last executing test programs:

21.719899908s ago: executing program 0 (id=2843):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x0, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x4)
r5 = accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x8)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r6, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)

21.512604167s ago: executing program 0 (id=2844):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6(0x10, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0}) (async, rerun: 64)
r6 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x89}}]}, 0x78}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x80, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x1e02, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x10}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x600}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r9=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000020c0)=ANY=[@ANYBLOB="ac0d0000", @ANYRES16=r8, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000300d0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030007000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff020000000000000000000000000001050003000200000064000080080003000200000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e220000000000000000000000002c080080f4020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc01000000000000000000000000000105000300030000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030001000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a004e200000000500000000000000000000ffffac1e0001040000007c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e000000105000300000000007c000080060001000a00000014000200fc0100000000000000000000000000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a00000014000200200100000000000000000000000000020500030001000000a0000080060001000a00000014000200fc0000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030006000000060001000a00000014000200fe8800000000000000000000000001010500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac14141605000300010000007c000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r9, @ANYBLOB="240003000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800070001800000cf6a8ace9160172d29c390e9776db100d70fd50e5c33b33287697671196f8413c1207c15788c2c1bb58693ca06873b1c271a06f3248e0f380ade1faae155533c26e325de9e24611836b79533ed492528f60210a653f66b7db857eb3685f98ada5d92d27aaabf9da64b7aacdaab3132ef06df6084c51a416be320bd3a993fd994f76603838ba257f5a9f670e0bac67d3594befbebbbe508df9322d95565d93b9841264060fcdfb8f28ae8"], 0xdac}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r13, @ANYBLOB="0400460008006b00010001000500340000000000080026006c09"], 0x38}, 0x1, 0x0, 0x0, 0x20004}, 0x0) (async)
socketpair(0x0, 0x100000005, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'})

21.069106042s ago: executing program 0 (id=2851):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x26e1, 0x0)
poll(0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x228, 0xc8, 0xb8, 0x228, 0x2804, 0x338, 0x2e8, 0x2e8, 0x338, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x1d0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x55af)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000340)=0x1b)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000200)={'veth0_to_bond\x00', {0x2, 0x0, @empty}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r6, 0x2000000, 0x1d, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8861000dffd00139fb7a884", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000180), &(0x7f0000000280)=0x4)
socket$kcm(0x11, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
socket$kcm(0x10, 0x400000002, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x7, 0x3, 0x14}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, r7, 0xb3}, 0x48)

20.670937643s ago: executing program 0 (id=2857):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}}, 0x20}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0021000000000000000000070063a7", @ANYRES32=r2, @ANYBLOB="0000b7000a0002"], 0x28}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0}) (async, rerun: 64)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050002000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800010008000000"], 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={0x0}}, 0x0) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"/2446], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5c}, 0x48)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r10}, 0x10) (async, rerun: 32)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (rerun: 32)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r5)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r12, 0x8, 0x70bd28, 0x5dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x20}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000001}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2e220c688a2e067}, 0x4000011) (async, rerun: 32)
r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) (rerun: 32)
close(r13) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r13, r8, 0x0, r13}, 0x10) (async, rerun: 64)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x7, 0xfffe}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r14=>0x0}) (async)
r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r15, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006261746164763000000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="4fea46214c45a0145be5dd"], 0x3c}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r13, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x13c, r6, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x11}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r14}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xfc, 0xac, "bffabb3ab94e9c609d20deae12409a21ac7ef73e6ca58b10b097f3164dd03466970b5c30a1d6d2916e8dce62a521b845ec1c4d7a271bf36101823211a5142b42ffec5a64390b7a324b6e85c02be1665598c3a518190ad333fed8bb58fcac68229d9a443fe29dd6a7bc510a65d564af567d20b032f7b00dd82bdab9c65f78950b8d6a4087cc78723cb12abb7c113b3bac582004580ff099e5b608350f27b28f44d1f875eb885ad25f8a31fc4f79aa0200000000000007007a597f668d8fa86a89399d65f5dd6d6836bcf1df1709263509d45956987fe5b2546b5070e7f2ae5a7982a48bdf7b7473d302865aebb89571a0bf7a310000000000"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8000}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0xefa5d1312d7f4ac8)

20.460619273s ago: executing program 0 (id=2860):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002c40)=""/4084, 0xcac}], 0x1}, 0x102)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [], 0x0, 0x0, &(0x7f00000005c0)=ANY=[]}, 0x78)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800300000fe80"], 0x0)
sendmsg$inet(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a2", 0x1}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b809915363bb41669c50049a60000009500000000000000"], 0x0}, 0x90)
setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r10, 0xc)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000400ff"], 0x54}}, 0x0)

9.176235762s ago: executing program 4 (id=2954):
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32)
socket$packet(0x11, 0x3, 0x300) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socket$inet_dccp(0x2, 0x6, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
socket(0x10, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syz_tun\x00', <r5=>0x0}) (async, rerun: 32)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) (rerun: 32)
r6 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
setsockopt$packet_int(r6, 0x107, 0x10, &(0x7f00000001c0)=0x3, 0x4) (async, rerun: 64)
sendto$packet(r4, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (rerun: 64)
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="540010001000030400000000000e35590a743bcdfd28560687e400007400", @ANYRES32=r3, @ANYBLOB="0000000003120100340012800b00010062726964676500002400028008000500010000000600270000000000050025000000000005002d0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)

8.267519959s ago: executing program 4 (id=2969):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
pwritev(r3, &(0x7f00000033c0)=[{&(0x7f00000030c0)='\n', 0xfdef}], 0x2, 0x8, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) (async)
ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x0, 0x0, 0x2a44}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r5, &(0x7f0000000040)='`', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) (async)
sendmmsg$inet6(r5, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)='n', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000480)='I', 0x1}], 0x1}}], 0x2, 0x40000c0) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0) (async)
socket$igmp6(0xa, 0x3, 0x2)

8.080739444s ago: executing program 4 (id=2971):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x64, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x30, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x4}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x64}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x24, r7, 0x211, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r10=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}}, 0x0)

7.997002624s ago: executing program 4 (id=2974):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2}, 0x10)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x2, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
poll(&(0x7f0000000300)=[{}], 0x1, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000140), 0x10)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000540)=0x410, 0x4)
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f0000000200)="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", 0xfc)
sendmsg$NFT_MSG_GETCHAIN(r10, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xcc, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0xa9, 0xc, "6b18e3848a68c055e602fb1fa7dffce0290572999db45af657374df232382a1f18d8615cfdf40447fb71aa0382c9f4b9d3dc45dac43a613773a08d4ecc3564ada88a8b8fb3686780584e1ecd083e1d533288806e7cf6f04783f4faf7a710996a442948025ce041446805052919c6be775d753055225fa0af625e66c3475a861eed90db3dda8433a68014812bf5e3982c284c245124460ed8675d3519b6e61980fcba7e9d50"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20018050}, 0x4)
ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, {0x306, @local}, 0x2e, {0x2, 0x4e23, @multicast2}, 'ip6tnl0\x00'})
sendmsg$can_bcm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r10)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r10, &(0x7f0000000640)={&(0x7f0000000080), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r11, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44844}, 0x40000)

7.82792241s ago: executing program 4 (id=2976):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
listen(0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f0000007940)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf8a, 0x0, 0x0, @private2, @local, {[@routing={0x84}], "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"}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
close(0x3)

7.694809358s ago: executing program 0 (id=2860):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000002c40)=""/4084, 0xcac}], 0x1}, 0x102)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [], 0x0, 0x0, &(0x7f00000005c0)=ANY=[]}, 0x78)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800300000fe80"], 0x0)
sendmsg$inet(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a2", 0x1}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}]}, 0x90)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b809915363bb41669c50049a60000009500000000000000"], 0x0}, 0x90)
setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r10, 0xc)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000400ff"], 0x54}}, 0x0)

7.421304599s ago: executing program 4 (id=2983):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = epoll_create(0x5)
tee(r3, r2, 0x82, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4)

1.611306565s ago: executing program 3 (id=3027):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x3}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x6, <r2=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x0, 0x0, {0x2b}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000100), 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xfffffffc, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@empty}]}]}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)

1.469709661s ago: executing program 3 (id=3028):
socket$inet6(0xa, 0x200000000003, 0x87) (async)
syz_emit_ethernet(0x5e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa870000000000000000020100000000002001000000000000000000000000000000000000000890782d2f73bf42acc6382f62c51b714615840ae3360565adf03a927feac6130d754c9c11cf1cf615440c5357e85f73d9331bb2f079807972e9fb752f9dbe7e62cbbd6f8ef911922cc3d9a4a2850a73baeb835a673ff68e911d3b957004be6bf770b54a4f1cf82445e43011e32694976b632176c7fe632fd9275b508e1f8ff82d992eb55095243eab6860d8c737eae6c32a4ad5c2d529636b52128b74648f55e328cc692cf89a33a4349181a67f7d308d7f7489f3c8a3fc3863ecdd5162"], 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b400000095bb000000000000"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x2000001, 0xe0, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c40)={r0, 0x58, &(0x7f0000001bc0)}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002dc0)='cgroup.events\x00', 0x0, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x53}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0], <r2=>0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="181800e7451aea2bf0017543fad584c08382b7a9db7d30e1bdd706e5c7f481dca642659b27bcc3030c", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2e00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x800003, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x3, 0x1000}, 0x10, r2, r1, 0x0, &(0x7f0000000540)=[0xffffffffffffffff]}, 0x80)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r3, &(0x7f0000000040)="05000000010001", 0x7) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='1-2:5/', @ANYRESOCT, @ANYBLOB='E'], 0x31)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) (async)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040), 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)
writev(r3, &(0x7f0000000040), 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESHEX], 0xfda6}, 0x1, 0x0, 0x0, 0x240084e0}, 0x818) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r8, 0x11, 0x1, &(0x7f00000006c0), 0x4) (async)
socket$inet(0x2, 0x80001, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))

1.363258549s ago: executing program 3 (id=3030):
syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010184}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x1}, 0x2c)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', <r4=>0x0})
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x6124, 0x4)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r6, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x3, 0xa2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r4}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x6}, 0x4)
syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010184}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async)
accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'dh\x00', 0x1}, 0x2c) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x6124, 0x4) (async)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000080)=0x2, 0x4) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async)
listen(r6, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x3, 0xa2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) (async)
sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r4}, 0x10, &(0x7f0000000880)={&(0x7f0000000840)=@can={{}, 0x0, 0x0, 0x0, 0x0, "ded27feeba7ca62a"}, 0x10}}, 0x0) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x6}, 0x4) (async)

1.138043811s ago: executing program 3 (id=3033):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0)
socket(0x8, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
r7 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000400)=r6, 0x4)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000004c0)=r6, 0x4)
r8 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x1}], 0x1c)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040))
r9 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newqdisc={0xa0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x5}]}}]}, 0xa0}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000140)='%pI4   \x00'}, 0x20)

1.090531163s ago: executing program 1 (id=3034):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000001)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x14, &(0x7f00000004c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00, 0x1}, [@call={0xc}, @exit, @map_fd, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x75}, 0x90)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth1_virt_wifi\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r9, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
r10 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r10, &(0x7f0000000200)="3f030e00f0e812002c001e0089e9", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="100025bd7000fcdbdf250000000008000100", @ANYRES32=r8, @ANYBLOB="7400028038000100241101006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400faffffff380001002400e0a90ea94de62978090f01006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040006000000"], 0x90}}, 0x4000000)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@cgroup, r4, 0x11, 0x0, 0x2, @prog_id}, 0x20)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
socket$kcm(0x10, 0x2, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001a00010000000000000000000a00000000000000000000000800", @ANYRES32, @ANYRES16=r12], 0x30}}, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

1.04842364s ago: executing program 2 (id=3035):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000))
connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000280), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async)
setsockopt$inet6_opts(r4, 0x29, 0x39, 0x0, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000040)) (async)
socket$igmp(0x2, 0x3, 0x2)

891.744996ms ago: executing program 1 (id=3036):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001a00010000000001000000000a"], 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007b00000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000008004000180040002004000"/32], 0x20}}, 0x0)

859.424044ms ago: executing program 1 (id=3037):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900180000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8700000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

807.640372ms ago: executing program 1 (id=3038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x5, 0x0, 0x9, 0x1a00}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_alloc\x00', r2}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg(r3, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000360000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008090000b703000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff00002007000000000000010000840600000000"], 0x0, 0x42}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)={0x34, r9, 0x601, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r7, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x801, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0)

728.605738ms ago: executing program 2 (id=3039):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$alg(0x26, 0x5, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x8, @mcast1, 0x6}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @multicast2}], 0x4c) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) (async)
socket$kcm(0x2, 0x3, 0x84) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
recvmmsg(r1, &(0x7f0000001a80), 0x0, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$inet6_sctp(0xa, 0x0, 0x84) (async)
setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000380), 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x4, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa9}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
pipe(&(0x7f0000000140))
r5 = socket$inet_udp(0x2, 0x2, 0x0)
close(r5)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x20)

709.071976ms ago: executing program 2 (id=3040):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/71, 0x328000, 0x800, 0x0, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/71, 0x328000, 0x800, 0x0, 0x3}, 0x20) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) (async)

619.799725ms ago: executing program 1 (id=3041):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x90)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x29, 0x0, 0x0, 0xfffffffd, {0x1, 0xd601, 0x9}}, 0x14}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) (async)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x8, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003"], 0xa0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r2) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) (async)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x7fe2, 0x5, 0x140}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000380), 0x20000000}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000140)="99", &(0x7f0000000440)=""/155}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000180)={r3, &(0x7f0000000140)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3}, 0x4) (async)
socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffe6)

472.545115ms ago: executing program 1 (id=3042):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x0, 0x8006)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x3b, &(0x7f0000000040)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0)
r2 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000640), 0x4)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x50}}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0)
socket$key(0xf, 0x3, 0x2)
listen(r3, 0x4)
accept(r3, &(0x7f0000000080)=@can, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000001a6260000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x1)
listen(r6, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_int(r8, 0x1, 0xb, &(0x7f0000000000)=0x6, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000035000107000020000000000007"], 0x14}}, 0x0)

452.300656ms ago: executing program 2 (id=3043):
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
write$binfmt_script(r3, 0x0, 0xfffffe5d)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYRES32=r4, @ANYBLOB="01ff06e1c2ed00001c0012000c00010062"], 0x3c}}, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmmsg$inet6(r5, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x1000000, @private2, 0x5}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x4bc, @private1, 0x400005}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000340)="e04c29f7ed3d368540d9d602dddb84fd8f27807c0b479b68c3fda16887240d7c4c97d4e9539606bba4602a4f8ca40894d89677c6f5dd2fbe77d8005144c33179316f8ba922a2874382fc51a74ba11a8b26145b99cb27ff152c8818f50a4684a8c3b5c639e02fe2cc1f2de01e35b7f6a2d278870269a2c3796b9c72f9d41cc60f1cfdf3b823496a0000000000", 0x8c}, {&(0x7f0000000500)="35507d1f48936ebb8c0dbf655d8f9fd2dfa6296b748d8eb8809db4e9bf6035fdf201ab0e89bee303b2489ea9dbe2206572cad6c19dacb8c747f96167e0015ee583ed7f8dec7992a00c", 0x49}, {&(0x7f0000000400)="20fb1cec8ea0557bb9fb62385b1462a90a0f75d53c86d877c6c46f70ce6c51aa6472216e5292d4c7688ec8dee735cd52659e47b1973dc03e1f6d1de5d42ce8e66e5a6ec34919cb494efa63e21c147fb97d1f7ca3e2647e76eefcc7487bbf82df9108f9b4584feb1a59ecb2d84c6f7c3be5c7b10dc85b8216283b7a30bf25dfc5690fcb89ca153fa229639c648a525cf346952b4464d586b7a82f8c1ca29bfdae670f0431d4752f3724a4315617eb", 0xae}, {&(0x7f00000006c0)="aae936c1a7f1a4615792bb2b6f314970386a6b69f8f0e85e0d62eff55db711a72f8df9afffea1194649e9a9450e2649ab3816f64535a28e97cab9c31fbe6353d870f23f1b8d22b379303af3575900201eb8e4e6bfd2ecf6c7ed84f98e09c1ad42678a1045a8cf1c0444cc53b3b985c22e3a85e64b045acc872a84c5c0a1471df8fb5a4075c0ce861fac7f99d292bf0fce28778a7d05929831346181c4c6f5a9c21976ba29b9daa7d33bf837fb82657962c0517ad4c9065a15776f070c089f9e13d07e4f9ff854e1b834f72c953c6d55ea98b9ce5dc40d044545b0c522622be258c52623159c875e8451f877c8113b41df4154c", 0xf3}], 0x4, &(0x7f00000005c0)=ANY=[], 0xc8}}], 0x2, 0x4004800)
r6 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="06000006400300d267000006000700020000000000000000071bc84d9bbe6f2f1030899a39e93abe6d3b7631222394f585c23eaba9eaf539f81a5379db1cb8ff4e2114203643c5484a54d6ba8ead7cbc040e63f0be3721de3d9a216ee6b6a108a99a521a3de6bbe1ca63cbd9"], 0x38}, 0x1, 0x0, 0x0, 0x40400c0}, 0x24000001)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0xffff7fff, 0x4)
write(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x81, 0x4)
setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000840)=0x3, 0x4)
unshare(0x20000400)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0xc22, 0x70bd25, 0x6, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000580), 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x4004b40b)

