last executing test programs:

7.018748274s ago: executing program 4 (id=2765):
r0 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$fou(0x0, r0)
r1 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112cb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r2, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)

6.644237629s ago: executing program 4 (id=2769):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x143)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="050000000000000071116a00000000008510000002000000850000000000000095000000004000009500a50500000000a7664ace88f3284baf71dcbb2b4b93597f6140cc51c69be1716632ceda93db3759730d8e75e39d0f2a4a632779f37ed3533b810aaac5bc2342fdad4195d0b33262e612a44586bb43760f4c160300fd2f7b56aeccce810dd780f165418b21064d5fb25009b49ab193b379af3a629249cf112993c3938e0ef5a93fee6fe1a3cab7c320"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc7, &(0x7f00000000c0)=""/199, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

6.404181896s ago: executing program 4 (id=2771):
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x8100}, @void, @llc={@snap={0x0, 0xff, 'Uy', "9d87a1", 0x80f3, "9554e8bde55b46327038a0f58e3e7c0a3269760ff6cafbf2cf5be39dd59ce10d7c89c7d6affcc3f38c95f7f1975691942366a602e072d766015b82b7a189aefc9627b4cba6c55bfe86817086b9be985556ccbae194c8cab50707488c915ee336677bcff8284f0aa49967489232733b230b484e689bccda8db8882eb484e7c52e763d5872c5416f7d2b947bb2b2488f1fb457e537560eafc6d199e76eb15001f7012d6c89f023d55aec11c8"}}}, 0xb8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_TID={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f0000000200)={'veth1_vlan\x00', 0x600})
recvmmsg(0xffffffffffffffff, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000005c0)=""/75, 0x4b}, {&(0x7f0000000640)=""/88, 0x58}], 0x7, &(0x7f0000000740)=""/97, 0x61}, 0xe}, {{&(0x7f00000007c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/37, 0x25}], 0x3}, 0x9}, {{&(0x7f0000001980)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)=""/207, 0xcf}, {&(0x7f0000001b00)=""/53, 0x35}], 0x2}, 0x3}, {{&(0x7f0000001b80)=@sco, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c00)=""/90, 0x5a}, {&(0x7f0000001c80)=""/108, 0x6c}, {&(0x7f0000001d00)=""/38, 0x26}, {&(0x7f0000001d40)=""/211, 0xd3}], 0x4, &(0x7f0000001e80)=""/245, 0xf5}, 0x47}, {{&(0x7f0000001f80)=@tipc=@id, 0x80, &(0x7f0000003540)=[{&(0x7f0000002000)=""/235, 0xeb}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/222, 0xde}, {&(0x7f0000003200)=""/138, 0x8a}, {&(0x7f00000032c0)=""/78, 0x4e}, {&(0x7f0000003340)=""/212, 0xd4}, {&(0x7f0000003440)=""/233, 0xe9}], 0x7, &(0x7f00000035c0)=""/55, 0x37}, 0x7}, {{&(0x7f0000003600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000003680)}, {&(0x7f00000036c0)=""/100, 0x64}, {&(0x7f0000003740)=""/68, 0x44}, {&(0x7f00000037c0)=""/154, 0x9a}, {&(0x7f0000003880)=""/64, 0x40}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x6}, 0x200}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004940)=""/16, 0x10}, {&(0x7f0000004980)=""/241, 0xf1}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/251, 0xfb}, {&(0x7f0000005b80)=""/151, 0x97}], 0x5}, 0x6}, {{&(0x7f0000005cc0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000005d40)=""/101, 0x65}], 0x1, &(0x7f0000005e00)=""/80, 0x50}}], 0x8, 0x2100, &(0x7f0000006080)={0x0, 0x989680})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000060c0))
accept4$alg(r2, 0x0, 0x0, 0x1800)
getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000006100)=0x8, &(0x7f0000006140)=0x4)
getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000006180)=@assoc_value={0x0, 0x4}, &(0x7f00000061c0)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006240), r0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000063c0)={&(0x7f0000006200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006380)={&(0x7f0000006280)={0xf4, r5, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x34eae070}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x700}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x85}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff2}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40044}, 0x4000010)
getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000006400)={'filter\x00', 0x0, [0xd194, 0x6, 0x4]}, &(0x7f0000006480)=0x44)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000006500), r0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000006600)={&(0x7f00000064c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000065c0)={&(0x7f0000006540)={0x54, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x44000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000006700)={&(0x7f0000006640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x1c, r6, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000006780), r7)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000006840)={&(0x7f0000006740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000006800)={&(0x7f00000067c0)={0x28, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x1)
r9 = accept4$bt_l2cap(r2, &(0x7f0000006880)={0x1f, 0x0, @fixed}, &(0x7f00000068c0)=0xe, 0x800)
getsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f0000006900)=0xa, &(0x7f0000006940)=0x2)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000069c0)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r4, &(0x7f0000006ac0)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006a00)=@ipv4_newroute={0x4c, 0x18, 0x4, 0x70bd2b, 0x25dfdbff, {0x2, 0x80, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2, 0x3000}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_IIF={0x8, 0x3, r10}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_DST={0x8, 0x1, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0x8}, @RTA_FLOW={0x8, 0xb, 0x7fff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x40)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000006b00)={0x7d, 0x4, 0x2d7}, 0xc)
unshare(0x2020080)
syz_genetlink_get_family_id$SEG6(&(0x7f0000006b40), 0xffffffffffffffff)

6.105648932s ago: executing program 4 (id=2776):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40820, 0x0)
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000100)={'tunl0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x34, 0x11, 0x1, 0xffffffef, 0x0, {0x7, 0x0, 0x0, r3, 0xc440, 0x40000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x11, 0x0, 0x0, 0x18000}]}}]}]}, 0x34}}, 0x0)

5.851181117s ago: executing program 4 (id=2782):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x303002, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000004c0)={'pimreg1\x00', 0x10})
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000300)={0x401, {{0xa, 0x4e23, 0x7, @local}}, {{0xa, 0x4e22, 0x201, @loopback, 0xd351}}}, 0x108)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'gre0\x00', <r7=>0x0})
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r9=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f00000002c0)={r9, 0x7}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r11, &(0x7f0000000000), 0x0}, 0x20)
r12 = openat$cgroup_freezer_state(r10, &(0x7f0000000140), 0x2, 0x0)
sendfile(r12, r12, 0x0, 0x9)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100fcffffff0000000007000000", @ANYRES32=r7, @ANYBLOB="00ff00000a00020000000000004000"/24], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x48000)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r8, 0xf517, 0x0)

5.512065552s ago: executing program 4 (id=2786):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000480)=ANY=[@ANYRES32=r0], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
syz_emit_ethernet(0x1e, &(0x7f0000000380)=ANY=[@ANYBLOB="4b2b27a85de7bbbbbbbbbbbb000c02000000070000104df570df7a0d85d7", @ANYRESOCT], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
recvfrom$inet(r6, &(0x7f0000000780)=""/58, 0x3a, 0x21, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="100000000b14000225bd7000fddbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8041)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5218)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYRES16=r2, @ANYRES32=r4, @ANYRESHEX=r7], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r10, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="140c0000", @ANYRES16=r11, @ANYBLOB="e04819bddf25"], 0x14}, 0x1, 0x0, 0x0, 0x4000003}, 0x8080)
ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000000000)={0x1, 0x6})

