netlink: 64 bytes leftover after parsing attributes in process `syz.4.697'.
[  167.078158][ T8905] 8021q: adding VLAN 0 to HW filter on device bond6
[  167.849473][ T8948] netlink: 'syz.1.705': attribute type 2 has an invalid length.
[  167.989536][ T8951] sctp: [Deprecated]: syz.2.706 (pid 8951) Use of int in max_burst socket option deprecated.
[  167.989536][ T8951] Use struct sctp_assoc_value instead
[  168.496793][ T8946] netlink: 'syz.4.704': attribute type 1 has an invalid length.
[  168.504596][ T8946] netlink: 'syz.4.704': attribute type 4 has an invalid length.
[  168.543898][ T8946] netlink: 'syz.4.704': attribute type 1 has an invalid length.
[  168.569795][ T8946] netlink: 'syz.4.704': attribute type 4 has an invalid length.
[  169.065148][ T8978] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  169.078992][ T8979] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  169.313304][ T8982] netlink: 'syz.0.714': attribute type 1 has an invalid length.
[  170.031609][ T9010] Unsupported ieee802154 address type: 0
[  170.163097][ T9016] __nla_validate_parse: 8 callbacks suppressed
[  170.163115][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'.
[  171.439523][ T9064] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  171.973747][ T9095] !
: renamed from dummy0 (while UP)
[  171.990594][ T9096] netlink: 56 bytes leftover after parsing attributes in process `syz.1.743'.
[  172.015559][ T9095] netlink: 56 bytes leftover after parsing attributes in process `syz.1.743'.
[  172.234439][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.746'.
[  172.745205][ T9107] syzkaller1: entered promiscuous mode
[  172.751350][ T9107] syzkaller1: entered allmulticast mode
[  172.997994][ T9131] netlink: 64 bytes leftover after parsing attributes in process `syz.2.751'.
[  173.008040][ T9131] block nbd0: not configured, cannot reconfigure
[  173.137374][ T9136] validate_nla: 2 callbacks suppressed
[  173.138260][ T9136] netlink: 'syz.3.754': attribute type 1 has an invalid length.
[  173.231414][ T9140] bond6: (slave vti0): The slave device specified does not support setting the MAC address
[  173.241721][ T9140] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  173.279880][ T9140] bond6: (slave vti0): making interface the new active one
[  173.291570][ T9141] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  173.314642][ T9140] bond6: (slave vti0): Enslaving as an active interface with an up link
[  173.343332][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'.
[  173.352515][ T9139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.755'.
[  173.654597][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.758'.
[  174.401389][ T9185] geneve3: entered promiscuous mode
[  174.553540][ T9196] netlink: 'syz.4.768': attribute type 12 has an invalid length.
[  174.583932][ T9196] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.768'.
[  174.644764][ T9200] netlink: 'syz.0.769': attribute type 1 has an invalid length.
[  174.689190][ T9204] nftables ruleset with unbound chain
[  174.737677][ T9200] 8021q: adding VLAN 0 to HW filter on device bond7
[  175.013352][ T9216] veth0_to_team: mtu less than device minimum
[  175.147626][ T9219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.772'.
[  175.169442][ T9219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.772'.
[  175.180014][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'.
[  175.218759][ T9225] bond8: entered promiscuous mode
[  175.220980][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'.
[  175.235012][ T9225] 8021q: adding VLAN 0 to HW filter on device bond8
[  175.244711][ T9219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.772'.
[  175.254961][ T9219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.772'.
[  175.285795][ T9219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.772'.
[  175.339304][ T9219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.772'.
[  175.434602][ T9230] 8021q: adding VLAN 0 to HW filter on device bond9
[  175.448495][ T9230] bond9: entered promiscuous mode
[  175.454291][ T9230] bond8: (slave bond9): Enslaving as an active interface with an up link
[  175.683508][ T9241] netlink: 64 bytes leftover after parsing attributes in process `syz.3.779'.
[  175.713673][ T9241] netlink: 64 bytes leftover after parsing attributes in process `syz.3.779'.
[  175.762761][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'.
[  175.993452][ T9253] netlink: 'syz.1.782': attribute type 1 has an invalid length.
[  176.276021][ T9253] 8021q: adding VLAN 0 to HW filter on device bond7
[  176.703032][ T9272] Bluetooth: hci0: invalid length 0, exp 2 for type 4
[  177.345857][ T9306] netlink: 'syz.1.795': attribute type 1 has an invalid length.