279.519239ms ago: executing program 2 (id=3044):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f92724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x16, 0x0, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r3, 0x300, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4008014)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
bind$inet(r6, &(0x7f0000000500)={0x2, 0x4e21, @empty}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000003c80)={'vcan0\x00', <r8=>0x0})
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000003cc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r8}, 0x14)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000004c0)={'dvmrp1\x00', &(0x7f0000000580)=@ethtool_rxnfc={0x1, 0x1, 0x7, {0xd, @sctp_ip6_spec={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x4e24}, {0x0, @link_local, 0x4, 0x9, [0x8, 0x7fffffff]}, @udp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4e21, 0x9}, {0x0, @link_local, 0xec4d, 0x3ff, [0x5, 0x7e]}, 0x2, 0xb2}, 0x8, [0x7, 0x1, 0xf, 0x80, 0x9, 0x1, 0x7, 0x3]}})
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
bind$unix(r9, &(0x7f00000002c0)=@abs={0x1}, 0x6e)
listen(r9, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x2, 0x34005}, 0x0)

160.57857ms ago: executing program 3 (id=3045):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
read$alg(r1, &(0x7f0000001480)=""/4096, 0xfdef)
write$binfmt_script(r1, &(0x7f0000004180), 0xff77) (async)
write$binfmt_script(r1, &(0x7f0000004180), 0xff77)
socket$l2tp(0x2, 0x2, 0x73) (async)
r3 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', <r4=>0x0})
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000000c0)={@private=0xa010100, @loopback, r4}, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000080), &(0x7f0000000300)}, 0x20)
write$binfmt_elf64(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1, 0x8, 0x7, 0x7, 0x2, 0x3e, 0xd, 0x303, 0x40, 0xcb, 0x30b, 0x40, 0x38, 0x1, 0xdf, 0xfff7, 0x1}, [{0x7, 0x5, 0xfff, 0x6, 0x10001, 0x4, 0x100000000, 0xbf}], "5c87bd6749325e57d29d8ac3d2b55151c12a275dcc883a958bce1c433c24d233263ecd10369dd55c50888fcd1f7a5598a77961c3aee83cccd132bf35d1dc1462c3aae7a899ff881cda8ab476c9b7ab8adc4c3799bd1ff4c16aa05939a0d6dbbdcbf8ad43285b3877e45b6e2d35e772b0dd91052f3c9f113cc595c64d6ac41ae575e32b0ce5956046183efa0f74c95190c8e454b0fd1b88dda6377f66ab553821a74177a1b87363748c7a56c1a22ffdcaf67fd1baebfd55c688642f50906b39a6989120fb6072162dfa1c5b81477e9639b2", ['\x00', '\x00', '\x00', '\x00']}, 0x549) (async)
write$binfmt_elf64(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x1, 0x8, 0x7, 0x7, 0x2, 0x3e, 0xd, 0x303, 0x40, 0xcb, 0x30b, 0x40, 0x38, 0x1, 0xdf, 0xfff7, 0x1}, [{0x7, 0x5, 0xfff, 0x6, 0x10001, 0x4, 0x100000000, 0xbf}], "5c87bd6749325e57d29d8ac3d2b55151c12a275dcc883a958bce1c433c24d233263ecd10369dd55c50888fcd1f7a5598a77961c3aee83cccd132bf35d1dc1462c3aae7a899ff881cda8ab476c9b7ab8adc4c3799bd1ff4c16aa05939a0d6dbbdcbf8ad43285b3877e45b6e2d35e772b0dd91052f3c9f113cc595c64d6ac41ae575e32b0ce5956046183efa0f74c95190c8e454b0fd1b88dda6377f66ab553821a74177a1b87363748c7a56c1a22ffdcaf67fd1baebfd55c688642f50906b39a6989120fb6072162dfa1c5b81477e9639b2", ['\x00', '\x00', '\x00', '\x00']}, 0x549)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000900)='fscache_access\x00', r7}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0)

11.041962ms ago: executing program 2 (id=3046):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\xec\xff\xffm\x01v\x8b\xbbik\xe9\x1e\xefS\f'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000180)=0x10, 0x80800)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000380)='contention_begin\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe0c, 0xffe0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847fe884700121100632f77fbac14141dac1414", 0x0, 0x71, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000000000000000800100"], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28, 0x500}}], 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000b00)={'sit0\x00', 0x0, 0x1, 0x8, 0x9, 0x0, {{0x4e, 0x4, 0x1, 0x3d, 0x138, 0x64, 0x0, 0x6, 0x29, 0x0, @local, @remote, {[@cipso={0x86, 0x4c, 0x1, [{0x2, 0x4, 'GT'}, {0x0, 0x5, "166589"}, {0x5, 0x5, "e953c9"}, {0x6, 0x2}, {0x2, 0x6, "64c39a23"}, {0x0, 0x3, 'f'}, {0x5, 0xd, "89fb8cf52d1632248d8653"}, {0x1, 0xe, "0c4488c21edd4069bbc051dd"}, {0x7, 0x12, "8b79b0ba78c6c08a0b0ae5b77ab2e745"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x81, 0x1, 0x4, [{@multicast2, 0x6}, {@loopback, 0xa0}, {@rand_addr=0x64010102, 0x58}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x9}, {@private=0xa010101, 0x93df}, {@multicast2, 0xda5}, {@remote, 0xc}]}, @noop, @noop, @lsrr={0x83, 0x13, 0xbf, [@multicast2, @multicast2, @remote, @multicast1]}, @generic={0x88, 0x7, "4740f4bd51"}, @cipso={0x86, 0x6f, 0x3, [{0x0, 0x7, "deb72d0b0c"}, {0x7, 0x7, "309d0b93ff"}, {0x5, 0xb, "050100000000000000"}, {0x2, 0x2}, {0x7, 0x12, "830b650ed6b5e82f75e9535e44796c53"}, {0x7, 0xa, "b4d14fceeceee0df"}, {0x6, 0xf, "a8164d8b0b8d7f7c91e893c0ef"}, {0x1, 0x11, "7483043534a70000125b1e97d11311"}, {0x6, 0x12, "c8bb2e0902fbff0080000000a9b707f9"}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @ssrr={0x89, 0x7, 0x2c, [@dev={0xac, 0x14, 0x14, 0x23}]}]}}}}})
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000dfffffffff130012800b0001006d616373656300000400028008000500d9efc47c9d2093bfc894ab85a5682cec765ad90590788a588e3bda5e08e84616ea99b6953dd3c89ba24b", @ANYRES32=r9, @ANYRES64=r7], 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'})