5.20437942s ago: executing program 3 (id=2788):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "e56b92552ef743cb", "22b5e61c7adf249ed4e5d7d462f2a07f", "010100", "720dbf9f4087f9b8"}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd700001dcdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendto$netrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
read(r0, &(0x7f0000000040)=""/66, 0x42)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet6(r7, &(0x7f0000000740)={&(0x7f0000000380)={0xa, 0x4e21, 0x1, @empty, 0x9}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000400)="92fb0ce4b18370c6c5878d1a24fcdf7f58b67022e1c6279845561b1428987b42e21f", 0x22}, {&(0x7f0000000440)="2151b8f79f45a4d823bb8d70c514208fc9edf86d8b04b4772cb0d85d79a1399d4880f158293c3facb7895602c87eaad9581536e03fcef8ed3d21a6adb71658e7ed7fbd3762949c2ce771ac30a90deb74593fbfdc439585bef9ee4a9236b82e8f97630441618369", 0x67}, {&(0x7f00000004c0)="a95ee533f6952d65e51e9790638c4266a8605a26a36a503af399cb049b274174d655fe9c25ca938496a7cb8eca474f2fe62e2229b3b904d9d4d876de1298a41377ba3c42cf840e8435f606e52c6388bd88d4027c40678e974c561208482dd58727ea623feef9d6c8d1b0ffb38837c365ea0c3c1f7421fddbe283f42f3fe4bbe0aeefe52d326e3176f9676c09867f8ea8c8cf98ef64598092b592d7fd95fc600c48114dfa5bf25491be21a89547d90d9beb0bace2c0a5ce26235425538263c7c7812d32efd503efa95d7e72cadb22fae73b063f6428d9edcaeea9030d1682901c61dda9909422f213", 0xe8}], 0x3, &(0x7f0000000640)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x73, 0xa, 0x5, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}], 0x90}, 0x4002)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0)
getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x24, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x220008e8}, 0x0)
sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x3, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "0334c6d707f7ae45"}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x1)
splice(r0, 0x0, r5, 0x0, 0x7ffd, 0xe)
socket$netlink(0x10, 0x3, 0x0)

4.087546188s ago: executing program 3 (id=2800):
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000280)=@mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x2}, @broadcast, @device_a, @initial, {0x6, 0x4}}, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x3d, "c956cc2f912b443244f43090f8997eb19d2eff82a3ab76a4d3920e641d4df12af843cf233ca0ca95e4e30260a6244dc33bb561d05f8228c3ed0a4ad93f"}, {0xdd, 0xe8, "b5b55a7d7c77fe512c6857df32634c4bb6d65803b35d6533da977ed5a8616914d56d8fa50e0dbdedcd9ee32fb25dc0aac10c9e36e8fdacd727408e19c6c2f07de966465bead1e47a461b215915322ebd9367cc06e37a0718cff68e825e8f46ac1560062d5d6e60bfa025757b7ef6ae54b977228069d6a3bae57066f727142ab5ef1a44d1b675c7f6c520a7d93ddbc7df78d9a8105b62aa1d16237ddbea36963c45da44033caccc40491e8a326724adfb7cc3952751409eaad4f698fe60e77092e643c638e2124be537849efcb31491edabafa410815c6e530533058ffaafb0b99172e5b8ac56c204"}, {0xdd, 0x5e, "2f09dd8846055a76e30c9f155024661eb394e3e7fdf88167f0c4956e7a4d081910012b8d5cbb2bcc62c34da397b3e0c7dc5334b17d71ded93dac63557415636646c58f9da5a84071b56e34b13f75789c5c142947f9c1d86a209ab780a20a"}, {0xdd, 0x9b, "de16217baa38d91f731d6d41204bb796933d759ead0228551ca5ed259331fb7aac068e5cfe5a12020a6214f1c95de8374e8ef90f323f0f4e6d306349a78aaac55ca22e3bded81f38e432910e79b93f974316a1bf8f1bd723b15e4d758aa30ddebc3cb0bbc8ba63029000dfaad982d3e61f51cd898a1c0fa8f7ac180a187cf9a001283732938a0f1c895f506f54d4384672aba9ff6c11d051245d59"}, {0xdd, 0x34, "7781a2bf869ad0aaaf2fe79c372c207d047ce3720e0b945d95630ceec2b93632e81955fcaa841bfff7933f8f3d4911d89697492b"}]}, 0x284)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

3.405985321s ago: executing program 2 (id=2804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0xa, 0x2, 0xbb, 0xffffff4b}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x24004884)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="0c000d800600"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0xa, 0x2, 0xbb, 0xffffff4b}, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x24004884) (async)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="0c000d800600"], 0x24}, 0x1, 0x5502000000000000}, 0x0) (async)

3.196582923s ago: executing program 2 (id=2807):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0x0)
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000540)=""/72, 0x48}], 0x1, 0x9, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x5c, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x891b, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)

3.195834057s ago: executing program 3 (id=2808):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getlink={0x3c, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x35dee}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

3.019505422s ago: executing program 2 (id=2811):
r0 = socket(0x1e, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000100)={r1, r1, 0x38e, 0xea, &(0x7f0000000000)="fb8201a0420531436a3adf4ca17d92c29f84148e8c58e7eff96cf6c9167e3f62a834f47125fe1ffbda0f7847c123989d0bdc5ed903b15da91f36d52e3580bc5b5e088e29eb270ebe4f2daff8610d8a3c8807a14b2558722146bfe2d249489793078d1d9cc4a64e40a7a9436a0f3383063e520e9f2c08d107c259587812d6e8ac9a0266212d8975aceec9c7434c014b00a3dcb4c4b9d155f0a3a0cac4830b18e48c116bbe6e213e60ca92690a4b343062b3b2df8e344980d0ef4b19064ddfbd3ca87e2dd670f7c81ae416fcbef1d95493cdacdaaf8cea21ec487fcd822b36bbfb4253e0b1a6c248ea6dd8", 0x9, 0x4, 0x4, 0x42a, 0x0, 0x3, 0x3e27, 'syz0\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r3}, 0x20)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

2.877033133s ago: executing program 3 (id=2813):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x4000000, 0x5, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}}, 0x20048000)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r6, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x4b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x10010}, 0x80)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000380)='wg1\x00', 0x4)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.664192136s ago: executing program 1 (id=2814):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b}], {0x14}}, 0xcc}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

2.625868366s ago: executing program 0 (id=2815):
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x2}}, 0x10) (async)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x2}}, 0x10)
r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000180)=0x10, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x4, 0x3, 0x3}, 0x10)
clock_gettime(0x0, &(0x7f0000000200)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, &(0x7f0000000240)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="04000000180000060000000000000000", @ANYRES64=r1, @ANYRES64=r2/1000+10000, @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYBLOB="040000a0010000000200002036020000daa6ff44ce449d4c5cd6ff9183d8125e19c58e03632838f69a35eb8cfa8976e4c1d8f54a51d0d2d7beaea8d8f875ce69f4723c3c626c5731b96164fd3a3b74d3"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0x10, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="04000000180000060000000000000000", @ANYRES64=r1, @ANYRES64=r2/1000+10000, @ANYRES64=r3, @ANYRES64=r4/1000+10000, @ANYBLOB="040000a0010000000200002036020000daa6ff44ce449d4c5cd6ff9183d8125e19c58e03632838f69a35eb8cfa8976e4c1d8f54a51d0d2d7beaea8d8f875ce69f4723c3c626c5731b96164fd3a3b74d3"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x1, 0xfffffffa, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x6472333b}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x20000040)