[  177.421366][ T9309] netlink: 'syz.2.796': attribute type 21 has an invalid length.
[  177.442237][ T9313] netlink: 'syz.3.797': attribute type 1 has an invalid length.
[  177.453539][ T9306] 8021q: adding VLAN 0 to HW filter on device bond8
[  177.508621][ T9309] netlink: 'syz.2.796': attribute type 6 has an invalid length.
[  177.519361][ T9313] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  178.362639][ T9355] netlink: 'syz.0.807': attribute type 10 has an invalid length.
[  178.435493][ T9355] batadv0: entered promiscuous mode
[  178.441400][ T9355] batadv0: entered allmulticast mode
[  178.460366][ T9355] bridge0: port 4(batadv0) entered blocking state
[  178.489509][ T9355] bridge0: port 4(batadv0) entered disabled state
[  178.516797][ T9355] bridge0: port 4(batadv0) entered blocking state
[  178.523410][ T9355] bridge0: port 4(batadv0) entered forwarding state
[  178.556151][ T9365] netlink: 'syz.4.809': attribute type 1 has an invalid length.
[  178.610062][ T9365] 8021q: adding VLAN 0 to HW filter on device bond6
[  178.921110][ T9390] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  178.936178][   T67] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  178.945831][   T67] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  179.210476][ T9405] tun0: tun_chr_ioctl cmd 1074025681
[  179.463186][ T9422] netlink: 'syz.1.823': attribute type 1 has an invalid length.
[  179.565195][ T9422] 8021q: adding VLAN 0 to HW filter on device bond9
[  179.583850][ T9426] netem: unknown loss type 4
[  179.601102][ T9426] netem: change failed
[  180.147449][ T9460] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  180.367730][ T9471] __nla_validate_parse: 15 callbacks suppressed
[  180.367771][ T9471] netlink: 88 bytes leftover after parsing attributes in process `syz.2.838'.
[  180.399740][ T9450] netlink: 44 bytes leftover after parsing attributes in process `syz.3.831'.
[  180.444553][ T9475] netlink: 'syz.2.838': attribute type 16 has an invalid length.
[  180.482453][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'.
[  180.549388][ T9478] netlink: 'syz.0.840': attribute type 1 has an invalid length.
[  180.697266][ T9478] 8021q: adding VLAN 0 to HW filter on device bond10
[  180.745178][ T9485] netlink: 14 bytes leftover after parsing attributes in process `syz.1.841'.
[  180.905168][ T9490] veth8: entered promiscuous mode
[  180.912011][ T9490] veth8: entered allmulticast mode
[  181.071251][ T9491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.079920][ T9491] syzkaller0: entered promiscuous mode
[  181.087599][ T9491] syzkaller0: entered allmulticast mode
[  181.228762][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'.
[  181.381563][ T9511] netlink: 72 bytes leftover after parsing attributes in process `syz.3.850'.
[  181.463086][ T9511] netlink: 'syz.3.850': attribute type 9 has an invalid length.
[  181.496799][ T9511] netlink: 224 bytes leftover after parsing attributes in process `syz.3.850'.
[  181.561749][ T9486] tipc: Resetting bearer <eth:syzkaller0>
[  181.676797][ T9486] tipc: Disabling bearer <eth:syzkaller0>
[  181.693697][ T9525] netlink: 596 bytes leftover after parsing attributes in process `syz.1.854'.
[  182.109973][ T9540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.859'.
[  182.580699][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'.
[  182.693292][ T9573] netlink: 'syz.4.868': attribute type 1 has an invalid length.
[  182.901371][ T9584] netlink: 'syz.0.869': attribute type 1 has an invalid length.
[  182.919365][ T9584] NCSI netlink: No device for ifindex 0
[  182.934578][   T30] audit: type=1107 audit(1760848390.670:5): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�O�=���[ZE��YڃGF2��+�NN�b��u��1l��_X
�����ݳ��䇜��;K�b�Tޒ�?��:�{.k-:8F�0�;�Q�������֤��Y�(���3!'