0s ago: executing program 3 (id=3047):
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3}, 0x48) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3}, 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f00000007c0)=ANY=[], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r3, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.time\x00', 0x0, 0x0)
ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000240)=0x6)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$SO_COOKIE(r4, 0x1, 0x4a, 0x0, &(0x7f00000001c0)=0x300) (async)
getsockopt$SO_COOKIE(r4, 0x1, 0x4a, 0x0, &(0x7f00000001c0)=0x300)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3}, 0x48) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3}, 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff}, [@jmp={0x5, 0x0, 0xc, 0x5, 0x5, 0x14, 0xffffffffffffffff}, @generic={0x80, 0x2, 0x9, 0x8001, 0x327aa70d}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r1}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b03d25a806f8c6394f90824fc600d0004000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.719494][ T9043] ipt_REJECT: TCP_RESET invalid for non-tcp
[  153.025463][ T9049] ipip1: entered promiscuous mode
[  153.267758][ T9076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.355213][ T9144] netlink: 'syz.3.1008': attribute type 1 has an invalid length.
[  155.840886][ T9175] __nla_validate_parse: 10 callbacks suppressed
[  155.840905][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1015'.
[  156.010469][ T9185] pimreg: entered allmulticast mode
[  156.147512][ T9192] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  156.159775][ T9192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1020'.
[  156.189126][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'.
[  156.280691][ T9202] xt_CT: You must specify a L4 protocol and not use inversions on it
[  156.602744][ T9234] netlink: 'syz.2.1028': attribute type 5 has an invalid length.
[  156.798019][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.380540][ T6198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  157.712677][ T9301] netlink: 'syz.1.1041': attribute type 32 has an invalid length.
[  157.734976][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  157.753381][ T9301] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52)
[  157.807053][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'.
[  157.828960][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1043'.
[  157.920060][ T9312] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  157.936043][ T9310] mac80211_hwsim hwsim3 nicvf0: entered promiscuous mode
[  157.943872][ T9310] mac80211_hwsim hwsim3 nicvf0: entered allmulticast mode
[  157.954740][ T9314] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1047'.
[  158.006697][ T1075] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  158.324244][ T9338] netlink: 'syz.4.1055': attribute type 1 has an invalid length.
[  158.334085][ T9338] netlink: 'syz.4.1055': attribute type 2 has an invalid length.
[  158.346436][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'.
[  158.491683][ T9347] hsr0: entered promiscuous mode
[  158.500229][ T9347] batman_adv: batadv0: Adding interface: macsec1
[  158.508804][ T9347] batman_adv: batadv0: The MTU of interface macsec1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.542820][ T9347] batman_adv: batadv0: Interface activated: macsec1
[  159.038735][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1064'.
[  160.463127][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'.
[  160.486595][ T9408] IPv6: Can't replace route, no match found
[  160.898720][ T9441] __nla_validate_parse: 2 callbacks suppressed
[  160.898740][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'.
[  161.050292][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.112860][ T9459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.123991][ T9454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1087'.
[  161.149084][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.185113][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.240144][ T9463] netlink: 'syz.4.1089': attribute type 32 has an invalid length.
[  161.358926][ T9472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1092'.
[  161.405363][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1091'.
[  161.573490][ T9482] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  161.595194][ T9484] netlink: 'syz.1.1095': attribute type 7 has an invalid length.
[  161.623583][ T9482] netlink: 'syz.3.1094': attribute type 10 has an invalid length.
[  161.683087][ T9482] team0: Port device netdevsim0 added
[  161.925907][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'.
[  162.113327][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1097'.
[  162.616329][   T29] audit: type=1107 audit(1722843992.899:2): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­:δ˜εΨΤY$ψΙψμnJšπ5…£Υέ9Iΰcc}·Φ¨“Vδ}L(‡šΏΞ€Oι*?Sύ\H€SsdΔΘˆωLβ©Y۞‚ΣD|·Uςͺ
sH;‰Ισ='
[  162.618146][ T9526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.661926][ T9532] bridge0: entered promiscuous mode
[  162.672979][ T9532] bridge0: entered allmulticast mode
[  162.827471][ T9547] batadv_slave_1: entered promiscuous mode
[  162.936241][ T9554] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1117'.
[  162.950458][ T9554] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  162.953957][ T9548] batadv_slave_1: left promiscuous mode
[  163.051474][ T6198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  163.097979][ T9564] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  163.129792][ T6198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  164.753920][ T9598] netlink: 'syz.3.1129': attribute type 1 has an invalid length.
[  165.092948][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1135'.
[  165.155259][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'.
[  165.189233][ T9627] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  165.546776][ T9656] nbd: must specify an index to disconnect
[  165.671860][ T9669] sctp: [Deprecated]: syz.0.1143 (pid 9669) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.671860][ T9669] Use struct sctp_sack_info instead
[  165.857615][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'.
[  165.994647][ T9688] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  166.315594][ T9710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1159'.
[  166.348610][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1159'.
[  166.522354][ T9723] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1164'.
[  166.535153][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1164'.
[  167.094276][ T9761] xt_bpf: check failed: parse error
[  167.141706][ T9762] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1176'.
[  167.194164][ T9766] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1177'.
[  167.203819][ T9762] netlink: 'syz.4.1176': attribute type 178 has an invalid length.
[  167.242001][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.249683][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.286231][ T9762] bridge0: left promiscuous mode
[  167.288227][ T8630] IPVS: starting estimator thread 0...
[  167.308769][ T9762] bridge0: left allmulticast mode
[  167.353496][ T9764] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1173'.
[  167.382847][ T9775] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  167.418576][ T9764] netlink: 'syz.1.1173': attribute type 2 has an invalid length.
[  167.449523][ T9774] IPVS: using max 19 ests per chain, 45600 per kthread
[  167.458834][ T9764] netlink: 'syz.1.1173': attribute type 1 has an invalid length.
[  167.684192][ T9788] netlink: 'syz.4.1182': attribute type 3 has an invalid length.
[  167.708677][ T9792] netlink: 'syz.1.1184': attribute type 9 has an invalid length.
[  167.733453][ T9788] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1182'.
[  167.748486][ T9792] netlink: 'syz.1.1184': attribute type 6 has an invalid length.
[  167.759883][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'.
[  167.783572][ T9791] netlink: 'syz.1.1184': attribute type 9 has an invalid length.
[  167.810882][ T9791] netlink: 'syz.1.1184': attribute type 6 has an invalid length.
[  167.912423][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'.
[  168.169720][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  168.243438][ T9829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.890063][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  168.953213][ T9868] lo speed is unknown, defaulting to 1000
[  169.486467][ T9892] Cannot find del_set index 4 as target
[  169.739391][ T9904] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  169.978566][ T9916] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  169.987539][ T9872] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  170.081502][ T9916] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  170.136821][ T9868] ebtables: ebtables: counters copy to user failed while replacing table
[  170.259154][ T9942] netlink: 'syz.2.1219': attribute type 3 has an invalid length.
[  170.572265][ T9954] openvswitch: netlink: nsh attr 12484 is out of range max 3
[  170.752398][ T9955] netlink: 'syz.4.1223': attribute type 10 has an invalid length.
[  170.814907][ T9963] netlink: 'syz.2.1225': attribute type 11 has an invalid length.
[  170.924208][ T9966] lo speed is unknown, defaulting to 1000
[  171.010683][ T9970] syz.2.1227[9970] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  171.010832][ T9970] syz.2.1227[9970] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  171.340519][ T9988] netlink: 'syz.1.1232': attribute type 1 has an invalid length.
[  171.363798][ T9988] __nla_validate_parse: 14 callbacks suppressed
[  171.387458][ T9988] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1232'.
[  171.411949][ T9988] ax25_connect(): syz.1.1232 uses autobind, please contact jreuter@yaina.de
[  172.814557][T10026] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1240'.
[  173.189425][T10034] vlan0: entered promiscuous mode
[  173.225849][T10034] veth1: entered promiscuous mode
[  173.378033][ T6198] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  173.404535][T10052] sock: sock_set_timeout: `syz.1.1247' (pid 10052) tries to set negative timeout
[  173.810098][T10078] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1252'.
[  173.819526][T10076] lo speed is unknown, defaulting to 1000
[  173.847619][T10085] netlink: 'syz.3.1254': attribute type 1 has an invalid length.
[  173.866425][T10085] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.1254'.
[  173.895914][T10085] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1254'.
[  173.942453][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'.
[  174.100201][T10099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.203879][T10113] x_tables: unsorted underflow at hook 3
[  174.221583][T10112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1260'.
[  174.244115][T10112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1260'.
[  174.318300][T10108] lo speed is unknown, defaulting to 1000
[  174.631508][T10128] netlink: 'syz.0.1264': attribute type 7 has an invalid length.
[  174.648129][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.783159][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1267'.
[  175.564951][T10180] netlink: 'syz.2.1279': attribute type 1 has an invalid length.
[  175.855947][T10194] openvswitch: netlink: Key type 6159 is out of range max 32
[  176.146842][T10203] netlink: 393 bytes leftover after parsing attributes in process `syz.3.1285'.
[  176.391451][T10219] netlink: 'syz.2.1289': attribute type 32 has an invalid length.
[  176.436290][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'.
[  176.459221][T10219] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  176.529360][T10232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1290'.
[  176.555960][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1290'.
[  176.616841][T10221] netlink: 'syz.4.1290': attribute type 10 has an invalid length.
[  176.691367][T10221] team0: Port device dummy0 added
[  176.776589][T10242] Bluetooth: hci3: invalid length 0, exp 2 for type 0
[  176.946784][T10270] netlink: 'syz.3.1302': attribute type 1 has an invalid length.
[  177.046412][T10271] netlink: 'syz.1.1300': attribute type 3 has an invalid length.
[  177.076527][T10271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'.
[  177.091308][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1300'.
[  177.136116][T10271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.201436][T10273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1302'.
[  177.246373][T10273] bridge_slave_1: left allmulticast mode
[  177.252198][T10273] bridge_slave_1: left promiscuous mode
[  177.264304][T10273] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.383496][T10301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1308'.
[  177.571113][T10317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1311'.
[  177.580727][T10317] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1311'.
[  177.666272][T10320] sock: sock_set_timeout: `syz.0.1312' (pid 10320) tries to set negative timeout
[  177.981191][T10330] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1316'.
[  178.202154][T10357] netlink: 'syz.1.1321': attribute type 23 has an invalid length.
[  178.344436][T10365] xt_bpf: check failed: parse error
[  178.360931][T10363] netlink: 'syz.3.1323': attribute type 1 has an invalid length.
[  178.423044][T10365] IPVS: Unknown mcast interface: vlan1
[  178.474836][T10368] delete_channel: no stack
[  179.138532][   T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  179.189046][T10423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.250943][T10427] netlink: 'syz.3.1342': attribute type 1 has an invalid length.
[  179.264122][T10428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.296993][T10423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.754952][T10449] netlink: 'syz.3.1347': attribute type 10 has an invalid length.
[  179.789701][T10449] team0: Port device dummy0 added
[  179.975546][T10459] lo speed is unknown, defaulting to 1000
[  180.417040][   T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  180.559204][T10483] netlink: 'syz.3.1353': attribute type 1 has an invalid length.
[  180.568008][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  180.598305][T10483] netlink: 'syz.3.1353': attribute type 3 has an invalid length.
[  181.112069][T10524] openvswitch: netlink: Missing key (keys=20040, expected=2000)
[  181.124788][T10524] netlink: 'syz.1.1365': attribute type 8 has an invalid length.
[  181.174952][T10526] macvlan0: entered allmulticast mode
[  181.195424][T10526] veth1_vlan: entered allmulticast mode
[  181.206816][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  181.212918][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  181.221271][ T5238] Bluetooth: hci3: command 0x0406 tx timeout
[  181.568131][T10548] __nla_validate_parse: 15 callbacks suppressed
[  181.568150][T10548] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1369'.
[  181.683645][T10552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'.
[  181.761771][T10553] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1369'.
[  181.826566][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1373'.
[  181.928913][T10561] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.1373'.
[  181.951389][T10561] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  182.248016][T10590] netlink: 'syz.2.1380': attribute type 4 has an invalid length.
[  182.305204][T10590] netlink: 'syz.2.1380': attribute type 4 has an invalid length.
[  182.489683][T10603] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  182.526800][T10609] pimreg: entered allmulticast mode
[  182.540868][T10609] pimreg: left allmulticast mode
[  183.098206][T10628] netlink: zone id is out of range
[  183.113339][T10628] netlink: set zone limit has 4 unknown bytes
[  183.830055][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1396'.
[  184.028056][T10668] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1397'.
[  184.051282][T10668] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  184.094909][T10670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1398'.
[  184.148528][T10670] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  184.167936][T10670] batadv_slave_1: entered promiscuous mode
[  184.224029][T10670] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  184.245235][T10670] Cannot create hsr debugfs directory
[  184.318529][T10689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1403'.
[  184.346903][T10689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1403'.
[  184.413201][T10688] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000
[  184.432134][T10682] syzkaller1: entered promiscuous mode
[  184.438379][T10682] syzkaller1: entered allmulticast mode
[  184.516446][T10699] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  184.637895][T10710] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  184.660452][T10710] netlink: 'syz.3.1408': attribute type 13 has an invalid length.
[  184.671462][T10710] netlink: 'syz.3.1408': attribute type 16 has an invalid length.
[  184.679569][T10710] netlink: 'syz.3.1408': attribute type 17 has an invalid length.
[  184.792650][T10714] tipc: Enabled bearer <udp:syz2>, priority 10
[  184.805394][T10714] tipc: Disabling bearer <udp:syz2>
[  184.885645][T10719] xt_TCPMSS: Only works on TCP SYN packets
[  184.894307][   T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  185.014329][T10723] lo speed is unknown, defaulting to 1000
[  185.342886][T10737] netlink: 'syz.4.1417': attribute type 1 has an invalid length.
[  185.365176][T10737] netlink: 'syz.4.1417': attribute type 1 has an invalid length.
[  185.398153][T10725] lo speed is unknown, defaulting to 1000
[  185.595890][   T29] audit: type=1107 audit(1722844015.879:3): pid=10748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='zn₯₯ΒΫΖ™―Δ*œ°�±{b ΟΠγ©G§w@\ώJΥ?„΅)+Ψ
='l@ŒΊκy+ω!ζςwΪΙΟR,Η0 9i¦.Έί‰ν;g°ΥΣΛKθόαŒk…ΖZ˜†c	ν7(Ο³'
[  185.667410][T10747] xt_CT: You must specify a L4 protocol and not use inversions on it
[  186.064194][T10776] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  186.169967][   T63] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  186.380959][T10791] 
: renamed from ipvlan1
[  186.686974][T10797] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.856979][T10801] __nla_validate_parse: 13 callbacks suppressed
[  186.856999][T10801] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1434'.
[  186.879551][T10801] unsupported nlmsg_type 40
[  186.973373][T10807] netlink: 'syz.0.1436': attribute type 2 has an invalid length.
[  186.983053][T10807] netlink: 'syz.0.1436': attribute type 1 has an invalid length.
[  187.076539][T10810] --map-set only usable from mangle table
[  187.532283][T10849] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  187.563958][T10849] x_tables: ip_tables: osf match: only valid for protocol 6
[  187.648243][T10854] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1450'.
[  187.962655][T10883] netlink: 'syz.2.1458': attribute type 2 has an invalid length.
[  188.087470][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'.
[  188.106605][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1461'.
[  188.116597][T10892] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  188.456564][T10920] xt_policy: too many policy elements
[  189.020814][T10948] lo speed is unknown, defaulting to 1000
[  189.313669][T10956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1477'.
[  189.383698][ T5278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  189.560164][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'.
[  189.584518][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'.
[  189.593917][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'.
[  189.603203][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'.
[  189.612808][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'.
[  189.650366][T10967] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  189.663559][T10967] bridge0: entered allmulticast mode
[  189.926534][T10985] netlink: 'syz.4.1487': attribute type 10 has an invalid length.
[  189.967252][T10985] 8021q: adding VLAN 0 to HW filter on device team0
[  189.984601][T10985] bond0: (slave team0): Enslaving as an active interface with an up link
[  190.007645][   T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  190.027593][T10985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  190.052375][T10985] netlink: 'syz.4.1487': attribute type 10 has an invalid length.
[  190.072454][T10985] bond0: (slave team0): Releasing backup interface
[  190.083178][T10985] bridge0: port 3(team0) entered blocking state
[  190.090695][T10985] bridge0: port 3(team0) entered disabled state
[  190.097273][T10985] team0: entered allmulticast mode
[  190.102515][T10985] team_slave_1: entered allmulticast mode