2.505701376s ago: executing program 1 (id=2816):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r1)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000040)={0x114, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xac}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40004}, 0x884)

2.452171057s ago: executing program 3 (id=2817):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x2, 0x0) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x4b3e, 0x4) (async)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x4b3e, 0x4)
ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x93}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}, @TCA_CODEL_TARGET={0x8, 0x1, 0x10000}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x288f}]}}]}, 0x6c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x93}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}, @TCA_CODEL_TARGET={0x8, 0x1, 0x10000}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x288f}]}}]}, 0x6c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x7, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x81}}]}, 0x2c}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="010002"]) (async)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="010002"])
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket(0x2, 0x3, 0xff) (async)
socket(0x2, 0x3, 0xff)

2.383477348s ago: executing program 0 (id=2818):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000006680)=""/4128, 0x1020}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000001a00)=""/4107, 0x100b}, {&(0x7f0000005640)=""/4098, 0x1002}, {&(0x7f0000000440)=""/105, 0x69}], 0x4}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40012020, 0x0)

2.353897146s ago: executing program 1 (id=2819):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000000000000000000000000001971121a00000000000000000000000000a54d4621edd7f9003de5e9ecf257e43ba2abe6afd35a0ec7b3d2b43ac8f1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x28, 0x20, 0x301, 0x70bd2c, 0x25dfdc11, {0x2, 0x0, 0xa0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048054}, 0x0)

2.128385703s ago: executing program 1 (id=2820):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x5, 0x2, 0x0, 0x7f, 0x9c4, 0x4, 0x8, 0xe16}, 0xfffffffffffffffd, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, 0x0, &(0x7f0000000180))
setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0x2, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='wlan1\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)

2.127944655s ago: executing program 2 (id=2821):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x4c, r0, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000020d76b3e3fb966a11238537a826f42f5454a6bd2e7405aba2223fabe52b1ccff4f4e6e9ff115a87318e7bb4cfe3d28a80d249fb4391f88b64ab951e5edecd4cefc0c8aaf60dc4b00c57321847100cc7b1d54fbfbb822a122", @ANYRES16=r2, @ANYBLOB="00032abd7000ffdbdf250f00000018000180140002006272696467655f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8040)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYRES16=r2, @ANYRESDEC=r2, @ANYRES8=r3, @ANYBLOB="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", @ANYBLOB="077ebbe30d8fefe30682ef6eaed96f335fbb2b8f4cfcfe71b87cc2058f878261965e02975245056a4472a9568307e06a6f5b58f88eca2562ad2af8a3649463ccdf2446ecda7b19b52a93296d6e7002a367bf8b940cb409982edfa38d2010d1df6cbd264b473c858d0faf0207c966ec961fb702", @ANYRES8=r5, @ANYRES64=r4, @ANYRES64=r6], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20008040)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x222, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x4004010)

2.046078034s ago: executing program 1 (id=2822):
socket(0x2a, 0x2, 0x0) (async)
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x2004c840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x2004c840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.020735434s ago: executing program 3 (id=2823):
unshare(0x26020480)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x40000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a000769000200000000000000000005"], 0x18}}, 0x0)

1.959920781s ago: executing program 0 (id=2824):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x0, @f={0x0, 0x0, 0x5, 0x2, 0x4, 0x2, 0x9, {0x5, 0x96, "2db3d6f494229c119d5a24b7863c5e3d97a726c4a774075d7f06d71b7496c1b241f770fe78713182d9c49599651f3b242b432efd458a3120b28ea48e7d839368ee52997c935f23319c3a17839440e844da5be1295741682391fffac3d2dbe94c35609813dda0b5f22ff4d1e70660d50c6f0e74ca641b6cc03cef90c9fb414caaa53ffa60291a75a7a35e7bb8c1279673254a63c4e634"}, 0x3, 0x9, 0x7, 0xff, 0x5f, "fff6245cc76e7f36ef32fc8495506e86df1064d2f38a74f7a4083b5afe50b93020e34509a62a6f40c709e33f88069429c0689c9099e793097fa72fa86a0bc6202d2729fa62e2a4c22976cc02b3a3c76506bffce9ea4f81a27587bf0f1f4b64"}}, 0x106) (async)
r1 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@ethernet={0x0, @random}, &(0x7f0000000000)=0x80, 0x80800) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r5=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'pimreg\x00', <r6=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x45, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000f40)={r8, r0}) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async)
r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40), 0x8) (async)
r12 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001a14010002000000fcdbdf2508004b0013000000080001000000000008004f0000000000080015000400000008000300"], 0x38}}, 0x80)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r14=>0x0})
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r15, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_GET_REG(r11, &(0x7f0000000f00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x3e8, r15, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}, @NL80211_ATTR_REG_RULES={0x144, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8001}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xf}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffff0ae}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x68f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd5}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_REG_RULES={0xd4, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xfd}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_REG_RULES={0x188, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x93a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xbbd0}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffeff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xdb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10}]}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6f9b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9f5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x87}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x800}, 0x1)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000740)=<r16=>0x0, &(0x7f0000000780)=0x4) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x170, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000)

1.904889381s ago: executing program 2 (id=2825):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r2, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r3, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x706d9}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x12)

1.873994933s ago: executing program 0 (id=2826):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) (async, rerun: 32)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) (async, rerun: 32)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 32)
recvmmsg$unix(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{}, {&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000200)=""/88, 0x58}, {&(0x7f00000003c0)=""/91, 0x5b}], 0x4, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}], 0x1, 0x10000, 0x0) (async, rerun: 32)
ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22ffff)

896.141252ms ago: executing program 0 (id=2827):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x2004c000) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async)
write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) (async)
r3 = getgid()
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r3) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'})

303.908352ms ago: executing program 1 (id=2828):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in=@multicast2, 0x4e22, 0x0, 0x4e21, 0x36, 0xa, 0x57f701f6f8bcfb1f, 0x20, 0x2b, 0x0, r5}, {0xb, 0x91f, 0x3, 0x4, 0x1, 0x1f2, 0x3d, 0x6}, {0x7, 0x6, 0x697, 0x7}, 0x7, 0x6e6bbe, 0x1, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x4d4, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3502, 0x0, 0x2, 0x5, 0xffffffff, 0x400}}, 0xe8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x4, 0xffffffd6, 0x74, 0x17b5, 0x0, 0x7}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "b67e"}, @TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x4, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

75.316799ms ago: executing program 2 (id=2829):
syz_emit_ethernet(0xd6e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xd38, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x87, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x17, "122b472e41e24b11f34b608816e522a7f3032efcb5633a3983e172d7dbb1cedeea00156dbf01dbd8e49e39e8fd54a9300113f16b56fd3ece899e2dff0f1443afc40da882e5a3d76d593c09402a0de4f7b9fcbd9c0f4b968122455e34e1afa222c60b04a9f2bfd548605a711678755475861538b9de80bb31e39fd8d5ba7fc1988c850ba77307a7519940fc99f9a55be09c10cf4bce1ecfeb8a12772325a7c3d35e786a6518357d8754da82aac43dba342a23914b38c05e"}, {0x22, 0x18c, "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"}]}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r1}]}}}]}, 0x40}}, 0x0)