[  182.951655][ T9573] 8021q: adding VLAN 0 to HW filter on device bond7
[  183.315973][ T9584] team_slave_0 (unregistering): left promiscuous mode
[  183.323536][ T9584] team_slave_0 (unregistering): left allmulticast mode
[  183.344172][ T9584] team0: Port device team_slave_0 removed
[  183.369144][ T6556] bridge0: port 3(team0) entered disabled state
[  183.394129][ T9592] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.468289][ T9592] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.508451][ T9593] pim6reg1: entered promiscuous mode
[  183.513897][ T9593] pim6reg1: entered allmulticast mode
[  183.554690][ T9592] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.604502][ T9592] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.689091][ T9592] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.717117][ T9592] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.809690][ T9592] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.843227][ T9592] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.062192][ T9631] bridge_slave_1: left allmulticast mode
[  184.102243][ T9631] bridge_slave_1: left promiscuous mode
[  184.113945][ T9631] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.126570][ T9631] bridge_slave_0: left allmulticast mode
[  184.132365][ T9631] bridge_slave_0: left promiscuous mode
[  184.142833][ T9631] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.267976][ T9621] syzkaller1: entered promiscuous mode
[  184.276520][ T9621] syzkaller1: entered allmulticast mode
[  184.457553][  T423] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.467225][  T423] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.480498][  T423] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.513688][  T423] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.581199][ T6554] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.596778][ T6554] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.615276][ T9659] lo speed is unknown, defaulting to 1000
[  184.628813][ T9659] lo speed is unknown, defaulting to 1000
[  184.639721][ T6554] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.654769][ T6554] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.671718][ T9659] lo speed is unknown, defaulting to 1000
[  184.718635][ T9659] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  184.752059][ T9659] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  184.842164][ T9659] lo speed is unknown, defaulting to 1000
[  184.860907][ T9659] lo speed is unknown, defaulting to 1000
[  184.924246][ T9659] lo speed is unknown, defaulting to 1000
[  184.973508][ T9659] lo speed is unknown, defaulting to 1000
[  184.999331][ T9659] lo speed is unknown, defaulting to 1000
[  185.027803][ T9675] syzkaller0: entered promiscuous mode
[  185.033381][ T9675] syzkaller0: entered allmulticast mode
[  185.474999][ T9697] netlink: 'syz.2.899': attribute type 29 has an invalid length.
[  185.855077][ T9711] lo speed is unknown, defaulting to 1000
[  185.880255][ T9716] __nla_validate_parse: 3 callbacks suppressed
[  185.880272][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'.
[  185.904502][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.903'.
[  185.908336][ T9717] netlink: 32 bytes leftover after parsing attributes in process `syz.4.904'.
[  186.448472][ T9745] atomic_op ffff88807b1f6198 conn xmit_atomic 0000000000000000
[  186.486396][ T9747] atomic_op ffff88802f2fc198 conn xmit_atomic 0000000000000000
[  186.632174][ T9747] netlink: 'syz.0.908': attribute type 1 has an invalid length.
[  186.647062][ T9747] netlink: 224 bytes leftover after parsing attributes in process `syz.0.908'.
[  186.671989][ T9745] netlink: 'syz.0.908': attribute type 1 has an invalid length.
[  186.689428][ T9745] netlink: 224 bytes leftover after parsing attributes in process `syz.0.908'.
[  186.717599][ T9754] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  186.735958][ T9754] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  186.747598][ T9754] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  186.888041][ T9757] batadv1: entered promiscuous mode
[  187.014275][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'.
[  187.027141][ T9772] netlink: 40 bytes leftover after parsing attributes in process `syz.1.914'.
[  187.055242][ T9762] lo speed is unknown, defaulting to 1000
[  187.356716][ T9791] netlink: 'syz.1.920': attribute type 1 has an invalid length.
[  187.416241][ T9791] 8021q: adding VLAN 0 to HW filter on device bond10
[  187.455744][ T9792] lo speed is unknown, defaulting to 1000
[  188.433172][ T9830] lo speed is unknown, defaulting to 1000
[  188.498324][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'.
[  188.525927][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  188.625210][ T9846] netlink: 'syz.1.931': attribute type 1 has an invalid length.
[  188.664397][ T9847] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.930'.
[  188.678420][ T9847] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  188.799543][ T9846] 8021q: adding VLAN 0 to HW filter on device bond11
[  188.995649][ T9866] netlink: 'syz.4.936': attribute type 12 has an invalid length.
[  189.242849][ T3507] tipc: Subscription rejected, illegal request
[  189.252636][ T9882] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  189.628362][ T9893] syzkaller0: entered promiscuous mode
[  189.677090][ T9893] syzkaller0: entered allmulticast mode
[  189.957611][ T9917] netlink: 'syz.1.947': attribute type 1 has an invalid length.