[  190.109300][T10985] dummy0: entered allmulticast mode
[  190.115609][T10985] team0: entered promiscuous mode
[  190.120733][T10985] team_slave_1: entered promiscuous mode
[  190.126700][T10985] dummy0: entered promiscuous mode
[  190.333538][T11006] gtp0: entered promiscuous mode
[  190.340925][T11006] gtp0: entered allmulticast mode
[  190.651745][T11014] xt_CT: You must specify a L4 protocol and not use inversions on it
[  190.922992][T11024] sit0: entered promiscuous mode
[  190.956870][T11024] netlink: 'syz.2.1497': attribute type 1 has an invalid length.
[  191.302528][T11046] bridge0: entered promiscuous mode
[  191.316690][T11045] bridge0: left promiscuous mode
[  191.614841][T11071] ΙΆΖ£0GCTw
: entered promiscuous mode
[  191.680954][T11071] ΙΆΖ£0GC¦: entered promiscuous mode
[  191.927161][ T6199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  192.115548][T11091] __nla_validate_parse: 40 callbacks suppressed
[  192.115567][T11091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1512'.
[  192.193770][T11094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1512'.
[  192.245098][T10953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.388852][T11101] No such timeout policy "syz0"
[  192.402504][T11104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1516'.
[  192.877407][T11137] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  192.999727][T11143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  193.368049][T11164] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1535'.
[  193.399337][T11162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1534'.
[  193.409729][T11164] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  193.415948][T11162] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1534'.
[  193.478264][T11166] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1534'.
[  193.499224][T11166] ipt_REJECT: TCP_RESET invalid for non-tcp
[  193.633536][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1538'.
[  193.813797][T11194] netlink: 'syz.1.1544': attribute type 32 has an invalid length.
[  193.821792][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'.
[  193.836733][T11194] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  194.277792][T11215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1549'.
[  194.347485][T11214] ipt_REJECT: TCP_RESET invalid for non-tcp
[  194.551498][T11218] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  194.888824][T11233] netlink: 'syz.1.1554': attribute type 21 has an invalid length.
[  194.908099][T11231] netlink: 'syz.1.1554': attribute type 1 has an invalid length.
[  194.934496][T11231] netlink: 'syz.1.1554': attribute type 1 has an invalid length.
[  194.989661][T11231] netlink: 'syz.1.1554': attribute type 2 has an invalid length.
[  195.267576][T11250] syzkaller0: entered promiscuous mode
[  195.308700][T11250] syzkaller0 (unregistering): left promiscuous mode
[  195.348781][T11258] netlink: 'syz.0.1560': attribute type 8 has an invalid length.
[  195.379203][T11255] netlink: 'syz.3.1561': attribute type 1 has an invalid length.
[  195.392564][T11255] netlink: 'syz.3.1561': attribute type 2 has an invalid length.
[  195.522153][T11267] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms
[  195.764075][T11283] vxcan0: entered promiscuous mode
[  195.771068][ T6199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  195.774676][T11283] vlan1: entered promiscuous mode
[  195.788426][T11283] vxcan0: left promiscuous mode
[  196.108229][T11303] netlink: 'syz.2.1574': attribute type 11 has an invalid length.
[  196.238584][T11314] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  196.759516][T11352] openvswitch: netlink: Tunnel attr 11525 out of range max 16
[  196.991985][T11361] netlink: 'syz.1.1589': attribute type 10 has an invalid length.
[  197.011989][T11361] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  197.027503][T11361] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  197.253199][T11371] __nla_validate_parse: 17 callbacks suppressed
[  197.253220][T11371] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1591'.
[  197.503436][T11378] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1595'.
[  197.604664][T11382] pimreg: entered allmulticast mode
[  197.612533][T11382] pimreg: left allmulticast mode
[  197.687586][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  198.049519][T11387] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1597'.
[  198.063678][T11387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1597'.
[  198.161690][T11391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1599'.
[  198.420842][   T29] audit: type=1107 audit(1722844028.709:4): pid=11407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­:δ˜εΨΤY$ψΙψμnJšπ5…£Υέ9Iΰcc}·Φ¨“Vδ}L(‡šΏΞ€Oι*?Sύ\H€SsdΔΘˆωLβ©Y۞‚ΣD|·Uςͺ
sH;‰Ισ='
[  198.691047][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1603'.
[  199.169692][T11441] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1610'.
[  199.185082][T11441] netlink: 'syz.2.1610': attribute type 1 has an invalid length.
[  199.192927][T11441] netlink: 'syz.2.1610': attribute type 2 has an invalid length.
[  199.201949][T11441] netlink: 'syz.2.1610': attribute type 2 has an invalid length.
[  199.210413][T11441] netlink: 'syz.2.1610': attribute type 2 has an invalid length.
[  199.218301][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1610'.
[  199.992426][T11412] bridge0: left allmulticast mode
[  200.006091][T11417] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.013200][T11417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.022133][T11417] bridge0: entered promiscuous mode
[  200.047579][T11417] bridge0: entered allmulticast mode
[  200.055096][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1603'.
[  200.064421][T11421] netlink: 'syz.3.1603': attribute type 18 has an invalid length.
[  200.080830][T11421] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  200.089810][T11421] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  200.098838][T11421] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  200.107585][T11421] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  200.122813][T11421] vxlan0: entered promiscuous mode
[  200.140255][T11427] netlink: 'syz.4.1606': attribute type 32 has an invalid length.
[  200.158951][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'.
[  200.196048][T11427] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  200.205092][T11427] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  200.269404][T11442] bond0: entered promiscuous mode
[  200.283843][T11442] bond_slave_0: entered promiscuous mode
[  200.304031][T11442] bond_slave_1: entered promiscuous mode
[  200.382735][T11443] bond0: (slave bond_slave_0): Releasing backup interface
[  200.392346][T11443] bond_slave_0: left promiscuous mode
[  200.423712][T11443] bond0: (slave bond_slave_1): Releasing backup interface
[  200.428065][T11463] x_tables: duplicate underflow at hook 1
[  200.439333][T11443] bond_slave_1: left promiscuous mode
[  200.460769][T11443] team_slave_0: left promiscuous mode
[  200.492794][T11443] team0: Port device team_slave_0 removed
[  200.517770][T11443] team_slave_1: left promiscuous mode
[  200.545610][T11443] team0: Port device team_slave_1 removed
[  200.552874][T11443] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.560383][T11443] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.588261][T11444] bond0: left promiscuous mode
[  200.594787][T11444] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.611663][T11444] bond0: entered promiscuous mode
[  200.620078][T11444] team0: Port device bond0 added
[  200.644562][T11457] netlink: 'syz.4.1613': attribute type 4 has an invalid length.
[  200.892173][T11491] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0
[  201.030769][T11499] netlink: 'syz.2.1625': attribute type 9 has an invalid length.
[  201.528637][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  201.866286][T11517] netlink: 'syz.1.1631': attribute type 21 has an invalid length.
[  201.946361][T11520] lo speed is unknown, defaulting to 1000
[  202.080983][T11521] netlink: 'syz.3.1632': attribute type 10 has an invalid length.
[  202.200497][T11521] 8021q: adding VLAN 0 to HW filter on device team0
[  202.250138][T11521] bond0: (slave team0): Enslaving as an active interface with an up link
[  202.282287][T11527] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  202.318363][T11523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.810668][ T2905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  203.478179][T11609] __nla_validate_parse: 9 callbacks suppressed
[  203.478198][T11609] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1656'.
[  203.524325][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1656'.
[  204.266370][T11639] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  204.291320][T11639] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  204.314181][T11644] validate_nla: 5 callbacks suppressed
[  204.314197][T11644] netlink: 'syz.2.1666': attribute type 4 has an invalid length.
[  204.332546][T11641] lo speed is unknown, defaulting to 1000
[  204.360566][T11644] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1666'.
[  204.429634][T11644] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  204.493196][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'.
[  204.547175][T11647] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1667'.
[  204.565468][T11647] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  204.631221][ T8630] tipc: Resetting bearer <eth:vlan0>
[  204.966908][T11643] lo speed is unknown, defaulting to 1000
[  205.136712][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'.
[  205.598383][T11692] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1672'.
[  205.828566][T11702] netlink: 'syz.4.1677': attribute type 10 has an invalid length.
[  205.864975][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'.
[  205.886130][T11702] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.1677'.
[  205.912039][T11702] openvswitch: netlink: Flow key attr not present in new flow.
[  205.920568][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1676'.
[  205.990994][T11709] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  206.231133][T11720] bridge_slave_0: entered promiscuous mode
[  206.434609][T11735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  206.638417][T11747] netlink: 'syz.0.1689': attribute type 10 has an invalid length.
[  206.802839][T11758] netlink: 'syz.4.1690': attribute type 15 has an invalid length.
[  207.288313][   T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  207.330155][T11764] netlink: 'syz.3.1693': attribute type 1 has an invalid length.
[  207.765233][T11786] netlink: 'syz.2.1696': attribute type 1 has an invalid length.
[  207.984544][T11794] bond3: (slave gretap1): making interface the new active one
[  207.993659][T11794] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  208.002905][T11793] netem: change failed
[  208.486770][ T5244] Bluetooth: hci4: command 0x0419 tx timeout
[  208.538137][T11820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.567493][ T6200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  208.800610][T11851] __nla_validate_parse: 5 callbacks suppressed
[  208.800629][T11851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1715'.
[  208.854589][   T29] audit: type=1107 audit(1722844039.139:5): pid=11852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='­:δ˜εΨΤY$ψΙψμnJšπ5…£Υέ9Iΰcc}·Φ¨“Vδ}L(‡šΏΞ€Oι*?Sύ\H€SsdΔΘˆωLβ©Y۞‚ΣD|·Uςͺ
sH;‰Ισ='
[  209.190209][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1725'.
[  209.200404][T11872] netlink: 'syz.4.1725': attribute type 63 has an invalid length.
[  209.217743][T11872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1725'.
[  209.240499][T11876] netlink: 'syz.1.1724': attribute type 3 has an invalid length.
[  209.859481][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'.
[  209.870214][T11931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1739'.
[  209.893702][T11934] netlink: 'syz.2.1738': attribute type 10 has an invalid length.
[  209.933310][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'.
[  210.030429][T11939] netlink: 'syz.4.1742': attribute type 1 has an invalid length.
[  210.053938][T11939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1742'.
[  210.075870][T11939] netlink: 'syz.4.1742': attribute type 8 has an invalid length.
[  210.219710][T11955] tipc: Failed to remove unknown binding: 66,1,1/0:4145637305/4145637307
[  210.251019][T11955] tipc: Failed to remove unknown binding: 66,1,1/0:4145637305/4145637307
[  210.494850][T11977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.565938][ T5236] Bluetooth: hci4: command 0x0419 tx timeout
[  210.631479][T11983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.777451][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'.
[  210.790209][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1759'.
[  210.812740][T11990] ipvlan1: entered allmulticast mode
[  210.899818][T11999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1756'.
[  211.150449][T12008] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  211.347273][T12016] macvlan2: entered promiscuous mode
[  211.358019][T12016] macvlan2: entered allmulticast mode
[  211.363930][T12016] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  211.375220][T12016] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  211.386524][T12016] team0: Port device macvlan2 added
[  211.449064][T12021] delete_channel: no stack
[  211.512667][T12023] netlink: 'syz.3.1767': attribute type 13 has an invalid length.
[  211.523363][T12023] veth0_macvtap: left promiscuous mode
[  211.531048][T12023] macvtap0: entered allmulticast mode
[  211.546557][T12023] macvtap0: refused to change device tx_queue_len
[  211.760139][T12037] xt_connbytes: Forcing CT accounting to be enabled
[  212.888233][T12096] ebt_among: dst integrity fail: 200
[  212.893845][T12095] ebt_among: dst integrity fail: 200
[  213.046294][ T6202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  213.178011][T12118] netlink: 'syz.0.1797': attribute type 1 has an invalid length.
[  213.467785][T12137] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma?
[  213.818567][T12165] __nla_validate_parse: 8 callbacks suppressed
[  213.818586][T12165] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1812'.
[  214.128458][T12187] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (64)
[  214.301350][T12191] tipc: New replicast peer: 255.255.255.255
[  214.312063][T12191] tipc: Enabled bearer <udp:s>, priority 10
[  214.330349][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  214.891006][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'.
[  214.932165][T12226] netlink: 'syz.4.1829': attribute type 2 has an invalid length.
[  214.953319][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'.
[  215.054559][T12232] smc: net device lo applied user defined pnetid SYZ2
[  215.064604][T12232] smc: net device lo erased user defined pnetid SYZ2
[  215.165448][T12238] netlink: 'syz.3.1834': attribute type 9 has an invalid length.
[  215.174021][T12238] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1834'.
[  215.438236][T12258] FAULT_INJECTION: forcing a failure.
[  215.438236][T12258] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  215.458296][T12258] CPU: 0 UID: 0 PID: 12258 Comm: syz.2.1839 Not tainted 6.11.0-rc1-syzkaller-00247-g3608d6aca5e7 #0
[  215.464982][T12260] xt_l2tp: v2 sid > 0xffff: 16777216
[  215.469065][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  215.469082][T12258] Call Trace:
[  215.469091][T12258]  <TASK>
[  215.469100][T12258]  dump_stack_lvl+0x241/0x360
[  215.469133][T12258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  215.469157][T12258]  ? __pfx__printk+0x10/0x10
[  215.469182][T12258]  ? __pfx_lock_release+0x10/0x10
[  215.469208][T12258]  ? vfs_write+0x7c4/0xc90
[  215.469234][T12258]  should_fail_ex+0x3b0/0x4e0
[  215.469266][T12258]  _copy_from_user+0x2f/0xe0
[  215.469289][T12258]  __sys_bpf+0x1a4/0x810
[  215.469314][T12258]  ? __pfx___sys_bpf+0x10/0x10
[  215.469350][T12258]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  215.469377][T12258]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  215.469402][T12258]  ? do_syscall_64+0x100/0x230
[  215.550011][T12258]  __x64_sys_bpf+0x7c/0x90
[  215.554458][T12258]  do_syscall_64+0xf3/0x230
[  215.558985][T12258]  ? clear_bhb_loop+0x35/0x90
[  215.563679][T12258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.569597][T12258] RIP: 0033:0x7f84c9d779f9
[  215.574027][T12258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  215.586473][T12263] vlan1: entered promiscuous mode
[  215.593626][T12258] RSP: 002b:00007f84caab1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  215.593654][T12258] RAX: ffffffffffffffda RBX: 00007f84c9f05f80 RCX: 00007f84c9d779f9
[  215.593668][T12258] RDX: 0000000000000090 RSI: 0000000020000200 RDI: 0000000000000005
[  215.593680][T12258] RBP: 00007f84caab10a0 R08: 0000000000000000 R09: 0000000000000000
[  215.593692][T12258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.593704][T12258] R13: 000000000000004d R14: 00007f84c9f05f80 R15: 00007fffd386cc98
[  215.607281][T12263] team0: Device vlan1 is already an upper device of the team interface
[  215.615062][T12258]  </TASK>
[  215.673383][T12265] syzkaller1: entered promiscuous mode
[  215.703158][T12265] syzkaller1: entered allmulticast mode
[  215.809673][T12276] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1845'.
[  216.054580][T12295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1849'.
[  216.069727][T12295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1849'.
[  216.164310][T12299] netlink: 'syz.1.1852': attribute type 1 has an invalid length.
[  216.170738][T12302] netlink: 'syz.2.1853': attribute type 12 has an invalid length.
[  216.187470][T12302] netlink: 'syz.2.1853': attribute type 10 has an invalid length.
[  216.202744][T12302] team0: left promiscuous mode
[  216.213935][T12302] bond0: left promiscuous mode
[  216.251219][T12302] batman_adv: batadv0: Adding interface: team0
[  216.278680][T12302] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.310738][T12302] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  216.337496][T12304] netlink: 'syz.2.1853': attribute type 10 has an invalid length.
[  216.347700][T12304] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1853'.
[  216.360063][T12304] team0: entered promiscuous mode
[  216.365183][T12304] bond0: entered promiscuous mode
[  216.371397][T12304] 8021q: adding VLAN 0 to HW filter on device team0
[  216.380272][T12304] batman_adv: batadv0: Interface activated: team0
[  216.387484][T12304] batman_adv: batadv0: Interface deactivated: team0
[  216.394921][T12304] batman_adv: batadv0: Removing interface: team0
[  216.424794][T12314] netlink: 'syz.4.1857': attribute type 2 has an invalid length.
[  216.442754][T12314] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1857'.
[  216.686653][T12326] atomic_op ffff88802cea7998 conn xmit_atomic 0000000000000000
[  216.739541][T12331] geneve0: invalid flags given to default FDB implementation
[  216.821744][T12341] netlink: 'syz.1.1865': attribute type 4 has an invalid length.
[  216.852583][T12347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1864'.
[  216.954778][T12346] lo speed is unknown, defaulting to 1000
[  217.907037][    T9] IPVS: starting estimator thread 0...
[  218.015884][T12389] IPVS: using max 16 ests per chain, 38400 per kthread
[  218.090875][T12398] netlink: 'syz.3.1882': attribute type 10 has an invalid length.
[  218.294713][T12417] xt_CT: You must specify a L4 protocol and not use inversions on it
[  218.808981][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  218.898990][T12453] xt_hashlimit: max too large, truncated to 1048576
[  218.938353][T12456] __nla_validate_parse: 3 callbacks suppressed
[  218.938376][T12456] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1895'.
[  218.969184][T12456] team0: left allmulticast mode
[  218.984062][T12456] team_slave_1: left allmulticast mode
[  218.999495][T12456] dummy0: left allmulticast mode
[  219.002569][T12462] netlink: 'syz.0.1897': attribute type 2 has an invalid length.
[  219.009634][T12456] team0: left promiscuous mode
[  219.015067][T12462] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1897'.
[  219.033313][T12462] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1897'.
[  219.039971][T12456] team_slave_1: left promiscuous mode
[  219.061668][T12456] dummy0: left promiscuous mode
[  219.067924][T12456] bridge0: port 3(team0) entered disabled state
[  219.085400][T12456] bridge_slave_1: left allmulticast mode
[  219.091371][T12456] bridge_slave_1: left promiscuous mode
[  219.098165][T12456] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.112222][T12456] bridge_slave_0: left allmulticast mode
[  219.119306][T12456] bridge_slave_0: left promiscuous mode