0s ago: executing program 0 (id=2830):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000200)=0x8)
setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ppoll(&(0x7f0000000180)=[{r3}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000000c0)=0xeed8e09ecfe7acd0)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r7, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x4000000)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000280)="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")
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x4, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x24000044)
sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0)
r10 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet6_tcp_SIOCATMARK(r10, 0x5411, &(0x7f0000000040))
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000240), {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@broadcast, @local, 0xff, 0xffffffff, 0x10, 0x9, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x7, 0x0, 0x6, 0x42d5, 0x1, 0x5, 'ip6tnl0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x12}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @broadcast}}}, {{@arp={@local, @loopback, 0xffffffff, 0x1000001ff, 0xf, 0xc, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x2, 0xff, 0x4, 0xe, 0x29c, 'veth1_to_hsr\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x1dc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e22ccc4e42dc", @empty, @loopback, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

kernel console output (not intermixed with test programs):

34][ T8135] batadv0: entered allmulticast mode
[  164.208730][ T8135] macvlan0: left promiscuous mode
[  164.215941][ T8135] batadv0: left promiscuous mode
[  164.255500][ T8144] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  164.307729][ T8134] netlink: 'syz.2.609': attribute type 1 has an invalid length.
[  164.644940][ T8166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.044639][ T8187] hsr0 speed is unknown, defaulting to 1000
[  165.492344][ T8209] netlink: 'syz.3.625': attribute type 1 has an invalid length.
[  165.506086][ T8208] __nla_validate_parse: 8 callbacks suppressed
[  165.506108][ T8208] netlink: 55 bytes leftover after parsing attributes in process `syz.0.624'.
[  165.527577][ T8209] netlink: 224 bytes leftover after parsing attributes in process `syz.3.625'.
[  165.550713][ T8210] netlink: 'syz.3.625': attribute type 10 has an invalid length.
[  165.820618][ T8210] bridge_slave_1: left allmulticast mode
[  165.841978][ T8210] bridge_slave_1: left promiscuous mode
[  165.849118][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.887136][ T8210] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  165.897196][ T8216] : renamed from hsr0 (while UP)
[  166.374631][ T8247] sctp: [Deprecated]: syz.2.633 (pid 8247) Use of int in max_burst socket option.
[  166.374631][ T8247] Use struct sctp_assoc_value instead
[  166.537153][ T8254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.635'.
[  166.573540][ T8255] Bluetooth: MGMT ver 1.23
[  166.586268][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'.
[  166.605160][ T8255] openvswitch: netlink: IP tunnel dst address not specified
[  167.404704][ T8289] syzkaller1: entered promiscuous mode
[  167.429092][ T8289] syzkaller1: entered allmulticast mode
[  167.846837][ T8306] dvmrp0: entered allmulticast mode
[  167.907304][ T8312] sctp: [Deprecated]: syz.1.655 (pid 8312) Use of int in max_burst socket option.
[  167.907304][ T8312] Use struct sctp_assoc_value instead
[  167.934420][ T8313] netlink: 'syz.3.654': attribute type 9 has an invalid length.
[  168.123751][ T8322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.657'.
[  168.380612][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'.
[  168.445818][ T8330] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  168.491739][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.662'.
[  168.508916][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'.
[  168.538681][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.663'.
[  168.598755][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'.
[  168.794857][ T8357] netlink: 'syz.4.669': attribute type 178 has an invalid length.
[  168.866057][ T8357] netlink: 'syz.4.669': attribute type 178 has an invalid length.
[  169.163607][ T8380] netlink: 'syz.1.677': attribute type 1 has an invalid length.
[  169.179746][ T8382] netlink: 'syz.1.677': attribute type 1 has an invalid length.
[  169.214666][ T8380] netlink: 'syz.1.677': attribute type 4 has an invalid length.
[  169.247560][ T8382] netlink: 'syz.1.677': attribute type 4 has an invalid length.
[  169.257345][ T8387] netlink: 'syz.0.676': attribute type 10 has an invalid length.
[  169.291009][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.312727][ T8387] bridge_slave_1: left allmulticast mode
[  169.325354][ T8387] bridge_slave_1: left promiscuous mode
[  169.339599][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.416466][ T8387] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  169.756081][ T8409] xt_policy: too many policy elements
[  169.946399][ T8419] bridge_slave_0: left allmulticast mode
[  169.980404][ T8419] bridge_slave_0: left promiscuous mode
[  169.986274][ T8419] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.038524][ T8425] openvswitch: netlink: Message has -1 unknown bytes.
[  170.287549][ T8433] 8021q: adding VLAN 0 to HW filter on device bond1
[  170.527547][ T8443] netlink: 'syz.2.694': attribute type 4 has an invalid length.
[  170.559293][ T8443] netlink: 'syz.2.694': attribute type 4 has an invalid length.
[  170.801764][ T8462] xt_l2tp: invalid flags combination: 0
[  170.944400][ T8468] netlink: 'syz.3.704': attribute type 4 has an invalid length.
[  170.955649][ T8464] __nla_validate_parse: 8 callbacks suppressed
[  170.955669][ T8464] netlink: 132 bytes leftover after parsing attributes in process `syz.2.702'.
[  171.459216][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.711'.
[  171.766704][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'.
[  172.428583][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'.
[  172.501493][ T8528] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.071948][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'.
[  173.252817][ T8556] netlink: 152 bytes leftover after parsing attributes in process `syz.1.730'.
[  173.813172][ T8572] syzkaller0: entered promiscuous mode
[  173.818728][ T8572] syzkaller0: entered allmulticast mode
[  173.826699][ T8582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.846037][ T8588] netlink: 96 bytes leftover after parsing attributes in process `syz.2.739'.
[  173.856345][ T8588] 8021q: VLANs not supported on sit0
[  173.887352][ T8572] tipc: Resetting bearer <eth:syzkaller0>
[  174.026277][ T8596] validate_nla: 2 callbacks suppressed
[  174.026295][ T8596] netlink: 'syz.3.740': attribute type 24 has an invalid length.
[  174.052059][ T8598] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  174.215940][ T8605] netlink: 'syz.2.743': attribute type 1 has an invalid length.
[  174.237631][ T8605] netlink: 'syz.2.743': attribute type 1 has an invalid length.
[  174.305777][ T8570] tipc: Resetting bearer <eth:syzkaller0>
[  175.133263][ T8626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.750'.
[  175.753858][ T8570] tipc: Disabling bearer <eth:syzkaller0>
[  175.766107][ T8617] IPVS: Error joining to the multicast group
[  175.777409][ T8625] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  175.963571][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.752'.
[  175.991556][ T8635] xt_policy: too many policy elements
[  176.118929][ T8640] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  176.743763][ T8677] netlink: 240 bytes leftover after parsing attributes in process `syz.3.763'.
[  176.835352][ T8666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  176.948257][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.766'.
[  177.390585][ T8716] netlink: 104 bytes leftover after parsing attributes in process `syz.2.771'.
[  177.420663][ T8712] syzkaller1: entered promiscuous mode
[  177.421341][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'.
[  177.426177][ T8712] syzkaller1: entered allmulticast mode