[  190.012542][ T9917] 8021q: adding VLAN 0 to HW filter on device bond12
[  190.064867][ T9898] lo speed is unknown, defaulting to 1000
[  191.625605][ T9932] __nla_validate_parse: 1 callbacks suppressed
[  191.625625][ T9932] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.950'.
[  192.400962][ T9966] lo speed is unknown, defaulting to 1000
[  192.487078][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'.
[  192.560690][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'.
[  192.603694][ T9976] 8021q: adding VLAN 0 to HW filter on device bond7
[  192.850062][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'.
[  192.864836][ T9990] netlink: 248 bytes leftover after parsing attributes in process `syz.4.963'.
[  192.901497][ T9987] netlink: 'syz.1.961': attribute type 3 has an invalid length.
[  193.197086][   T30] audit: type=1800 audit(1760848400.930:6): pid=9996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.964" name="memory.events" dev="tmpfs" ino=1023 res=0 errno=0
[  193.265207][T10007] netlink: 'syz.1.967': attribute type 1 has an invalid length.
[  193.290252][T10010] netlink: 'syz.2.968': attribute type 11 has an invalid length.
[  193.299518][T10007] 8021q: adding VLAN 0 to HW filter on device bond13
[  193.505757][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.971'.
[  193.921991][T10039] bond14: option mode: invalid value (254)
[  193.937630][T10039] bond14 (unregistering): Released all slaves
[  194.179484][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.975'.
[  194.214280][T10050] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.232732][T10050] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.267612][T10050] bridge0: port 3(macsec0) entered disabled state
[  194.459520][T10056] netlink: 'syz.3.978': attribute type 12 has an invalid length.
[  194.472118][T10059] netlink: 'syz.0.979': attribute type 1 has an invalid length.
[  194.486791][T10056] netlink: 'syz.3.978': attribute type 29 has an invalid length.
[  194.494603][T10056] netlink: 148 bytes leftover after parsing attributes in process `syz.3.978'.
[  194.551176][T10059] 8021q: adding VLAN 0 to HW filter on device bond11
[  194.592740][T10064] lo speed is unknown, defaulting to 1000
[  195.010796][T10087] lo speed is unknown, defaulting to 1000
[  195.220862][T10097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.522754][T10082] lo speed is unknown, defaulting to 1000
[  195.972330][T10092] lo speed is unknown, defaulting to 1000
[  195.993749][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  196.006198][T10117] netlink: 52 bytes leftover after parsing attributes in process `syz.2.995'.
[  196.160714][T10123] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[  196.490919][T10123] 8021q: adding VLAN 0 to HW filter on device bond14
[  197.547550][T10126] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  197.559591][T10126] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  197.568125][T10126] CPU: 0 UID: 0 PID: 10126 Comm: syz.1.997 Not tainted syzkaller #0 PREEMPT(full) 
[  197.577474][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  197.587551][T10126] RIP: 0010:klist_remove+0x14a/0x340
[  197.592871][T10126] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 c9 66 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 aa 66 e3 f6 49 8b 44 24 58 48 89 44 24 08
[  197.612846][T10126] RSP: 0018:ffffc9000f0575e0 EFLAGS: 00010202
[  197.618946][T10126] RAX: 000000000000000b RBX: ffff88807d0c3c80 RCX: 0000000000000000
[  197.627018][T10126] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  197.635084][T10126] RBP: ffffc9000f0576e0 R08: ffffffff8f84b983 R09: 1ffffffff1f09730
[  197.643070][T10126] R10: dffffc0000000000 R11: fffffbfff1f09731 R12: 0000000000000000
[  197.652191][T10126] R13: 1ffff110049cf00c R14: ffff888024e78060 R15: dffffc0000000000
[  197.660178][T10126] FS:  0000000000000000(0000) GS:ffff888125d0e000(0000) knlGS:0000000000000000
[  197.669123][T10126] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  197.675711][T10126] CR2: 0000200000015038 CR3: 000000000df38000 CR4: 00000000003526f0