[  219.125548][T12456] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.207394][T12477] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  219.304944][T12481] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1902'.
[  219.345083][T12481] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1902'.
[  219.355156][T12481] caif0: entered allmulticast mode
[  219.453398][ T6203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.476761][T12494] Bluetooth: hci3: unsupported parameter 64512
[  219.483380][T12494] Bluetooth: hci3: invalid length 0, exp 2 for type 5
[  219.494285][T12494] Bluetooth: hci3: unsupported parameter 64512
[  219.504931][T12494] Bluetooth: hci3: invalid length 0, exp 2 for type 5
[  219.580738][T12498] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1908'.
[  219.871884][T12520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1916'.
[  219.934637][T12520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.045549][T12536] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1920'.
[  220.097050][ T5228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  220.141964][T12544] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1924'.
[  220.191035][T12545] validate_nla: 4 callbacks suppressed
[  220.191149][T12545] netlink: 'syz.1.1923': attribute type 10 has an invalid length.
[  220.206785][ T8630] tipc: Node number set to 2886997162
[  220.310896][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'.
[  220.439298][T12563] x_tables: unsorted underflow at hook 3
[  220.554038][T12571] netlink: 'syz.4.1932': attribute type 13 has an invalid length.
[  220.562795][T12571] veth0_macvtap: left promiscuous mode
[  220.576632][T12571] macvtap0: entered allmulticast mode
[  220.609707][T12571] macvtap0: refused to change device tx_queue_len
[  221.261962][T12608] xt_CONNSECMARK: invalid mode: 0
[  221.262557][T12613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.282756][T12608] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT
[  221.318985][T12614] netlink: 'syz.0.1945': attribute type 16 has an invalid length.
[  221.331796][T12614] netlink: 'syz.0.1945': attribute type 17 has an invalid length.
[  221.481252][T12624] netlink: 'syz.4.1947': attribute type 8 has an invalid length.
[  221.569996][T12626] syz.1.1948: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  221.589415][T12628] xt_CT: You must specify a L4 protocol and not use inversions on it
[  221.602949][T12626] CPU: 0 UID: 0 PID: 12626 Comm: syz.1.1948 Not tainted 6.11.0-rc1-syzkaller-00247-g3608d6aca5e7 #0
[  221.613739][T12626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  221.623806][T12626] Call Trace:
[  221.627097][T12626]  <TASK>
[  221.630040][T12626]  dump_stack_lvl+0x241/0x360
[  221.634750][T12626]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.639970][T12626]  ? __pfx__printk+0x10/0x10
[  221.644591][T12626]  ? __rcu_read_unlock+0xa1/0x110
[  221.649641][T12626]  warn_alloc+0x278/0x410
[  221.653994][T12626]  ? stack_depot_save_flags+0x29/0x830
[  221.659473][T12626]  ? __vmalloc_node_range_noprof+0x10b/0x1460
[  221.665557][T12626]  ? __pfx_warn_alloc+0x10/0x10
[  221.670433][T12626]  ? kasan_save_track+0x3f/0x80
[  221.675305][T12626]  ? __kasan_kmalloc+0x98/0xb0
[  221.680094][T12626]  ? xsk_setsockopt+0x598/0x950
[  221.684962][T12626]  ? do_sock_setsockopt+0x3af/0x720
[  221.690176][T12626]  ? __sys_setsockopt+0x1ae/0x250
[  221.695202][T12626]  ? __x64_sys_setsockopt+0xb5/0xd0
[  221.700418][T12626]  ? do_syscall_64+0xf3/0x230
[  221.705101][T12626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.711169][T12626]  __vmalloc_node_range_noprof+0x130/0x1460
[  221.717066][T12626]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  221.723379][T12626]  ? __kasan_kmalloc+0x98/0xb0
[  221.728130][T12626]  ? xskq_create+0x54/0x170
[  221.732622][T12626]  vmalloc_user_noprof+0x74/0x80
[  221.737541][T12626]  ? xskq_create+0xb6/0x170
[  221.742029][T12626]  xskq_create+0xb6/0x170
[  221.746354][T12626]  xsk_init_queue+0xa1/0x100
[  221.750941][T12626]  xsk_setsockopt+0x598/0x950
[  221.755607][T12626]  ? __pfx_xsk_setsockopt+0x10/0x10
[  221.760797][T12626]  ? __pfx_lock_acquire+0x10/0x10
[  221.765816][T12626]  ? aa_sock_opt_perm+0x79/0x120
[  221.770741][T12626]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  221.776276][T12626]  ? security_socket_setsockopt+0x87/0xb0
[  221.781984][T12626]  ? __pfx_xsk_setsockopt+0x10/0x10
[  221.787166][T12626]  do_sock_setsockopt+0x3af/0x720
[  221.792183][T12626]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  221.797716][T12626]  ? __fget_files+0x29/0x470
[  221.802295][T12626]  ? __fget_files+0x3f6/0x470
[  221.806980][T12626]  __sys_setsockopt+0x1ae/0x250
[  221.811841][T12626]  __x64_sys_setsockopt+0xb5/0xd0
[  221.816864][T12626]  do_syscall_64+0xf3/0x230
[  221.821355][T12626]  ? clear_bhb_loop+0x35/0x90
[  221.826017][T12626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.831896][T12626] RIP: 0033:0x7fb2dbb779f9
[  221.836295][T12626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.855895][T12626] RSP: 002b:00007fb2dc86f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  221.864317][T12626] RAX: ffffffffffffffda RBX: 00007fb2dbd05f80 RCX: 00007fb2dbb779f9
[  221.872274][T12626] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004
[  221.880227][T12626] RBP: 00007fb2dbbe58ee R08: 0000000000000004 R09: 0000000000000000
[  221.888178][T12626] R10: 0000000020000900 R11: 0000000000000246 R12: 0000000000000000
[  221.896129][T12626] R13: 000000000000000b R14: 00007fb2dbd05f80 R15: 00007ffe50ff45c8
[  221.904093][T12626]  </TASK>
[  221.910473][T12626] Mem-Info:
[  221.913627][T12626] active_anon:3917 inactive_anon:0 isolated_anon:0
[  221.913627][T12626]  active_file:1586 inactive_file:38198 isolated_file:0
[  221.913627][T12626]  unevictable:768 dirty:171 writeback:0
[  221.913627][T12626]  slab_reclaimable:9932 slab_unreclaimable:102204
[  221.913627][T12626]  mapped:20780 shmem:1260 pagetables:674
[  221.913627][T12626]  sec_pagetables:0 bounce:0
[  221.913627][T12626]  kernel_misc_reclaimable:0
[  221.913627][T12626]  free:1382812 free_pcp:562 free_cma:0
[  221.973592][T12626] Node 0 active_anon:15668kB inactive_anon:0kB active_file:6344kB inactive_file:152704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:83120kB dirty:680kB writeback:0kB shmem:3504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11240kB pagetables:2696kB sec_pagetables:0kB all_unreclaimable? no
[  222.056155][T12626] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  222.141938][T12626] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  222.196136][T12626] lowmem_reserve[]: 0 2561 2562 0 0
[  222.204864][T12626] Node 0 DMA32 free:1567680kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:15344kB inactive_anon:0kB active_file:6344kB inactive_file:151400kB unevictable:1536kB writepending:736kB present:3129332kB managed:2651252kB mlocked:0kB bounce:0kB free_pcp:2640kB local_pcp:1136kB free_cma:0kB
[  222.240871][T12626] lowmem_reserve[]: 0 0 1 0 0
[  222.246714][T12626] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB
[  222.275030][T12626] lowmem_reserve[]: 0 0 0 0 0
[  222.280485][T12626] Node 1 Normal free:3947760kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  222.312590][T12626] lowmem_reserve[]: 0 0 0 0 0
[  222.326304][T12626] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  222.341274][T12654] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  222.362355][T12626] Node 0 DMA32: 12*4kB (U) 226*8kB (UME) 73*16kB (UME) 87*32kB (UME) 370*64kB (UME) 261*128kB (UM) 187*256kB (UM) 114*512kB (UME) 55*1024kB (UM) 3*2048kB (UM) 326*4096kB (UM) = 1566896kB
[  222.469586][T12626] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  222.495506][T12626] Node 1 Normal: 2*4kB (U) 7*8kB (UM) 11*16kB (UM) 14*32kB (UM) 9*64kB (U) 2*128kB (U) 1*256kB (M) 3*512kB (UM) 2*1024kB (U) 1*2048kB (U) 962*4096kB (M) = 3947760kB
[  222.564908][T12626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  222.593525][T12626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  222.615895][T12626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  222.634472][T12626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  222.653196][T12626] 41015 total pagecache pages
[  222.659126][T12626] 0 pages in swap cache
[  222.663374][T12626] Free swap  = 124996kB
[  222.668029][T12626] Total swap = 124996kB
[  222.672313][T12626] 2097051 pages RAM
[  222.681004][T12626] 0 pages HighMem/MovableOnly
[  222.702948][T12626] 402772 pages reserved
[  222.707312][T12626] 0 pages cma reserved
[  222.884851][T12692] ipt_REJECT: TCP_RESET invalid for non-tcp
[  223.264893][T12714] netlink: 'syz.4.1972': attribute type 15 has an invalid length.
[  223.332684][ T6193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.344819][ T6193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.810939][T12747] 
: renamed from bridge_slave_0 (while UP)
[  223.834558][T12743] x_tables: duplicate underflow at hook 3
[  223.924929][T12751] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32)
[  224.048484][T12756] lo speed is unknown, defaulting to 1000
[  224.571160][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  224.928588][T12796] syzkaller1: entered promiscuous mode
[  224.935976][T12796] syzkaller1: entered allmulticast mode
[  225.011507][T12804] netlink: 'syz.1.1999': attribute type 30 has an invalid length.
[  225.076338][T12805] x_tables: duplicate underflow at hook 2
[  225.133121][T12756] sctp: [Deprecated]: syz.3.1984 (pid 12756) Use of int in maxseg socket option.
[  225.133121][T12756] Use struct sctp_assoc_value instead
[  225.207524][ T6202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  225.507804][T12844] __nla_validate_parse: 11 callbacks suppressed
[  225.507824][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'.
[  225.626369][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'.
[  225.681824][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'.
[  225.930332][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'.
[  226.290680][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2022'.
[  226.752616][T12921] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2030'.
[  226.894832][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'.
[  227.021401][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2032'.
[  227.406147][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'.
[  227.630642][T12984] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2046'.
[  227.684440][T12988] lo speed is unknown, defaulting to 1000
[  228.664732][T13026] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.713048][T13026] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.726810][T13026] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  228.736100][T13026] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  229.331292][T13061] batadv_slave_1: entered promiscuous mode
[  229.426864][T13060] batadv_slave_1: left promiscuous mode
[  229.688757][ T6205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  230.324293][T13122] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  230.372901][T13123] tun1: tun_chr_ioctl cmd 1074025692
[  230.559983][T13138] tap0: tun_chr_ioctl cmd 1074025677
[  230.569622][T13138] tap0: linktype set to 769
[  230.867458][T13155] __nla_validate_parse: 10 callbacks suppressed
[  230.867471][T13155] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2092'.
[  231.230496][T13169] xt_CT: No such helper "snmp"
[  231.242018][T13184] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  231.313914][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2100'.
[  231.349085][T13187] netlink: 'syz.1.2100': attribute type 11 has an invalid length.
[  231.413419][T13187] vxlan1: entered promiscuous mode
[  231.477734][T13192] netlink: 'syz.1.2100': attribute type 8 has an invalid length.
[  231.485491][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'.
[  231.510714][T13197] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2105'.
[  231.522302][T13197] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2105'.
[  231.871295][T13226] netlink: 'syz.0.2113': attribute type 1 has an invalid length.
[  231.900754][T13227] lo speed is unknown, defaulting to 1000
[  231.922755][T13230] team_slave_0: entered allmulticast mode
[  232.193761][T13244] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2119'.
[  232.259509][T13248] netlink: 644 bytes leftover after parsing attributes in process `syz.1.2120'.
[  232.388260][T13250] netlink: 644 bytes leftover after parsing attributes in process `syz.1.2120'.
[  232.563328][T13262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2124'.
[  232.712423][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'.
[  233.167351][T13303] 0·: renamed from hsr0 (while UP)
[  233.174474][T13303] 0·: entered allmulticast mode
[  233.181497][T13303] hsr_slave_0: entered allmulticast mode
[  233.187552][T13303] hsr_slave_1: entered allmulticast mode
[  233.193575][T13303] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  233.210584][T13304] 1·: renamed from 
70· (while UP)
[  233.222439][T13304] A link change request failed with some changes committed already. Interface 
71· may have been left with an inconsistent configuration, please check.
[  233.595596][T13327] netlink: 'syz.2.2140': attribute type 14 has an invalid length.
[  233.776207][T13335] dummy0: entered promiscuous mode
[  233.796543][T13335] veth1: entered promiscuous mode
[  233.817058][T13335] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  233.832621][T13335] Cannot create hsr debugfs directory
[  234.014675][T13357] netlink: 'syz.2.2149': attribute type 66 has an invalid length.
[  234.047190][T13357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.084881][T13350] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  234.148808][T13360] pim6reg: tun_chr_ioctl cmd 1074025677
[  234.155393][T13360] pim6reg: linktype set to 823
[  234.336142][T13372] netlink: 'syz.3.2152': attribute type 24 has an invalid length.
[  234.612963][T13388] netlink: 'syz.3.2157': attribute type 12 has an invalid length.
[  234.929055][T13408] tipc: Started in network mode
[  234.933966][T13408] tipc: Node identity , cluster identity 4711
[  234.945016][T13408] tipc: Failed to set node id, please configure manually
[  234.965181][T13408] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  235.256072][T13432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.354314][T13445] lo speed is unknown, defaulting to 1000
[  235.448104][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  236.110804][T13497] __nla_validate_parse: 13 callbacks suppressed
[  236.110824][T13497] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2184'.
[  236.120761][T13494] netlink: 'syz.1.2183': attribute type 10 has an invalid length.
[  236.140190][T13494] batman_adv: batadv0: Adding interface: team0
[  236.151627][T13494] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  236.705866][T13527] netlink: 'syz.2.2187': attribute type 21 has an invalid length.
[  236.754785][T13527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2187'.
[  237.118088][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2193'.
[  237.164516][T13541] bridge_slave_1: left allmulticast mode
[  237.214491][T13541] bridge_slave_1: left promiscuous mode
[  237.229050][T13541] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.264971][T13541] bridge6: port 1(bridge_slave_1) entered blocking state
[  237.273069][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'.
[  237.282539][T13541] bridge6: port 1(bridge_slave_1) entered disabled state
[  237.301035][T13541] bridge_slave_1: entered allmulticast mode
[  237.321103][T13541] bridge_slave_1: entered promiscuous mode
[  237.336736][T13549] bridge6: port 2(veth1_to_bond) entered blocking state
[  237.376785][T13549] bridge6: port 2(veth1_to_bond) entered disabled state
[  237.383888][T13549] veth1_to_bond: entered allmulticast mode
[  237.409652][T13549] veth1_to_bond: entered promiscuous mode
[  237.419051][T13564] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2196'.
[  237.423829][T13549] bridge6: port 2(veth1_to_bond) entered blocking state
[  237.435111][T13549] bridge6: port 2(veth1_to_bond) entered forwarding state
[  237.460351][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'.
[  237.473331][T13564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2196'.
[  237.854619][T13596] vlan1: entered promiscuous mode
[  237.873588][T13595] vlan1: left promiscuous mode
[  237.954373][T13601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2207'.
[  238.435642][T13628] netlink: 'syz.4.2216': attribute type 1 has an invalid length.
[  238.445551][T13628] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2216'.
[  238.680393][T13642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  238.702576][T13645] x_tables: duplicate underflow at hook 2
[  238.743526][T13642] xt_CT: You must specify a L4 protocol and not use inversions on it
[  238.752888][T13651] netlink: 'syz.1.2222': attribute type 2 has an invalid length.
[  239.233930][T13680] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  239.445206][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2233'.
[  240.844238][T13778] pimreg: left allmulticast mode
[  241.120216][T13797] netlink: 'syz.4.2261': attribute type 7 has an invalid length.
[  241.143060][T13797] netlink: 'syz.4.2261': attribute type 39 has an invalid length.
[  241.189354][T13797] bridge3: port 1(gretap1) entered blocking state
[  241.206821][T13797] bridge3: port 1(gretap1) entered disabled state
[  241.212031][ T6202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  241.216804][T13797] gretap1: entered allmulticast mode
[  241.255093][T13797] gretap1: entered promiscuous mode
[  241.286517][T13811] netlink: 'syz.4.2261': attribute type 7 has an invalid length.
[  241.314660][T13811] netlink: 'syz.4.2261': attribute type 39 has an invalid length.
[  241.347865][T13810] __nla_validate_parse: 100 callbacks suppressed
[  241.347882][T13810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2264'.
[  241.454398][T13819] xt_time: invalid argument - start or stop time greater than 23:59:59
[  241.646074][T13835] x_tables: duplicate underflow at hook 3
[  242.351858][T13873] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2281'.
[  242.796540][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2289'.
[  243.204563][T13915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2293'.
[  243.234714][T13915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2293'.
[  243.247320][T13917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2294'.
[  243.269056][T13915] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  243.282656][T13915] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  243.508158][T13922] Bluetooth: hci3: invalid length 0, exp 2 for type 30
[  243.525137][T13927] tipc: Resetting bearer <eth:vlan0>
[  243.549894][T13928] netlink: 'syz.0.2298': attribute type 11 has an invalid length.
[  243.568011][T13928] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2298'.
[  243.743320][T13940] netlink: 'syz.3.2302': attribute type 11 has an invalid length.
[  243.771313][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2302'.
[  243.838358][T13946] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2304'.
[  243.997560][T13954] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2307'.
[  244.092241][T13954] lo speed is unknown, defaulting to 1000
[  244.946886][T13998] netlink: 'syz.2.2321': attribute type 4 has an invalid length.
[  245.243344][T14007] lo speed is unknown, defaulting to 1000
[  245.427364][T14021] netlink: 'syz.3.2327': attribute type 4 has an invalid length.
[  245.473857][ T5228] IPVS: starting estimator thread 0...
[  245.585982][T14027] IPVS: using max 17 ests per chain, 40800 per kthread
[  245.969240][T14054] netlink: 'syz.2.2337': attribute type 15 has an invalid length.
[  246.039848][T14049] siw: device registration error -23
[  246.284798][T14072] netlink: 'syz.2.2341': attribute type 1 has an invalid length.
[  246.454509][T14083] x_tables: duplicate underflow at hook 1
[  246.521680][T14084] __nla_validate_parse: 9 callbacks suppressed
[  246.521703][T14084] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2344'.
[  246.967276][ T6207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  247.501279][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2361'.
[  247.524666][T14150] netlink: 'syz.1.2361': attribute type 7 has an invalid length.
[  247.526156][T14153] netlink: 'syz.4.2363': attribute type 2 has an invalid length.
[  247.560869][T14150] vxlan1: entered promiscuous mode
[  247.730722][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2365'.
[  247.903884][T14167] IPv6: Can't replace route, no match found
[  247.949993][T14167] netdevsim netdevsim3 netdevsim0: Caught tx_queue_len zero misconfig
[  248.303469][T14199] netdevsim netdevsim4: Direct firmware load for 
 failed with error -2
[  248.319839][T14199] netdevsim netdevsim4: Falling back to sysfs fallback for: 