[  177.566182][ T8723] 8021q: VLANs not supported on lo
[  177.681467][ T8726] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  177.884897][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.778'.
[  177.977082][ T8741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.022830][ T8741] syzkaller0: entered promiscuous mode
[  178.031114][ T8739] Bluetooth: hci0: Opcode 0x080f failed: -4
[  178.048832][ T8741] syzkaller0: entered allmulticast mode
[  178.092342][ T8741] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  178.149544][ T8751] vcan0: tx drop: invalid da for name 0x0000000000000001
[  178.200692][ T8741] tipc: Resetting bearer <eth:syzkaller0>
[  178.273445][ T8740] tipc: Resetting bearer <eth:syzkaller0>
[  178.293410][ T8754] Driver unsupported XDP return value 0 on prog  (id 191) dev N/A, expect packet loss!
[  178.377627][ T8740] tipc: Disabling bearer <eth:syzkaller0>
[  178.691665][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'.
[  178.741674][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'.
[  178.765993][ T8781] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000
[  178.776169][ T8776] netlink: 'syz.2.792': attribute type 3 has an invalid length.
[  179.176859][ T8800] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.798'.
[  179.260478][ T8800] netlink: 256 bytes leftover after parsing attributes in process `syz.4.798'.
[  179.449701][ T8814] netlink: 'syz.2.801': attribute type 21 has an invalid length.
[  179.620248][ T8814] netlink: 'syz.2.801': attribute type 6 has an invalid length.
[  179.957995][ T8837] tun0: tun_chr_ioctl cmd 1074025675
[  179.969233][ T8837] tun0: persist disabled
[  179.978707][ T5864] Bluetooth: hci0: command 0x0c1a tx timeout
[  180.412059][ T8857] bridge1: entered promiscuous mode
[  180.417331][ T8857] bridge1: entered allmulticast mode
[  180.437453][ T8865] netlink: 'syz.0.816': attribute type 1 has an invalid length.
[  180.474055][ T8865] netlink: 'syz.0.816': attribute type 1 has an invalid length.
[  180.533105][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.551390][ T8872] unsupported nlmsg_type 40
[  180.715118][ T8878] netlink: 'syz.4.819': attribute type 2 has an invalid length.
[  180.738702][ T8878] netlink: 'syz.4.819': attribute type 1 has an invalid length.
[  180.878255][ T8886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.894320][ T8878] 8021q: adding VLAN 0 to HW filter on device bond2
[  180.982515][ T8892] __nla_validate_parse: 5 callbacks suppressed
[  180.982534][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'.
[  181.018302][ T8899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.826'.
[  181.395381][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'.
[  181.479756][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'.
[  181.906060][ T8948] netlink: 'syz.3.838': attribute type 1 has an invalid length.
[  181.914209][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'.
[  181.923504][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'.
[  182.146628][ T8953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.179827][ T8953] syzkaller0: entered promiscuous mode
[  182.186966][ T8953] syzkaller0: entered allmulticast mode
[  182.205040][ T8953] syzkaller0: mtu less than device minimum
[  182.774268][ T8945] tipc: Resetting bearer <eth:syzkaller0>
[  182.871802][ T8985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.849'.
[  182.894900][ T8945] tipc: Disabling bearer <eth:syzkaller0>
[  183.209182][ T9003] nft_compat: unsupported protocol 0
[  183.414406][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'.
[  183.803687][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'.
[  183.846206][ T9032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.863'.
[  183.893384][ T9032] gretap2: entered promiscuous mode
[  183.919375][ T9032] gretap2: entered allmulticast mode
[  184.043925][ T9032] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  184.491889][ T9053] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  184.517803][ T9053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.688408][ T9061] ip6gre0: Master is either lo or non-ether device
[  184.699604][  T980] hid (null): global environment stack underflow
[  184.727119][ T9060] dvmrp0: left allmulticast mode
[  184.764555][  T980] hid-generic 0005:04F3:1810.0001: global environment stack underflow
[  184.824880][  T980] hid-generic 0005:04F3:1810.0001: item 0 4 1 11 parsing failed
[  184.864106][ T9062] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  184.864214][   T30] audit: type=1800 audit(1758816204.190:2): pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.868" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  184.896621][  T980] hid-generic 0005:04F3:1810.0001: probe with driver hid-generic failed with error -22
[  184.912253][ T9062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  184.928225][ T9062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.087723][ T9079]  speed is unknown, defaulting to 1000
[  185.726526][ T9102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.037792][ T9128] __nla_validate_parse: 4 callbacks suppressed
[  186.037812][ T9128] netlink: 56 bytes leftover after parsing attributes in process `syz.1.884'.
[  186.176283][ T9133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.641808][ T9158] netlink: 'syz.2.892': attribute type 5 has an invalid length.
[  186.754054][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'.
[  186.784471][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'.
[  186.803370][ T9164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.890'.
[  186.970565][ T9174] netlink: 'syz.3.896': attribute type 15 has an invalid length.
[  187.001334][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.896'.
[  187.020094][ T9176] syz_tun: entered allmulticast mode
[  187.163127][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'.
[  187.188504][ T9181] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.898'.
[  187.216348][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'.
[  187.362684][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.898'.
[  187.815168][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'.
[  187.840393][ T9217] netlink: 'syz.2.908': attribute type 5 has an invalid length.
[  187.854500][ T9175] syz_tun: left allmulticast mode
[  188.503399][ T9256] netlink: 'syz.3.920': attribute type 16 has an invalid length.
[  188.512578][ T9253] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  188.549814][ T9253] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  188.561174][ T9256] netlink: 'syz.3.920': attribute type 17 has an invalid length.
[  188.635112][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.642444][ T9256] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.664277][ T9256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.843504][ T9271] netlink: 'syz.1.924': attribute type 1 has an invalid length.
[  188.942364][ T9278] vlan3: entered allmulticast mode
[  188.966330][ T9278] erspan0: entered allmulticast mode
[  189.010801][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.238079][ T9291] netlink: 'syz.3.930': attribute type 1 has an invalid length.
[  189.289407][ T9284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.308204][ T9284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.321991][ T9284] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  189.334776][ T9284] bond0 (unregistering): Released all slaves
[  189.375754][ T7642] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.402706][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.481379][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.764785][ T9314] netlink: 'syz.4.937': attribute type 9 has an invalid length.
[  189.774142][ T9317] syzkaller1: entered promiscuous mode
[  189.779654][ T9317] syzkaller1: entered allmulticast mode
[  189.918921][ T9314] netlink: 'syz.4.937': attribute type 9 has an invalid length.
[  189.929402][ T7638] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  189.970552][ T7638] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  189.989044][ T7638] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.068173][ T7638] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.231454][ T9334] nftables ruleset with unbound chain