[  197.683737][T10126] Call Trace:
[  197.687036][T10126]  <TASK>
[  197.690010][T10126]  ? __pfx_klist_remove+0x10/0x10
[  197.695226][T10126]  ? __pfx_kobject_move+0x10/0x10
[  197.700254][T10126]  ? do_raw_spin_unlock+0x122/0x240
[  197.705479][T10126]  ? get_device_parent+0x366/0x3a0
[  197.710583][T10126]  device_move+0x193/0x700
[  197.714982][T10126]  hci_conn_del_sysfs+0xb8/0x170
[  197.719900][T10126]  hci_conn_del+0xc33/0x11b0
[  197.724511][T10126]  hci_conn_hash_flush+0x191/0x230
[  197.729638][T10126]  hci_dev_close_sync+0xaef/0x1330
[  197.734849][T10126]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  197.740452][T10126]  ? up_write+0x1c4/0x420
[  197.744873][T10126]  hci_unregister_dev+0x21a/0x510
[  197.749985][T10126]  vhci_release+0x152/0x1a0
[  197.754492][T10126]  ? __pfx_vhci_release+0x10/0x10
[  197.759530][T10126]  __fput+0x44c/0xa70
[  197.763620][T10126]  task_work_run+0x1d4/0x260
[  197.768195][T10126]  ? __pfx_task_work_run+0x10/0x10
[  197.773284][T10126]  ? do_exit+0x6b0/0x2300
[  197.777590][T10126]  ? kmem_cache_free+0x19b/0x690
[  197.782508][T10126]  do_exit+0x6b5/0x2300
[  197.786753][T10126]  ? do_raw_spin_lock+0x121/0x290
[  197.791769][T10126]  ? __pfx_do_exit+0x10/0x10
[  197.796490][T10126]  do_group_exit+0x21c/0x2d0
[  197.801273][T10126]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.806653][T10126]  get_signal+0x1285/0x1340
[  197.811600][T10126]  arch_do_signal_or_restart+0xa0/0x790
[  197.817279][T10126]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  197.823476][T10126]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.828938][T10126]  ? exit_to_user_mode_loop+0x40/0x130
[  197.834492][T10126]  exit_to_user_mode_loop+0x72/0x130
[  197.839878][T10126]  do_syscall_64+0x2bd/0xfa0
[  197.844472][T10126]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.849778][T10126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.855928][T10126]  ? clear_bhb_loop+0x60/0xb0
[  197.860708][T10126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.866597][T10126] RIP: 0033:0x7f7b9338efc9
[  197.871105][T10126] Code: Unable to access opcode bytes at 0x7f7b9338ef9f.
[  197.878231][T10126] RSP: 002b:00007f7b94160038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.886630][T10126] RAX: 0000000000000060 RBX: 00007f7b935e6090 RCX: 00007f7b9338efc9
[  197.894845][T10126] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000005
[  197.902921][T10126] RBP: 00007f7b93411f91 R08: 0000000000000000 R09: 0000000000000000
[  197.910978][T10126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.918944][T10126] R13: 00007f7b935e6128 R14: 00007f7b935e6090 R15: 00007ffebac86078
[  197.927006][T10126]  </TASK>
[  197.930101][T10126] Modules linked in:
[  197.937984][T10126] ---[ end trace 0000000000000000 ]---
[  197.954702][T10126] RIP: 0010:klist_remove+0x14a/0x340
[  197.960697][T10126] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 c9 66 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 aa 66 e3 f6 49 8b 44 24 58 48 89 44 24 08
[  197.982195][T10126] RSP: 0018:ffffc9000f0575e0 EFLAGS: 00010202
[  197.988844][T10126] RAX: 000000000000000b RBX: ffff88807d0c3c80 RCX: 0000000000000000
[  197.997609][T10126] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  198.007490][T10126] RBP: ffffc9000f0576e0 R08: ffffffff8f84b983 R09: 1ffffffff1f09730
[  198.015895][T10126] R10: dffffc0000000000 R11: fffffbfff1f09731 R12: 0000000000000000
[  198.024046][T10126] R13: 1ffff110049cf00c R14: ffff888024e78060 R15: dffffc0000000000
[  198.033813][T10126] FS:  0000000000000000(0000) GS:ffff888125d0e000(0000) knlGS:0000000000000000
[  198.044148][T10126] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  198.051834][T10126] CR2: 0000200000015038 CR3: 0000000032034000 CR4: 00000000003526f0
[  198.060878][T10126] Kernel panic - not syncing: Fatal exception
[  198.067487][T10126] Kernel Offset: disabled
[  198.071885][T10126] Rebooting in 86400 seconds..