[  248.387423][T14206] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2376'.
[  248.454793][T14215] netlink: 'syz.2.2377': attribute type 11 has an invalid length.
[  248.490973][T14215] netlink: 211132 bytes leftover after parsing attributes in process `syz.2.2377'.
[  248.544407][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'.
[  248.765434][T14237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2382'.
[  248.846525][T14237] xt_CT: You must specify a L4 protocol and not use inversions on it
[  249.071498][T14254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2388'.
[  249.139027][T14258] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2390'.
[  249.155131][T14254] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  249.201138][T14261] Unsupported ieee802154 address type: 0
[  249.210806][T14253] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2387'.
[  249.217217][T14261] openvswitch: netlink: Duplicate key (type 0).
[  249.231057][T14253] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  249.246068][T14253] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  249.296648][T14266] netlink: 'syz.4.2391': attribute type 15 has an invalid length.
[  249.682833][T14297] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  249.729067][T14300] Can't find ip_set type hasjΚzc
[  249.744333][T14306] netlink: 'syz.1.2400': attribute type 14 has an invalid length.
[  249.817936][T14306] vxlan1: entered promiscuous mode
[  249.876726][T14311] Bluetooth: hci3: too big key_count value 40847
[  250.377195][T14332] netlink: 'syz.3.2410': attribute type 5 has an invalid length.
[  250.634976][T14335] ipt_REJECT: TCP_RESET invalid for non-tcp
[  250.695142][T14343] IPVS: Unknown mcast interface: nr0
[  250.894917][T14350] netlink: 'syz.2.2415': attribute type 1 has an invalid length.
[  251.097362][T14356] lo speed is unknown, defaulting to 1000
[  251.363669][T14364] netlink: 'syz.3.2419': attribute type 4 has an invalid length.
[  251.818401][T14381] __nla_validate_parse: 9 callbacks suppressed
[  251.818422][T14381] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2423'.
[  251.874649][T14378] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2423'.
[  251.909544][T14378] ipt_REJECT: TCP_RESET invalid for non-tcp
[  252.083240][T14389] ip6tnl2: entered promiscuous mode
[  252.103107][T14389] ip6tnl2: entered allmulticast mode
[  252.187790][T14393] netlink: 'syz.2.2426': attribute type 2 has an invalid length.
[  252.195565][T14393] netlink: 'syz.2.2426': attribute type 8 has an invalid length.
[  252.248657][T14393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2426'.
[  252.324462][T14399] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2428'.
[  252.360087][T14399] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2428'.
[  252.458781][T14409] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2431'.
[  252.559833][ T6193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.563391][T14410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.585979][ T6193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.632737][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2435'.
[  252.713906][T14428] netlink: 'syz.1.2437': attribute type 21 has an invalid length.
[  252.722189][T14428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2437'.
[  252.735615][ T6193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  252.752265][T14431] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2436'.
[  252.793092][T14426] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2436'.
[  252.826929][T14426] ipt_REJECT: TCP_RESET invalid for non-tcp
[  254.376871][T14532] wg2: entered promiscuous mode
[  254.381790][T14532] wg2: entered allmulticast mode
[  254.546563][T14545] SET target dimension over the limit!
[  254.609235][T14552] Cannot find set identified by id 0 to match
[  254.800128][T14561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.046184][T14518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.147329][T14592] netlink: 'syz.3.2481': attribute type 2 has an invalid length.
[  255.164597][T14592] netlink: 'syz.3.2481': attribute type 1 has an invalid length.
[  255.560918][T14619] lo speed is unknown, defaulting to 1000
[  255.657391][T14624] team0: Device is already in use.
[  255.725538][T14631] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20000
[  255.836936][T14621] lo speed is unknown, defaulting to 1000
[  256.203931][T14653] xt_TCPMSS: Only works on TCP SYN packets
[  256.781258][T14677] bridge0: port 2(team0) entered blocking state
[  256.796230][T14677] bridge0: port 2(team0) entered disabled state
[  256.804679][T14677] team0: entered allmulticast mode
[  256.813601][T14677] team_slave_0: entered allmulticast mode
[  256.830383][T14677] team_slave_1: entered allmulticast mode
[  256.842610][T14677] macvlan2: entered allmulticast mode
[  256.848650][T14677] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  256.858680][T14677] team0: entered promiscuous mode
[  256.864151][T14677] team_slave_0: entered promiscuous mode
[  256.873845][T14677] team_slave_1: entered promiscuous mode
[  256.880142][T14677] macvlan2: entered promiscuous mode
[  256.885455][T14677] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  256.992570][T14683] macvlan0: entered promiscuous mode
[  256.998987][T14683] macvlan0: entered allmulticast mode
[  257.004981][T14683] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  257.016771][T14683] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  257.030808][T14683] team0: Port device macvlan0 added
[  257.127707][T14692] lo speed is unknown, defaulting to 1000
[  257.300538][T14701] netlink: 'syz.4.2511': attribute type 3 has an invalid length.
[  257.316758][T14702] __nla_validate_parse: 8 callbacks suppressed
[  257.316775][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'.
[  257.319127][T14701] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2511'.
[  257.330501][T14702] netlink: 'syz.2.2507': attribute type 1 has an invalid length.
[  257.353921][T14702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2507'.
[  257.510337][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'.
[  257.619203][T14712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2513'.
[  257.759366][T14721] tipc: Invalid UDP bearer configuration
[  257.759417][T14721] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  257.777529][T14721] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2516'.
[  257.779918][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2517'.
[  257.823179][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'.
[  258.180250][T14742] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2523'.
[  258.196222][T14745] netlink: 'syz.0.2522': attribute type 2 has an invalid length.
[  258.215856][T14744] xt_HMARK: spi-set and port-set can't be combined
[  258.360004][T14754] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  258.490756][ T2919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  258.572642][T14765] tap0: tun_chr_ioctl cmd 1074025677
[  258.594598][T14765] tap0: linktype set to 0
[  259.006188][T14788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2534'.
[  259.273429][T14793] netlink: 'syz.4.2536': attribute type 10 has an invalid length.
[  259.314110][T14793] team0: Port device wlan1 added
[  260.175129][T14836] netlink: 'syz.2.2548': attribute type 2 has an invalid length.
[  260.217638][T14836] Cannot find set identified by id 632 to match
[  260.221322][T14845] lo speed is unknown, defaulting to 1000
[  260.557048][T14862] netlink: 'syz.4.2556': attribute type 6 has an invalid length.
[  260.750380][T14873] netlink: 'syz.0.2558': attribute type 3 has an invalid length.
[  260.769002][T14873] netlink: 'syz.0.2558': attribute type 3 has an invalid length.
[  260.900576][T14878] Bluetooth: hci3: unsupported parameter 64512
[  260.909825][T14878] Bluetooth: hci3: invalid length 0, exp 2 for type 3
[  261.427856][T14908] netlink: 'syz.2.2568': attribute type 1 has an invalid length.
[  262.352841][T14955] __nla_validate_parse: 10 callbacks suppressed
[  262.352863][T14955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2574'.
[  263.644996][ T2919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  264.689969][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'.
[  264.727232][T14965] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2577'.
[  264.781027][T14967] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2577'.
[  264.866333][T14963] ipt_REJECT: TCP_RESET invalid for non-tcp
[  264.907114][T14974] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2580'.
[  265.120570][ T5227] cgroup: fork rejected by pids controller in /syz2
[  265.402103][T15001] nftables ruleset with unbound chain
[  265.424141][T15003] pim6reg: entered allmulticast mode
[  265.456114][T15002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'.
[  265.483350][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'.
[  265.675063][T15013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2592'.
[  265.701388][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'.
[  265.725640][T15015] netlink: 'syz.0.2591': attribute type 2 has an invalid length.
[  265.878639][T15013] sctp: [Deprecated]: syz.3.2592 (pid 15013) Use of struct sctp_assoc_value in delayed_ack socket option.
[  265.878639][T15013] Use struct sctp_sack_info instead
[  265.931611][T15020] sctp: [Deprecated]: syz.3.2592 (pid 15020) Use of struct sctp_assoc_value in delayed_ack socket option.
[  265.931611][T15020] Use struct sctp_sack_info instead
[  266.011837][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  266.022397][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  266.033371][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  266.053577][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  266.063524][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  266.071668][T14989] pim6reg: left allmulticast mode
[  266.072167][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  266.182562][T15024] lo speed is unknown, defaulting to 1000
[  266.365330][T15033] netlink: 'syz.1.2596': attribute type 309 has an invalid length.
[  266.467554][T15013] syz.3.2592 (15013) used greatest stack depth: 18240 bytes left
[  266.599774][T15049] netlink: 'syz.1.2600': attribute type 8 has an invalid length.
[  266.797241][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2606'.
[  266.890619][T15066] bond3: entered allmulticast mode
[  266.907883][T15068] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  266.995532][T15073] 8021q: adding VLAN 0 to HW filter on device batadv1
[  267.005266][T15085] x_tables: unsorted entry at hook 2
[  267.018103][T15073] batadv1: entered allmulticast mode
[  267.024105][T15073] bond3: (slave batadv1): Enslaving as an active interface with an up link
[  267.038428][T15066] bond3 (unregistering): (slave batadv1): Releasing backup interface
[  267.061144][T15066] batadv1: left allmulticast mode
[  267.081552][T15066] bond3 (unregistering): Released all slaves
[  267.107386][T15079] 
: renamed from bridge_slave_0 (while UP)
[  267.202672][T15024] chnl_net:caif_netlink_parms(): no params data found
[  267.374204][T15024] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.384084][T15024] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.392726][T15024] bridge_slave_0: entered allmulticast mode
[  267.403813][T15024] bridge_slave_0: entered promiscuous mode
[  267.417868][T15024] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.425157][T15024] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.432959][T15024] bridge_slave_1: entered allmulticast mode
[  267.440928][T15024] bridge_slave_1: entered promiscuous mode
[  267.448952][T15100] tap0: tun_chr_ioctl cmd 1074025677
[  267.454531][T15100] tap0: linktype set to 773
[  267.546830][T15024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.578974][T15024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.691398][T15117] xt_hashlimit: max too large, truncated to 1048576
[  267.697460][T15024] team0: Port device team_slave_0 added
[  267.722260][T15024] team0: Port device team_slave_1 added
[  267.751938][T15124] xt_socket: unknown flags 0x4
[  267.772246][T15126] __nla_validate_parse: 2 callbacks suppressed
[  267.772261][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'.
[  267.810612][T15024] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.818681][T15024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.858592][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2618'.
[  267.873581][T15024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.888858][T15116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2615'.
[  267.920684][T15116] bond3: entered promiscuous mode
[  267.928129][T15024] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.935434][T15024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.965242][T15024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.031971][T15024] hsr_slave_0: entered promiscuous mode
[  268.046301][T15024] hsr_slave_1: entered promiscuous mode
[  268.052920][T15024] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.061090][T15024] Cannot create hsr debugfs directory
[  268.071317][T15127] netlink: 1312 bytes leftover after parsing attributes in process `syz.4.2615'.
[  268.135073][T15127] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  268.156905][T15127] ip6gretap1: entered promiscuous mode
[  268.162872][T15127] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  268.176847][ T5244] Bluetooth: hci1: command tx timeout
[  268.203451][T15138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2615'.
[  268.214172][T15138] bond3: left promiscuous mode
[  268.219182][T15138] ip6gretap1: left promiscuous mode
[  268.224867][T15138] 8021q: adding VLAN 0 to HW filter on device bond3
[  268.416400][T15024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.438147][T15145] macvlan0: left allmulticast mode
[  268.443262][T15145] veth1_vlan: left allmulticast mode
[  268.521663][T15024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.549917][T15148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'.
[  268.639168][T15150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2625'.
[  268.687662][T15024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  268.870330][T15024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.098446][T15024] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  269.109900][T15024] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  269.135645][T15024] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  269.153219][T15024] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  269.213135][T15181] netlink: 'syz.4.2635': attribute type 2 has an invalid length.
[  269.222184][T15181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2635'.
[  269.376649][ T6194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  269.399653][T15024] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.462046][T15024] 8021q: adding VLAN 0 to HW filter on device team0
[  269.495408][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.502629][ T5228] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.551657][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.558842][ T5228] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.799967][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2638'.
[  269.958068][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'.
[  270.072394][T15024] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.124450][T15220] openvswitch: netlink: Flow actions attr not present in new flow.
[  270.248418][ T5244] Bluetooth: hci1: command tx timeout
[  270.263688][T15024] veth0_vlan: entered promiscuous mode
[  270.332045][T15024] veth1_vlan: entered promiscuous mode
[  270.358407][T15232] netlink: 'syz.1.2646': attribute type 10 has an invalid length.
[  270.415409][T15024] veth0_macvtap: entered promiscuous mode
[  270.435106][T15024] veth1_macvtap: entered promiscuous mode
[  270.476939][T15024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.500216][T15024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.526415][T15024] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.564408][T15024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.589836][T15024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.605791][T15024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.622083][T15024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.633705][T15024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.656048][T15024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.667918][T15024] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.677634][T15238] lo speed is unknown, defaulting to 1000
[  270.681981][T15024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.692761][T15024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.702334][T15024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.713258][T15024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.850604][ T6188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.864299][ T6188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.939071][ T6188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.956345][ T6188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.160088][T15255] ipt_REJECT: TCP_RESET invalid for non-tcp
[  271.543155][T15271] lo speed is unknown, defaulting to 1000
[  271.804580][T15282] batman_adv: batadv0: Removing interface: team0
[  271.830592][T15288] netlink: 'syz.0.2664': attribute type 1 has an invalid length.
[  271.860015][T15282] team0 (unregistering): Port device team_slave_0 removed
[  271.886484][T15282] team0 (unregistering): Port device team_slave_1 removed
[  271.908050][T15282] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  271.919749][T15282] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  271.965515][T15282] team0 (unregistering): Port device macvlan0 removed
[  272.087911][T15288] netlink: 'syz.0.2664': attribute type 21 has an invalid length.
[  272.106751][T15288] netlink: 'syz.0.2664': attribute type 4 has an invalid length.
[  272.114502][T15288] netlink: 'syz.0.2664': attribute type 5 has an invalid length.
[  272.326740][ T5244] Bluetooth: hci1: command tx timeout
[  272.527677][T15309] netlink: 'syz.0.2671': attribute type 11 has an invalid length.
[  272.764231][T15317] netlink: 'syz.0.2674': attribute type 1 has an invalid length.
[  272.777749][T15317] __nla_validate_parse: 10 callbacks suppressed
[  272.777765][T15317] netlink: 512 bytes leftover after parsing attributes in process `syz.0.2674'.
[  272.807540][T15318] netlink: 'syz.0.2674': attribute type 4 has an invalid length.
[  273.009907][T15336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2678'.
[  273.134618][T15344] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2679'.
[  273.158772][T15338] xt_ipcomp: unknown flags B
[  273.247283][T15350] batadv0: entered promiscuous mode
[  273.454107][T15368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'.
[  273.567566][T15372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2687'.
[  273.600222][T15372] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2687'.
[  273.618669][T15374] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2687'.
[  273.659474][T15373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2686'.
[  273.666859][T15374] ipt_REJECT: TCP_RESET invalid for non-tcp
[  274.203779][T15390] bridge_slave_0: entered promiscuous mode
[  274.220290][T15390] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  274.240004][T15390] Cannot create hsr debugfs directory
[  274.257619][T15390] hsr1: Slave B (bridge_slave_0) is not up; please bring it up to get a fully working HSR network
[  274.406872][T15392] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2691'.
[  274.417229][ T5244] Bluetooth: hci1: command tx timeout
[  274.427079][T15405] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2694'.
[  274.797634][T15420] netlink: 'syz.4.2700': attribute type 4 has an invalid length.
[  274.837342][T15420] netlink: 'syz.4.2700': attribute type 4 has an invalid length.
[  274.923911][T15421] ipt_REJECT: TCP_RESET invalid for non-tcp
[  274.930459][T15414] vlan1: entered promiscuous mode
[  274.936470][T15414] vlan1: entered allmulticast mode
[  275.128499][ T6188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  275.553703][T15457] lo speed is unknown, defaulting to 1000
[  276.410448][T15482] lo speed is unknown, defaulting to 1000
[  277.087811][T15500] xt_ecn: cannot match TCP bits for non-tcp packets
[  277.096941][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.110114][T15500] xt_l2tp: v2 tid > 0xffff: 150994944
[  277.129641][ T5236] Bluetooth: hci1: command 0x0405 tx timeout
[  277.135735][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.175892][T15503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.200582][T15503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.599520][T15524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  278.162795][T15551] __nla_validate_parse: 9 callbacks suppressed
[  278.162810][T15551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2731'.
[  278.185094][T15551] vlan3: entered promiscuous mode
[  278.264767][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2732'.
[  278.487262][ T5244] Bluetooth: hci4: command 0x0419 tx timeout
[  279.578910][T15579] netlink: 'syz.4.2736': attribute type 11 has an invalid length.
[  279.587700][T15579] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2736'.
[  279.914178][T15562] netlink: 'syz.1.2734': attribute type 30 has an invalid length.
[  280.247177][T15597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'.
[  280.508048][T15612] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2746'.
[  280.547857][T15608] Bluetooth: hci3: invalid len left 7, exp >= 42
[  280.627650][T15624] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2748'.
[  280.733092][T15629] dvmrp0: entered allmulticast mode
[  280.842050][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2753'.
[  280.887516][ T6193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  280.932493][T15645] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2754'.
[  281.190452][T15653] netlink: 'syz.1.2758': attribute type 3 has an invalid length.
[  281.216021][T15653] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2758'.