[  190.457781][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.488459][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  190.572645][ T9351] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  191.170728][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  191.806570][ T9399]  speed is unknown, defaulting to 1000
[  191.837512][ T9404] __nla_validate_parse: 15 callbacks suppressed
[  191.837533][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'.
[  192.516819][ T9434]  speed is unknown, defaulting to 1000
[  192.827936][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'.
[  192.849681][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'.
[  192.868326][ T9444] netlink: 'syz.2.975': attribute type 5 has an invalid length.
[  192.869028][ T9448] netlink: 232 bytes leftover after parsing attributes in process `syz.0.977'.
[  192.921382][ T9444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.975'.
[  193.015279][ T9454] netlink: 'syz.4.978': attribute type 1 has an invalid length.
[  193.043790][ T9454] netlink: 224 bytes leftover after parsing attributes in process `syz.4.978'.
[  193.092902][ T9451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.976'.
[  193.117906][ T9454] netlink: 14 bytes leftover after parsing attributes in process `syz.4.978'.
[  193.120464][ T9444] geneve2: entered promiscuous mode
[  193.139223][ T9444] geneve2: entered allmulticast mode
[  193.236492][ T7634] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  193.539798][ T9454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.559876][ T9454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.580812][ T9454] bond0 (unregistering): Released all slaves
[  193.604127][ T7634] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  193.613323][ T7634] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  193.780524][ T7634] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  193.811409][ T9478] netlink: 'syz.1.986': attribute type 21 has an invalid length.
[  193.819209][ T9478] netlink: 128 bytes leftover after parsing attributes in process `syz.1.986'.
[  193.878010][ T9486] netlink: 'syz.1.986': attribute type 10 has an invalid length.
[  193.974639][ T9486] batman_adv: batadv0: Adding interface: team0
[  193.990118][ T9486] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.034696][ T9486] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  194.046131][ T9478] netlink: 'syz.1.986': attribute type 5 has an invalid length.
[  194.055316][ T9478] netlink: 3 bytes leftover after parsing attributes in process `syz.1.986'.
[  194.210233][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.549196][ T9502] team0: Port device dummy0 removed
[  194.571472][ T9502] bridge_slave_0: left allmulticast mode
[  194.577330][ T9502] bridge_slave_0: left promiscuous mode
[  194.587118][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.648130][ T9502] team0: Port device team_slave_0 removed
[  194.682554][ T9502] team0: Port device team_slave_1 removed
[  194.693011][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.706000][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.715581][ T9502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.724216][ T9502] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.742294][ T9502] bond2: (slave veth3): Releasing active interface
[  194.837192][ T9511]  speed is unknown, defaulting to 1000
[  195.046806][ T9520] netlink: 'syz.2.998': attribute type 4 has an invalid length.
[  195.268501][ T9530] syz_tun: entered allmulticast mode
[  195.682215][ T9529] syz_tun: left allmulticast mode
[  195.978092][ T9546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.258089][ T9567] netlink: 'syz.0.1011': attribute type 21 has an invalid length.
[  196.767242][ T9595] veth1_macvtap: left promiscuous mode
[  196.790213][ T9595] macsec0: entered promiscuous mode
[  196.795488][ T9595] macsec0: entered allmulticast mode
[  196.846290][ T9598] veth1_macvtap: entered promiscuous mode
[  196.864255][ T9598] veth1_macvtap: entered allmulticast mode
[  196.893497][ T9598] macsec0: left promiscuous mode
[  196.898715][ T9598] macsec0: left allmulticast mode
[  196.904194][ T9598] veth1_macvtap: left allmulticast mode
[  197.156717][ T9615] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  197.270938][ T9625] delete_channel: no stack
[  197.675245][ T9643] __nla_validate_parse: 8 callbacks suppressed
[  197.675265][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'.
[  197.742662][ T9646] openvswitch: netlink: IPv4 tun info is not correct
[  197.815882][ T9643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'.
[  198.351455][ T9669] netlink: 'syz.1.1044': attribute type 7 has an invalid length.
[  198.587178][ T9679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1048'.
[  198.649227][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1048'.
[  199.194593][ T9701] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.238411][ T9680] infiniband syz!: set down
[  199.243471][ T9680] infiniband syz!: added team_slave_0
[  199.384965][ T9701] tipc: Resetting bearer <eth:syzkaller0>
[  199.431268][ T9680] RDS/IB: syz!: added
[  199.436160][ T9680] smc: adding ib device syz! with port count 1
[  199.457749][ T9680] smc:    ib device syz! port 1 has pnetid 
[  199.501176][ T9713] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  199.574853][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  199.743951][ T9695] tipc: Disabling bearer <eth:syzkaller0>
[  200.109039][ T9734]  speed is unknown, defaulting to 1000
[  200.250241][ T9735] netlink: 2132 bytes leftover after parsing attributes in process `syz.1.1060'.
[  201.029143][ T9770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  201.533704][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'.
[  201.578749][ T9798] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  201.586506][ T5961] IPVS: starting estimator thread 0...
[  201.681181][ T9799] IPVS: using max 26 ests per chain, 62400 per kthread
[  201.976013][ T9812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.130172][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  202.269751][ T9820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1088'.
[  202.294045][ T9824] netlink: 'syz.1.1090': attribute type 1 has an invalid length.
[  202.319838][ T9824] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1090'.
[  202.448128][ T9832] netlink: 'syz.0.1092': attribute type 1 has an invalid length.
[  202.474904][ T9832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'.
[  202.489779][ T9832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.707580][ T9842] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  202.709661][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'.
[  202.783081][ T9840] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1095'.
[  202.811240][ T9840] gretap0: entered promiscuous mode
[  202.863669][ T9840] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1095'.
[  202.902842][ T9851] vlan4: entered promiscuous mode
[  202.908546][ T9851] vlan4: entered allmulticast mode
[  202.918479][ T9851] hsr_slave_1: entered allmulticast mode
[  202.929737][ T9840] 0ªî{X¹¦: renamed from gretap0
[  202.957554][ T9840] 0ªî{X¹¦: left promiscuous mode
[  202.974584][ T9840] 0ªî{X¹¦: entered allmulticast mode
[  202.998792][ T9840] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  203.700357][ T9880] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  203.701082][ T9874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.743761][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1108'.
[  203.887905][ T9886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1107'.
[  204.258477][ T9874] syzkaller0: entered promiscuous mode
[  204.264432][ T9874] syzkaller0: entered allmulticast mode
[  204.271203][ T9874] tipc: Resetting bearer <eth:syzkaller0>
[  204.583720][ T7642] tipc: Resetting bearer <eth:syzkaller0>
[  204.595018][ T9873] tipc: Resetting bearer <eth:syzkaller0>
[  204.616778][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'.
[  204.657721][ T9896] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  204.750172][    T9] tipc: Node number set to 1980299620