[  281.240663][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'.
[  281.346084][T15669] geneve2: entered promiscuous mode
[  281.364220][T15669] geneve2: entered allmulticast mode
[  281.428534][T15667] Κό: entered promiscuous mode
[  281.474781][T15679] vlan3: entered allmulticast mode
[  281.505380][T15679] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  281.543907][T15679] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  281.609090][T15682] TCP: out of memory -- consider tuning tcp_mem
[  281.623079][T15687] xt_TCPMSS: Only works on TCP SYN packets
[  282.060402][T15715] netlink: 'syz.3.2773': attribute type 3 has an invalid length.
[  282.073379][T15715] netlink: 'syz.3.2773': attribute type 3 has an invalid length.
[  282.394185][T15729] tipc: Started in network mode
[  282.400205][T15729] tipc: Node identity 2217c894d775, cluster identity 4711
[  282.408559][T15729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.484748][T15729] syzkaller0: entered promiscuous mode
[  282.493914][T15729] syzkaller0: entered allmulticast mode
[  282.500563][T15729] tipc: Resetting bearer <eth:syzkaller0>
[  282.517155][T15728] tipc: Resetting bearer <eth:syzkaller0>
[  283.038951][T15753] netlink: 'syz.0.2784': attribute type 2 has an invalid length.
[  283.313345][T15762] __nla_validate_parse: 9 callbacks suppressed
[  283.313363][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2787'.
[  283.536869][ T8630] tipc: Node number set to 4116891796
[  284.267412][T15728] tipc: Disabling bearer <eth:syzkaller0>
[  284.293066][T15759] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  284.316585][T15759] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  284.360213][T15763] vxcan1: entered allmulticast mode
[  284.376914][T15765] netlink: 'syz.0.2788': attribute type 39 has an invalid length.
[  284.407881][T15765] vxcan1: left allmulticast mode
[  284.471110][T15777] lo speed is unknown, defaulting to 1000
[  284.544933][T15780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2791'.
[  284.593575][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2793'.
[  284.626276][T15791] bond0: option arp_interval: invalid value (18446744073314935299)
[  284.634223][T15791] bond0: option arp_interval: allowed values 0 - 2147483647
[  284.718723][T15779] dccp_close: ABORT with 60 bytes unread
[  285.003613][T15820] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2800'.
[  285.122519][T15828] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2802'.
[  285.133894][T15828] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2802'.
[  285.581140][T15848] netlink: 'syz.1.2809': attribute type 21 has an invalid length.
[  285.606362][T15848] netlink: 'syz.1.2809': attribute type 1 has an invalid length.
[  286.007831][ T6194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.059858][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2818'.
[  286.088953][ T5279] IPVS: starting estimator thread 0...
[  286.097784][T15882] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available
[  286.206294][T15884] IPVS: using max 18 ests per chain, 43200 per kthread
[  286.444241][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'.
[  286.748493][T15937] lo speed is unknown, defaulting to 1000
[  286.846996][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2833'.
[  286.912334][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'.
[  287.877303][T15980] pim6reg: entered allmulticast mode
[  288.065942][T15980] pim6reg: left allmulticast mode
[  288.357530][T16005] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  288.634950][T16030] __nla_validate_parse: 2 callbacks suppressed
[  288.634968][T16030] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2850'.
[  288.642760][T16028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2853'.
[  288.721592][T16035] bridge13: port 1(veth1_to_bond) entered blocking state
[  288.747546][T16035] bridge13: port 1(veth1_to_bond) entered disabled state
[  288.755609][T16035] veth1_to_bond: entered allmulticast mode
[  288.772983][T16035] veth1_to_bond: entered promiscuous mode
[  288.775274][T16028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2853'.
[  288.792071][T16035] bridge13: port 1(veth1_to_bond) entered blocking state
[  288.799262][T16035] bridge13: port 1(veth1_to_bond) entered forwarding state
[  288.964296][ T5226] bond0: (slave syz_tun): Releasing backup interface
[  288.984985][T16045] xt_TCPMSS: Only works on TCP SYN packets
[  289.087968][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2858'.
[  289.134453][T16050] netlink: 'syz.1.2858': attribute type 19 has an invalid length.
[  289.253783][ T1056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.374457][T16054] netlink: 'syz.2.2861': attribute type 3 has an invalid length.
[  289.427442][ T1056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.606516][ T1056] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode
[  289.636813][ T1056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.831951][ T1056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.968500][T16083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2866'.
[  290.010409][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  290.020378][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2866'.
[  290.033165][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  290.040630][T16083] netlink: 'syz.4.2866': attribute type 3 has an invalid length.
[  290.050078][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  290.060396][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  290.068819][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  290.076337][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  290.186345][ T1056] team0: left allmulticast mode
[  290.198394][ T1056] team_slave_0: left allmulticast mode
[  290.218280][ T1056] team_slave_1: left allmulticast mode
[  290.234205][ T1056] macvlan2: left allmulticast mode
[  290.249810][ T1056] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  290.268908][ T1056] team0: left promiscuous mode
[  290.274931][ T1056] team_slave_0: left promiscuous mode
[  290.282421][ T1056] team_slave_1: left promiscuous mode
[  290.301455][ T1056] macvlan2: left promiscuous mode
[  290.307213][ T1056] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  290.315962][ T1056] bridge0: port 2(team0) entered disabled state
[  290.327994][ T1056] 
: left allmulticast mode
[  290.332623][ T1056] 
: left promiscuous mode
[  290.339185][ T1056] bridge0: port 1(
) entered disabled state
[  290.374299][ T1056] veth1_to_bond: left allmulticast mode
[  290.381697][ T1056] veth1_to_bond: left promiscuous mode
[  290.389332][ T1056] bridge6: port 2(veth1_to_bond) entered disabled state
[  290.400204][ T1056] bridge_slave_1: left allmulticast mode
[  290.411462][ T1056] bridge_slave_1: left promiscuous mode
[  290.429224][ T1056] bridge6: port 1(bridge_slave_1) entered disabled state
[  291.356433][ T1056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.370821][ T1056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.382209][ T1056] bond0 (unregistering): Released all slaves
[  291.395613][ T1056] bond1 (unregistering): Released all slaves
[  291.408630][ T1056] bond2 (unregistering): Released all slaves
[  291.426076][T16121] netlink: 'syz.2.2875': attribute type 10 has an invalid length.
[  291.481850][T16121] team0: Port device netdevsim0 added
[  291.554822][ T1056] Κό: left promiscuous mode
[  291.606587][T16085] lo speed is unknown, defaulting to 1000
[  291.650074][T16146] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2881'.
[  291.682414][T16146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'.
[  291.767148][ T6197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  291.862614][T16156] Bluetooth: MGMT ver 1.23
[  291.982640][T16153] delete_channel: no stack
[  292.176144][ T5244] Bluetooth: hci0: command tx timeout
[  292.387862][T16166] lo speed is unknown, defaulting to 1000
[  292.622691][T16190] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2893'.
[  292.662780][T16190] openvswitch: netlink: Multiple metadata blocks provided
[  292.682925][T16191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2891'.
[  292.714509][ T1056] batadv_slave_1: left promiscuous mode
[  292.733595][T16184] ipt_REJECT: TCP_RESET invalid for non-tcp
[  292.773602][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.785838][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.804543][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.813537][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.828875][ T1056] batman_adv: batadv0: Interface deactivated: macsec1
[  292.842670][ T1056] batman_adv: batadv0: Removing interface: macsec1
[  292.904562][ T1056] veth1_macvtap: left promiscuous mode
[  292.914858][ T1056] veth0_macvtap: left promiscuous mode
[  292.923790][ T1056] veth1_vlan: left promiscuous mode
[  293.136995][ T1056] team0 (unregistering): Port device macvlan2 removed
[  293.459010][ T1056] team0 (unregistering): Port device team_slave_1 removed
[  293.493798][ T1056] team0 (unregistering): Port device team_slave_0 removed
[  293.855615][T16185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2891'.
[  293.865603][T16185] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2891'.
[  293.900819][T16196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2894'.
[  293.953152][T16204] netlink: 'syz.2.2894': attribute type 10 has an invalid length.
[  294.183037][T16085] chnl_net:caif_netlink_parms(): no params data found
[  294.246602][ T5244] Bluetooth: hci0: command tx timeout
[  294.436440][T16232] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  294.543293][T16085] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.553377][ T1056] IPVS: stop unused estimator thread 0...
[  294.574531][T16085] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.595252][T16085] bridge_slave_0: entered allmulticast mode
[  294.601150][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  294.622042][T16085] bridge_slave_0: entered promiscuous mode
[  294.637064][T16085] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.644199][T16085] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.654015][T16085] bridge_slave_1: entered allmulticast mode
[  294.662108][T16085] bridge_slave_1: entered promiscuous mode
[  294.670148][T16238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2901'.
[  294.689289][T16238] xfrm1: entered promiscuous mode
[  294.699392][T16238] xfrm1: entered allmulticast mode
[  294.730958][T16241] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2902'.
[  294.744684][T16241] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2902'.
[  294.788788][T16085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.818994][T16085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.888110][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2904'.
[  294.914165][T16085] team0: Port device team_slave_0 added
[  294.928462][T16085] team0: Port device team_slave_1 added
[  295.081960][T16085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.095916][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.156301][T16085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.174321][T16085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.181506][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.222803][T16085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.259783][T16257] veth0_vlan: left promiscuous mode
[  295.302974][T16258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2907'.
[  295.312564][T16258] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2907'.
[  295.316267][T16256] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2907'.
[  295.352568][T16256] ipt_REJECT: TCP_RESET invalid for non-tcp
[  295.408527][T16085] hsr_slave_0: entered promiscuous mode
[  295.415174][T16085] hsr_slave_1: entered promiscuous mode
[  295.427976][T16085] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.446297][T16085] Cannot create hsr debugfs directory
[  295.701728][T16276] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8
[  296.319927][T16304] ipt_REJECT: TCP_RESET invalid for non-tcp
[  296.320846][T16085] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  296.337374][ T5244] Bluetooth: hci0: command tx timeout
[  296.341052][T16085] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  296.363004][T16085] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  296.379744][T16085] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  296.572981][T16085] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.615245][T16085] 8021q: adding VLAN 0 to HW filter on device team0
[  296.644654][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.651828][ T5349] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.711629][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.718793][ T5349] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.891622][ T1056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  297.267522][T16362] netlink: 'syz.4.2936': attribute type 1 has an invalid length.
[  297.275609][T16362] netlink: 'syz.4.2936': attribute type 4 has an invalid length.
[  297.299328][T16364] netlink: 'syz.2.2935': attribute type 4 has an invalid length.
[  297.325585][T16085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.437874][T16085] veth0_vlan: entered promiscuous mode
[  297.470505][T16085] veth1_vlan: entered promiscuous mode
[  297.560248][T16085] veth0_macvtap: entered promiscuous mode
[  297.584902][T16085] veth1_macvtap: entered promiscuous mode
[  297.633150][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  297.654401][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.677905][T16085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.704596][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.724117][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.735650][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.754477][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.774566][T16085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  297.792522][T16085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  297.803478][T16085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.825516][T16085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.835493][T16085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.845494][T16085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.855615][T16085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.919551][T16384] syzkaller0: entered promiscuous mode
[  297.925036][T16384] syzkaller0: entered allmulticast mode
[  298.192194][T16401] netlink: 'syz.4.2943': attribute type 9 has an invalid length.
[  298.386617][T16410] netlink: 'syz.2.2945': attribute type 3 has an invalid length.
[  298.415891][ T5244] Bluetooth: hci0: command tx timeout
[  299.938773][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.969922][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.018474][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.028555][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.555395][T16456] netlink: 'syz.2.2956': attribute type 2 has an invalid length.
[  300.716658][T16465] __nla_validate_parse: 20 callbacks suppressed
[  300.716677][T16465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2959'.
[  300.885629][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2962'.
[  300.948693][T16475] 8021q: adding VLAN 0 to HW filter on device bond1
[  301.034372][T16480] 8021q: adding VLAN 0 to HW filter on device bond1
[  301.060156][T16480] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  301.091769][T16480] bond1: (slave vti0): Error -95 calling set_mac_address
[  301.292287][T16497] netlink: 'syz.3.2967': attribute type 12 has an invalid length.
[  301.570736][T16517] x_tables: duplicate underflow at hook 2
[  301.590540][T16517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.615273][T16517] batadv_slave_0: entered allmulticast mode
[  301.670982][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'.
[  301.697106][T16523] x_tables: ip_tables: osf match: only valid for protocol 6
[  301.886420][T16529] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2979'.
[  301.979860][ T2919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.158946][T16536] netlink: 'syz.1.2980': attribute type 9 has an invalid length.
[  302.216074][T16536] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2980'.
[  302.587104][ T2919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.647175][ T6205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  302.720217][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.731500][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.743647][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.752151][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.760520][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  302.777038][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.834322][ T2919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.869761][T16561] netlink: 'syz.2.2987': attribute type 1 has an invalid length.
[  303.008746][T16558] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2986'.
[  303.043085][ T2919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.066462][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  303.081381][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  303.089738][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2988'.
[  303.090019][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  303.115555][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2988'.
[  303.136077][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  303.136394][T16568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2988'.
[  303.154086][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  303.163413][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  303.192957][T16555] lo speed is unknown, defaulting to 1000
[  303.369126][T16572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'.
[  303.421974][ T2919] bridge_slave_1: left allmulticast mode
[  303.452782][ T2919] bridge_slave_1: left promiscuous mode
[  303.467158][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.527660][ T2919] bridge_slave_0: left allmulticast mode
[  303.533333][ T2919] bridge_slave_0: left promiscuous mode
[  303.553584][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.039807][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.053472][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.065088][ T2919] bond0 (unregistering): Released all slaves
[  304.093121][T16566] lo speed is unknown, defaulting to 1000
[  304.627179][T16618] Unknown options in mask 1f4
[  304.807193][ T5244] Bluetooth: hci0: command tx timeout
[  304.906233][ T2919] hsr_slave_0: left promiscuous mode
[  304.912862][ T2919] hsr_slave_1: left promiscuous mode
[  304.920672][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.929029][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.937695][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.945372][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.979439][ T2919] veth1_macvtap: left promiscuous mode
[  304.985102][ T2919] veth0_macvtap: left promiscuous mode
[  304.990991][ T2919] veth1_vlan: left promiscuous mode
[  304.997130][ T2919] veth0_vlan: left promiscuous mode
[  305.219801][ T5244] Bluetooth: hci3: command tx timeout
[  305.573322][ T2919] team0 (unregistering): Port device team_slave_1 removed
[  305.618847][ T2919] team0 (unregistering): Port device team_slave_0 removed
[  305.995599][T16634] __nla_validate_parse: 5 callbacks suppressed
[  305.995618][T16634] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3004'.
[  306.143536][T16555] chnl_net:caif_netlink_parms(): no params data found
[  306.197480][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3011'.
[  306.270476][T16660] vcan0: entered promiscuous mode
[  306.278865][T16660] vlan2: entered promiscuous mode
[  306.289906][T16660] vcan0: left promiscuous mode
[  306.328664][T16566] chnl_net:caif_netlink_parms(): no params data found
[  306.350178][T16672] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  306.513320][T16555] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.536345][T16555] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.552979][T16555] bridge_slave_0: entered allmulticast mode
[  306.591917][T16555] bridge_slave_0: entered promiscuous mode
[  306.647430][T16688] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20006
[  306.674389][T16555] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.697732][T16555] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.704894][T16555] bridge_slave_1: entered allmulticast mode
[  306.717970][T16555] bridge_slave_1: entered promiscuous mode
[  306.757174][T16694] IPVS: length: 4096 != 8
[  306.769889][T16695] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2
[  306.795918][T16695] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0
[  306.830501][T16555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.840136][T16566] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.847544][T16566] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.854756][T16566] bridge_slave_0: entered allmulticast mode
[  306.863604][T16566] bridge_slave_0: entered promiscuous mode
[  306.874858][T16555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.886417][ T5244] Bluetooth: hci0: command tx timeout
[  306.895977][T16566] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.903088][T16566] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.912689][T16566] bridge_slave_1: entered allmulticast mode
[  306.920641][T16566] bridge_slave_1: entered promiscuous mode
[  306.962607][T16555] team0: Port device team_slave_0 added
[  307.006079][T16555] team0: Port device team_slave_1 added
[  307.014556][T16566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.071513][T16566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.094626][T16555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.102141][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.133237][T16555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.159019][T16555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.166441][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.194173][T16555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.234874][T16566] team0: Port device team_slave_0 added