[  206.041569][ T9873] tipc: Disabling bearer <eth:syzkaller0>
[  206.051640][ T9891] 8021q: VLANs not supported on ip6gre0
[  206.061013][ T9892] veth1_macvtap: left promiscuous mode
[  206.493930][ T9911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.575082][ T9912] syzkaller0: entered promiscuous mode
[  206.591010][ T9912] syzkaller0: entered allmulticast mode
[  206.730898][ T9837]  speed is unknown, defaulting to 1000
[  206.846431][ T9910] tipc: Resetting bearer <eth:syzkaller0>
[  206.933007][ T9910] tipc: Disabling bearer <eth:syzkaller0>
[  207.142289][ T9930] netlink: 'syz.0.1119': attribute type 3 has an invalid length.
[  207.405908][ T9941] netlink: 'syz.4.1123': attribute type 27 has an invalid length.
[  207.475904][ T9942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.513655][ T9942] tipc: Disabling bearer <eth:syzkaller0>
[  207.815681][ T9953] netlink: 'syz.3.1127': attribute type 2 has an invalid length.
[  207.832635][ T9953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1127'.
[  208.048132][ T9958] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  208.256350][ T9963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.279114][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'.
[  208.300503][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1131'.
[  208.605964][ T9980] team0: Cannot enslave team device to itself
[  208.633343][ T5234] udevd[5234]: worker [6267] terminated by signal 33 (Unknown signal 33)
[  208.635267][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1136'.
[  208.670144][ T5234] udevd[5234]: worker [6267] failed while handling '/devices/virtual/block/loop4'
[  208.803877][ T9978] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  208.830322][ T9978] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  208.927552][ T9978] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  208.950518][ T9978] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  208.959101][ T9992] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1138'.
[  209.059247][ T9978] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  209.070772][ T9978] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  209.090718][T10000] netlink: 'syz.4.1140': attribute type 10 has an invalid length.
[  209.114982][ T9978] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  209.132089][ T9990] syz.0.1138: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  209.150851][ T9978] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  209.159172][ T9990] CPU: 1 UID: 0 PID: 9990 Comm: syz.0.1138 Not tainted syzkaller #0 PREEMPT(full) 
[  209.159200][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  209.159213][ T9990] Call Trace:
[  209.159221][ T9990]  <TASK>
[  209.159230][ T9990]  dump_stack_lvl+0x189/0x250
[  209.159264][ T9990]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.159289][ T9990]  ? __pfx__printk+0x10/0x10
[  209.159319][ T9990]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  209.159344][ T9990]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  209.159370][ T9990]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  209.159397][ T9990]  warn_alloc+0x214/0x310
[  209.159437][ T9990]  ? __pfx_warn_alloc+0x10/0x10
[  209.159478][ T9990]  ? __get_vm_area_node+0x28f/0x300
[  209.159508][ T9990]  ? nf_tables_newset+0x132b/0x2530
[  209.159539][ T9990]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  209.159597][ T9990]  ? alloc_pages_mpol+0x3cd/0x4a0
[  209.159629][ T9990]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  209.159666][ T9990]  ? rcu_is_watching+0x15/0xb0
[  209.159688][ T9990]  ? nf_tables_newset+0x132b/0x2530
[  209.159713][ T9990]  ? nf_tables_newset+0x132b/0x2530
[  209.159737][ T9990]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  209.159768][ T9990]  ? nf_tables_newset+0x132b/0x2530
[  209.159795][ T9990]  ? nft_table_lookup+0x211/0x230
[  209.159819][ T9990]  ? nft_set_lookup+0x128/0x150
[  209.159858][ T9990]  ? nft_hash_privsize+0xef/0xf0
[  209.159884][ T9990]  nf_tables_newset+0x132b/0x2530
[  209.159929][ T9990]  ? __pfx_nf_tables_newset+0x10/0x10
[  209.159978][ T9990]  ? __nla_parse+0x40/0x60
[  209.160004][ T9990]  nfnetlink_rcv+0x112f/0x2520
[  209.160072][ T9990]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  209.160123][ T9990]  ? ref_tracker_free+0x63a/0x7d0
[  209.160176][ T9990]  ? __netlink_deliver_tap+0x807/0x850
[  209.160198][ T9990]  ? netlink_deliver_tap+0x2e/0x1b0
[  209.160240][ T9990]  netlink_unicast+0x82f/0x9e0
[  209.160282][ T9990]  ? __pfx_netlink_unicast+0x10/0x10
[  209.160317][ T9990]  ? netlink_sendmsg+0x642/0xb30
[  209.160336][ T9990]  ? skb_put+0x11b/0x210
[  209.160364][ T9990]  netlink_sendmsg+0x805/0xb30
[  209.160398][ T9990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.160425][ T9990]  ? aa_sock_msg_perm+0xf1/0x1d0
[  209.160448][ T9990]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.160470][ T9990]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.160494][ T9990]  __sock_sendmsg+0x219/0x270
[  209.160529][ T9990]  ____sys_sendmsg+0x505/0x830
[  209.160561][ T9990]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.160598][ T9990]  ? import_iovec+0x74/0xa0
[  209.160630][ T9990]  ___sys_sendmsg+0x21f/0x2a0
[  209.160658][ T9990]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.160723][ T9990]  ? __fget_files+0x2a/0x420
[  209.160741][ T9990]  ? __fget_files+0x3a0/0x420
[  209.160770][ T9990]  __x64_sys_sendmsg+0x19b/0x260
[  209.160800][ T9990]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  209.160838][ T9990]  ? rcu_is_watching+0x15/0xb0
[  209.160872][ T9990]  ? do_syscall_64+0xbe/0x3b0
[  209.160900][ T9990]  do_syscall_64+0xfa/0x3b0
[  209.160921][ T9990]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.160939][ T9990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.160960][ T9990]  ? clear_bhb_loop+0x60/0xb0
[  209.161007][ T9990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.161026][ T9990] RIP: 0033:0x7ffa40b8eec9
[  209.161044][ T9990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.161058][ T9990] RSP: 002b:00007ffa41996038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.161078][ T9990] RAX: ffffffffffffffda RBX: 00007ffa40de5fa0 RCX: 00007ffa40b8eec9
[  209.161092][ T9990] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  209.161104][ T9990] RBP: 00007ffa40c11f91 R08: 0000000000000000 R09: 0000000000000000
[  209.161115][ T9990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.161126][ T9990] R13: 00007ffa40de6038 R14: 00007ffa40de5fa0 R15: 00007ffcc407a578
[  209.161156][ T9990]  </TASK>
[  209.548492][ T9990] Mem-Info:
[  209.552029][ T9990] active_anon:4559 inactive_anon:0 isolated_anon:0
[  209.552029][ T9990]  active_file:2636 inactive_file:39916 isolated_file:0
[  209.552029][ T9990]  unevictable:768 dirty:86 writeback:0
[  209.552029][ T9990]  slab_reclaimable:11064 slab_unreclaimable:102682
[  209.552029][ T9990]  mapped:28985 shmem:1358 pagetables:1009
[  209.552029][ T9990]  sec_pagetables:0 bounce:0
[  209.552029][ T9990]  kernel_misc_reclaimable:0
[  209.552029][ T9990]  free:1325835 free_pcp:15219 free_cma:0
[  209.598610][ T9990] Node 0 active_anon:18236kB inactive_anon:0kB active_file:10544kB inactive_file:159464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115940kB dirty:344kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12344kB pagetables:3904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  209.649506][ T9990] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  209.681896][ T9990] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  209.711240][ T9990] lowmem_reserve[]: 0 2497 2499 2499 2499
[  209.717059][ T9990] Node 0 DMA32 free:1395252kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18088kB inactive_anon:0kB active_file:10544kB inactive_file:157888kB unevictable:1536kB writepending:344kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:42196kB local_pcp:20708kB free_cma:0kB
[  209.718415][ T9978] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  209.750750][ T9990] lowmem_reserve[]: 0 0 1 1 1
[  209.767307][ T9978] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  209.785668][ T9990] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  209.818814][ T9990] lowmem_reserve[]: 0 0 0 0 0