[  307.268573][T16566] team0: Port device team_slave_1 added
[  307.296205][ T5244] Bluetooth: hci3: command tx timeout
[  307.326287][T16702] Bluetooth: MGMT ver 1.23
[  307.331299][T16702] Bluetooth: hci3: invalid length 0, exp 2 for type 17
[  307.399639][T16566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.408416][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.476093][T16566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.537955][T16566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.544915][T16566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.625351][T16566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.682459][T16555] hsr_slave_0: entered promiscuous mode
[  307.710788][T16555] hsr_slave_1: entered promiscuous mode
[  307.726964][T16555] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.744813][T16555] Cannot create hsr debugfs directory
[  307.907029][T16566] hsr_slave_0: entered promiscuous mode
[  307.925542][T16566] hsr_slave_1: entered promiscuous mode
[  307.947046][T16566] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.966466][T16566] Cannot create hsr debugfs directory
[  308.131453][T16722] Bluetooth: MGMT ver 1.23
[  308.202559][T16726] netlink: 'syz.2.3029': attribute type 29 has an invalid length.
[  308.254897][ T5278] IPVS: starting estimator thread 0...
[  308.268466][T16731] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  308.390663][T16732] IPVS: using max 19 ests per chain, 45600 per kthread
[  308.407772][ T2919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  308.431483][T16741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3032'.
[  308.447643][T16742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3032'.
[  308.496768][T16745] netlink: 'syz.1.3034': attribute type 10 has an invalid length.
[  308.533428][T16745] bond0: (slave netdevsim0): Releasing backup interface
[  308.542895][T16745] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  308.645189][T16566] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.751075][T16566] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.857999][T16566] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.965922][ T5244] Bluetooth: hci0: command tx timeout
[  308.973867][T16566] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.172023][T16555] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  309.188386][T16555] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  309.249121][T16555] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  309.260659][T16555] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  309.284293][T16566] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  309.303553][T16566] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  309.314045][T16786] netlink: 'syz.2.3044': attribute type 3 has an invalid length.
[  309.333442][T16786] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3044'.
[  309.348964][T16566] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  309.367030][ T5244] Bluetooth: hci3: command tx timeout
[  309.370461][T16566] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  309.607299][T16555] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.638994][T16566] 
[  309.641356][T16566] ============================================
[  309.647492][T16566] WARNING: possible recursive locking detected
[  309.653663][T16566] 6.11.0-rc1-syzkaller-00247-g3608d6aca5e7 #0 Not tainted
[  309.660758][T16566] --------------------------------------------
[  309.666901][T16566] syz-executor/16566 is trying to acquire lock:
[  309.673145][T16566] ffff88805e6751d8 (&qs->lock){..-.}-{2:2}, at: __stack_map_get+0x14b/0x4b0
[  309.681825][T16566] 
[  309.681825][T16566] but task is already holding lock:
[  309.689167][T16566] ffff88805e6751d8 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660
[  309.698755][T16566] 
[  309.698755][T16566] other info that might help us debug this:
[  309.706797][T16566]  Possible unsafe locking scenario:
[  309.706797][T16566] 
[  309.714237][T16566]        CPU0
[  309.717498][T16566]        ----
[  309.720758][T16566]   lock(&qs->lock);
[  309.724639][T16566]   lock(&qs->lock);
[  309.728518][T16566] 
[  309.728518][T16566]  *** DEADLOCK ***
[  309.728518][T16566] 
[  309.736651][T16566]  May be due to missing lock nesting notation
[  309.736651][T16566] 
[  309.744949][T16566] 4 locks held by syz-executor/16566:
[  309.750302][T16566]  #0: ffffffff8fc80048 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  309.759692][T16566]  #1: ffffffff8e9377a0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0x24c/0x5a0
[  309.769076][T16566]  #2: ffff88805e6751d8 (&qs->lock){..-.}-{2:2}, at: queue_stack_map_push_elem+0x1b2/0x660
[  309.779066][T16566]  #3: ffffffff8e9377a0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540
[  309.788463][T16566] 
[  309.788463][T16566] stack backtrace:
[  309.794332][T16566] CPU: 1 UID: 0 PID: 16566 Comm: syz-executor Not tainted 6.11.0-rc1-syzkaller-00247-g3608d6aca5e7 #0
[  309.805244][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  309.815312][T16566] Call Trace:
[  309.818581][T16566]  <TASK>
[  309.821497][T16566]  dump_stack_lvl+0x241/0x360
[  309.826196][T16566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.831387][T16566]  ? print_deadlock_bug+0x479/0x620
[  309.836570][T16566]  ? rcu_is_watching+0x15/0xb0
[  309.841344][T16566]  validate_chain+0x15d3/0x5900
[  309.846178][T16566]  ? __pfx_lock_acquire+0x10/0x10
[  309.851200][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.856386][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.861577][T16566]  ? validate_chain+0x11e/0x5900
[  309.866499][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.871681][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.876867][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.882048][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.887238][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.892418][T16566]  ? stack_trace_save+0x118/0x1d0
[  309.897431][T16566]  ? mark_lock+0x9a/0x350
[  309.901763][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.906955][T16566]  __lock_acquire+0x137a/0x2040
[  309.911803][T16566]  lock_acquire+0x1ed/0x550
[  309.916295][T16566]  ? __stack_map_get+0x14b/0x4b0
[  309.921644][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.926831][T16566]  ? __pfx_lock_acquire+0x10/0x10
[  309.931856][T16566]  ? __lock_acquire+0x137a/0x2040
[  309.936872][T16566]  _raw_spin_lock_irqsave+0xd5/0x120
[  309.942174][T16566]  ? __stack_map_get+0x14b/0x4b0
[  309.947128][T16566]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  309.953009][T16566]  ? bpf_trace_run2+0x1fc/0x540
[  309.957854][T16566]  __stack_map_get+0x14b/0x4b0
[  309.962601][T16566]  ? __pfx_lock_acquire+0x10/0x10
[  309.967628][T16566]  ? __pfx_validate_chain+0x10/0x10
[  309.972819][T16566]  ? __pfx___stack_map_get+0x10/0x10
[  309.978092][T16566]  ? __pfx___cant_migrate+0x10/0x10
[  309.983284][T16566]  ? bpf_trace_run2+0x1fc/0x540
[  309.988138][T16566]  bpf_prog_94b194d4ebfffdd5+0x45/0x49
[  309.993579][T16566]  bpf_trace_run2+0x2ec/0x540
[  309.998242][T16566]  ? mark_lock+0x9a/0x350
[  310.002561][T16566]  ? __pfx_bpf_trace_run2+0x10/0x10
[  310.007747][T16566]  ? mark_lock+0x9a/0x350
[  310.012064][T16566]  trace_contention_begin+0x117/0x140
[  310.017423][T16566]  __pv_queued_spin_lock_slowpath+0x114/0xdc0
[  310.023842][T16566]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  310.030434][T16566]  queued_spin_lock_slowpath+0x42/0x50
[  310.035887][T16566]  do_raw_spin_lock+0x272/0x370
[  310.040732][T16566]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  310.046104][T16566]  ? __lock_acquire+0x137a/0x2040
[  310.051122][T16566]  _raw_spin_lock_irqsave+0xe1/0x120
[  310.056395][T16566]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  310.062278][T16566]  queue_stack_map_push_elem+0x1b2/0x660
[  310.067916][T16566]  ? __pfx_queue_stack_map_push_elem+0x10/0x10
[  310.074067][T16566]  ? __pfx___cant_migrate+0x10/0x10
[  310.079265][T16566]  ? bpf_trace_run3+0x24c/0x5a0
[  310.084102][T16566]  bpf_prog_80daba7f9ca62790+0x42/0x46
[  310.089564][T16566]  bpf_trace_run3+0x33a/0x5a0
[  310.094229][T16566]  ? __pfx_bpf_trace_run3+0x10/0x10
[  310.099414][T16566]  ? mark_lock+0x9a/0x350
[  310.103733][T16566]  ? skb_release_data+0x64d/0x880
[  310.108744][T16566]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  310.114711][T16566]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  310.121026][T16566]  ? skb_release_data+0x64d/0x880
[  310.126034][T16566]  kmem_cache_free+0x2a9/0x350
[  310.130785][T16566]  skb_release_data+0x64d/0x880
[  310.135623][T16566]  consume_skb+0x9f/0xf0
[  310.139859][T16566]  netlink_broadcast_filtered+0x116a/0x1290
[  310.145754][T16566]  ? inet6_fill_ifaddr+0xa78/0xf50
[  310.150853][T16566]  ? __pfx_inet6_fill_ifaddr+0x10/0x10
[  310.156298][T16566]  ? __pfx___alloc_skb+0x10/0x10
[  310.161224][T16566]  nlmsg_notify+0xfb/0x1c0
[  310.165630][T16566]  __ipv6_ifa_notify+0x332/0x1230
[  310.170644][T16566]  ? __pfx___ipv6_ifa_notify+0x10/0x10
[  310.176090][T16566]  ? __pfx___fib6_clean_all+0x10/0x10
[  310.181448][T16566]  ? __pfx_fib6_clean_node+0x10/0x10
[  310.186721][T16566]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  310.193037][T16566]  ? __local_bh_enable_ip+0x168/0x200
[  310.198396][T16566]  ? fib6_flush_trees+0x191/0x200
[  310.203405][T16566]  ? __pfx_fib6_flush_trees+0x10/0x10
[  310.208761][T16566]  ? add_addr+0x1db/0x490
[  310.213087][T16566]  add_addr+0x2dd/0x490
[  310.217232][T16566]  ? __pfx_add_addr+0x10/0x10
[  310.221904][T16566]  add_v4_addrs+0x8dd/0x1160
[  310.226488][T16566]  ? __pfx_add_v4_addrs+0x10/0x10
[  310.231507][T16566]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  310.237490][T16566]  ? __mutex_unlock_slowpath+0x21d/0x750
[  310.243116][T16566]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  310.249089][T16566]  ? ipv6_mc_up+0x3c9/0x570
[  310.253638][T16566]  addrconf_init_auto_addrs+0x208/0xeb0
[  310.259175][T16566]  ? __pfx_addrconf_init_auto_addrs+0x10/0x10
[  310.265231][T16566]  ? addrconf_permanent_addr+0xb95/0xc50
[  310.270855][T16566]  ? __pfx_addrconf_permanent_addr+0x10/0x10
[  310.276821][T16566]  ? __mutex_lock+0x2ef/0xd70
[  310.281505][T16566]  ? addrconf_link_ready+0xda/0x1b0
[  310.286690][T16566]  addrconf_notify+0xaff/0x1020
[  310.291529][T16566]  notifier_call_chain+0x19f/0x3e0
[  310.296635][T16566]  __dev_notify_flags+0x207/0x400
[  310.301659][T16566]  ? dev_set_rx_mode+0xb8/0x2e0
[  310.306505][T16566]  ? __pfx___dev_notify_flags+0x10/0x10
[  310.312037][T16566]  ? __dev_change_flags+0x515/0x6f0
[  310.317222][T16566]  ? 0xffffffffa0000698
[  310.321362][T16566]  ? __pfx___dev_change_flags+0x10/0x10
[  310.326905][T16566]  ? is_bpf_text_address+0x285/0x2a0
[  310.332189][T16566]  ? is_bpf_text_address+0x26/0x2a0
[  310.337380][T16566]  ? kernel_text_address+0xa7/0xe0
[  310.342479][T16566]  dev_change_flags+0xf0/0x1a0
[  310.347236][T16566]  do_setlink+0xccd/0x41f0
[  310.351641][T16566]  ? stack_trace_save+0x118/0x1d0
[  310.356652][T16566]  ? __pfx_stack_trace_save+0x10/0x10
[  310.362006][T16566]  ? validate_chain+0x11e/0x5900
[  310.366932][T16566]  ? __pfx_do_setlink+0x10/0x10
[  310.371772][T16566]  ? __asan_memset+0x23/0x50
[  310.376351][T16566]  ? __nla_validate_parse+0x26ce/0x3090
[  310.381883][T16566]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[  310.387411][T16566]  ? rtnl_newlink+0xf2/0x20a0
[  310.392089][T16566]  ? netlink_sendmsg+0x8e4/0xcb0
[  310.397022][T16566]  ? __x64_sys_sendto+0xde/0x100
[  310.401948][T16566]  ? do_syscall_64+0xf3/0x230
[  310.406623][T16566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.412709][T16566]  ? __pfx___nla_validate_parse+0x10/0x10
[  310.418429][T16566]  ? validate_linkmsg+0x71e/0x900
[  310.423460][T16566]  rtnl_newlink+0x180d/0x20a0
[  310.428152][T16566]  ? rtnl_newlink+0x481/0x20a0
[  310.432912][T16566]  ? __pfx_rtnl_newlink+0x10/0x10
[  310.437939][T16566]  ? __pfx___mutex_trylock_common+0x10/0x10
[  310.443815][T16566]  ? rcu_is_watching+0x15/0xb0
[  310.448568][T16566]  ? trace_contention_end+0x3c/0x120
[  310.453836][T16566]  ? __mutex_lock+0x2ef/0xd70
[  310.458505][T16566]  ? __pfx_lock_release+0x10/0x10
[  310.463529][T16566]  ? __pfx_rtnl_newlink+0x10/0x10
[  310.468548][T16566]  rtnetlink_rcv_msg+0x73f/0xcf0
[  310.473498][T16566]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  310.478601][T16566]  ? __lock_acquire+0x137a/0x2040
[  310.483613][T16566]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  310.489063][T16566]  netlink_rcv_skb+0x1e3/0x430
[  310.493814][T16566]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  310.499261][T16566]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  310.504542][T16566]  ? netlink_deliver_tap+0x2e/0x1b0
[  310.509728][T16566]  netlink_unicast+0x7f0/0x990
[  310.514481][T16566]  ? __pfx_netlink_unicast+0x10/0x10
[  310.519749][T16566]  ? __virt_addr_valid+0x183/0x530
[  310.524853][T16566]  ? __check_object_size+0x49c/0x900
[  310.530123][T16566]  ? bpf_lsm_netlink_send+0x9/0x10
[  310.535222][T16566]  netlink_sendmsg+0x8e4/0xcb0
[  310.539979][T16566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.545259][T16566]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  310.551231][T16566]  ? aa_sock_msg_perm+0x91/0x160
[  310.556193][T16566]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  310.561467][T16566]  ? security_socket_sendmsg+0x87/0xb0
[  310.566942][T16566]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.572228][T16566]  __sock_sendmsg+0x221/0x270
[  310.576903][T16566]  __sys_sendto+0x3a4/0x4f0
[  310.581398][T16566]  ? __pfx___sys_sendto+0x10/0x10
[  310.586440][T16566]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  310.592448][T16566]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  310.598777][T16566]  __x64_sys_sendto+0xde/0x100
[  310.603536][T16566]  do_syscall_64+0xf3/0x230
[  310.608030][T16566]  ? clear_bhb_loop+0x35/0x90
[  310.612702][T16566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.618608][T16566] RIP: 0033:0x7f221897978c
[  310.623006][T16566] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b
[  310.642603][T16566] RSP: 002b:00007ffce3f66460 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  310.651006][T16566] RAX: ffffffffffffffda RBX: 00007f2219634620 RCX: 00007f221897978c
[  310.658963][T16566] RDX: 0000000000000020 RSI: 00007f2219634670 RDI: 0000000000000003
[  310.666935][T16566] RBP: 0000000000000000 R08: 00007ffce3f664b4 R09: 000000000000000c
[  310.674892][T16566] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  310.682855][T16566] R13: 0000000000000000 R14: 00007f2219634670 R15: 0000000000000000
[  310.690818][T16566]  </TASK>
[  310.722952][T16800] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3046'.
[  310.749909][T16566] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.781714][T16566] 8021q: adding VLAN 0 to HW filter on device team0
[  310.791695][T16555] 8021q: adding VLAN 0 to HW filter on device team0
[  310.802607][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.809796][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.848765][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.855865][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.870286][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.877388][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.888363][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.895431][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  311.035330][T16555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.048543][ T5244] Bluetooth: hci0: command tx timeout
[  311.071899][T16566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.097274][T16555] veth0_vlan: entered promiscuous mode
[  311.118351][T16555] veth1_vlan: entered promiscuous mode
[  311.148289][T16555] veth0_macvtap: entered promiscuous mode
[  311.158134][T16555] veth1_macvtap: entered promiscuous mode
[  311.178762][T16555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.193496][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.204350][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.216566][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.229069][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.239082][T16555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.249918][T16555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.261234][T16555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.274974][T16555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.284247][T16555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.293748][T16555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.302743][T16555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.343369][T16555] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht'
[  311.374537][T16555] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht'
[  311.383683][ T6205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.393666][ T6205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.414629][ T6202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.424141][ T6202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.434848][T16566] veth0_vlan: entered promiscuous mode
[  311.446027][ T5244] Bluetooth: hci3: command tx timeout
[  311.461642][T16566] veth1_vlan: entered promiscuous mode
[  311.511562][T16566] veth0_macvtap: entered promiscuous mode
[  311.524844][T16566] veth1_macvtap: entered promiscuous mode
[  311.541013][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  311.552241][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.562858][T16566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  311.576131][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.587594][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.598809][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.609573][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.619419][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.630395][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.640314][T16566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  311.650754][T16566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  311.661749][T16566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  311.673037][T16566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  311.682355][T16566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.691872][T16566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.701328][T16566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.732093][T16566] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht'
[  311.753823][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.756458][T16566] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht'
[  311.762343][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.799477][ T6202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.807987][ T6202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.700830][ T6205] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.097872][T16566] syz-executor (16566) used greatest stack depth: 17200 bytes left
[  314.166474][ T6202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  316.112648][ T6205] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.175436][ T6205] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.233261][ T6205] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.330799][ T6205] bridge_slave_1: left allmulticast mode
[  316.341075][ T6205] bridge_slave_1: left promiscuous mode
[  316.346861][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.355560][ T6205] bridge_slave_0: left allmulticast mode
[  316.364246][ T6205] bridge_slave_0: left promiscuous mode
[  316.370622][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.511296][ T6205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.524139][ T6205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.534392][ T6205] bond0 (unregistering): Released all slaves
[  316.888138][ T6205] hsr_slave_0: left promiscuous mode
[  316.894083][ T6205] hsr_slave_1: left promiscuous mode
[  316.930039][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.937485][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.945242][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.963517][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.981728][ T6205] veth1_macvtap: left promiscuous mode
[  316.989174][ T6205] veth0_macvtap: left promiscuous mode
[  316.994920][ T6205] veth1_vlan: left promiscuous mode
[  317.002364][ T6205] veth0_vlan: left promiscuous mode
[  317.256445][ T6205] team0 (unregistering): Port device team_slave_1 removed
[  317.289807][ T6205] team0 (unregistering): Port device team_slave_0 removed
[  317.741261][ T6205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.802553][ T6205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.851958][ T6205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.912326][ T6205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.000927][ T6205] bridge_slave_1: left allmulticast mode
[  318.009548][ T6205] bridge_slave_1: left promiscuous mode
[  318.015252][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.029364][ T6205] bridge_slave_0: left allmulticast mode
[  318.035017][ T6205] bridge_slave_0: left promiscuous mode
[  318.040774][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.184815][ T6205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.198305][ T6205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.211019][ T6205] bond0 (unregistering): Released all slaves
[  318.562653][ T6205] hsr_slave_0: left promiscuous mode
[  318.568622][ T6205] hsr_slave_1: left promiscuous mode
[  318.574479][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.605326][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.613137][ T6205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.622760][ T6205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.641823][ T6205] veth1_macvtap: left promiscuous mode
[  318.648933][ T6205] veth0_macvtap: left promiscuous mode
[  318.654523][ T6205] veth1_vlan: left promiscuous mode
[  318.659978][ T6205] veth0_vlan: left promiscuous mode
[  318.913059][ T6205] team0 (unregistering): Port device team_slave_1 removed
[  318.939987][ T6205] team0 (unregistering): Port device team_slave_0 removed