[  209.823637][ T9990] Node 1 Normal free:3892716kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19048kB local_pcp:7332kB free_cma:0kB
[  209.855937][ T9990] lowmem_reserve[]: 0 0 0 0 0
[  209.860777][ T9990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  209.873615][ T9990] Node 0 DMA32: 872*4kB (UME) 415*8kB (UME) 197*16kB (UME) 113*32kB (ME) 45*64kB (UME) 35*128kB (UME) 10*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (ME) 333*4096kB (M) = 1395144kB
[  209.893006][ T9990] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  209.905397][ T9990] Node 1 Normal: 181*4kB (UE) 41*8kB (UME) 41*16kB (UME) 70*32kB (UME) 24*64kB (UME) 7*128kB (UME) 3*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3892716kB
[  209.932208][ T9990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  209.942248][ T9990] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  209.982017][ T9990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  209.992362][ T9990] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  210.007239][ T9990] 43907 total pagecache pages
[  210.012041][ T9990] 0 pages in swap cache
[  210.016377][ T9990] Free swap  = 124996kB
[  210.028781][ T9990] Total swap = 124996kB
[  210.052056][ T9990] 2097051 pages RAM
[  210.055926][ T9990] 0 pages HighMem/MovableOnly
[  210.068003][ T9990] 425672 pages reserved
[  210.077389][ T9990] 0 pages cma reserved
[  210.106046][T10011] netlink: 'syz.4.1142': attribute type 1 has an invalid length.
[  210.234632][T10014] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  210.356186][ T9978] tipc: Resetting bearer <eth:syzkaller0>
[  210.754782][T10027] syzkaller0: entered promiscuous mode
[  210.771076][T10027] syzkaller0: entered allmulticast mode
[  210.781303][T10027] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  211.239660][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1159'.
[  211.282087][T10055] tc_dump_action: action bad kind
[  211.325565][T10055] dvmrp0: entered allmulticast mode
[  211.588500][T10072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.756521][T10072] syzkaller0: entered promiscuous mode
[  211.780219][T10072] syzkaller0: entered allmulticast mode
[  212.722941][T10124] trusted_key: syz.2.1178 sent an empty control message without MSG_MORE.
[  213.592263][T10079] tipc: Resetting bearer <eth:syzkaller0>
[  213.601528][T10067] tipc: Resetting bearer <eth:syzkaller0>
[  213.628702][T10067] tipc: Disabling bearer <eth:syzkaller0>
[  213.728894][T10091]  speed is unknown, defaulting to 1000
[  213.967260][T10141] netlink: 'syz.3.1183': attribute type 13 has an invalid length.
[  214.014049][T10146] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  214.149202][T10151] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1187'.
[  214.603340][T10164] ieee802154 phy1 wpan1: encryption failed: -22
[  214.867579][T10178] sctp: [Deprecated]: syz.1.1195 (pid 10178) Use of int in max_burst socket option deprecated.
[  214.867579][T10178] Use struct sctp_assoc_value instead
[  215.205504][T10191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.284738][T10191] syzkaller0: entered promiscuous mode
[  215.295115][T10191] syzkaller0: entered allmulticast mode
[  215.363149][T10195] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1200'.
[  215.383326][T10191] tipc: Resetting bearer <eth:syzkaller0>
[  215.406823][T10189] tipc: Resetting bearer <eth:syzkaller0>
[  215.444593][T10189] tipc: Disabling bearer <eth:syzkaller0>
[  215.488649][T10202] C: renamed from lo (while UP)
[  215.659857][T10211] netlink: 'syz.0.1203': attribute type 11 has an invalid length.
[  215.668314][T10211] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1203'.
[  215.881445][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'.
[  215.977392][T10221] veth5: entered promiscuous mode
[  216.059236][T10234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.079721][T10219] openvswitch: netlink: Message has 4 unknown bytes.
[  216.108504][T10219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.141211][T10234] tipc: Disabling bearer <eth:syzkaller0>
[  216.244763][T10244] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1209'.
[  216.347053][T10244] netlink: 'syz.0.1209': attribute type 1 has an invalid length.
[  216.614223][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1214'.
[  216.623399][T10267] netlink: 'syz.4.1214': attribute type 5 has an invalid length.
[  216.635192][T10267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1214'.
[  216.695361][T10267] geneve2: entered promiscuous mode
[  216.714222][T10267] geneve2: entered allmulticast mode
[  216.730213][  T194] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  216.754185][ T7642] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  216.817110][ T7642] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  216.834122][ T7642] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  217.134085][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1220'.
[  217.341500][T10293] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  217.381899][T10293] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  217.561041][T10292] macvlan2: entered promiscuous mode
[  217.575358][T10292] macvlan2: entered allmulticast mode
[  217.591125][T10292] bond4: (slave macvlan2): Error -98 calling set_mac_address
[  217.606508][T10314] wg1: entered promiscuous mode
[  217.624272][T10314] wg1: entered allmulticast mode
[  217.671522][T10293] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  217.683523][T10293] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  217.696295][T10323] netlink: 'syz.0.1229': attribute type 3 has an invalid length.
[  217.740755][T10321] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.748490][T10321] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.803320][T10292] macvlan2: entered promiscuous mode
[  217.815257][T10292] macvlan2: entered allmulticast mode
[  217.827278][T10325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'.
[  217.837184][T10292] bond4: (slave macvlan2): Error -98 calling set_mac_address
[  217.928357][T10331] netlink: 'syz.4.1231': attribute type 24 has an invalid length.
[  217.958711][T10293] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  217.978548][T10293] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  217.989806][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'.
[  218.074447][T10292] macvlan2: entered promiscuous mode
[  218.087033][T10292] macvlan2: entered allmulticast mode
[  218.100344][T10292] bond4: (slave macvlan2): Error -98 calling set_mac_address
[  218.130319][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.475010][T10356] dvmrp0: entered allmulticast mode
[  218.528510][T10359] dvmrp0: left allmulticast mode
[  219.063822][T10389] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  219.162579][T10403] __nla_validate_parse: 2 callbacks suppressed
[  219.162602][T10403] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1248'.
[  219.224567][T10408] tc_dump_action: action bad kind
[  219.232075][  T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.539294][T10430] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  219.927481][T10454] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1258'.
[  219.985896][  T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.216244][T10465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1265'.
[  220.272551][T10468] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1266'.
[  220.282403][T10468] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1266'.
[  220.355987][T10474] netlink: 'syz.4.1266': attribute type 1 has an invalid length.
[  220.366522][T10474] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1266'.
[  220.458267][T10478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1268'.
[  220.511364][T10480] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  220.576843][T10482] netlink: 'syz.0.1270': attribute type 1 has an invalid length.
[  220.633764][T10482] bond4: (slave bridge0): making interface the new active one
[  220.647193][T10482] bond4: (slave bridge0): Enslaving as an active interface with an up link
[  220.805950][T10490] netlink: 'syz.3.1271': attribute type 1 has an invalid length.
[  220.813949][T10493] netlink: 'syz.0.1274': attribute type 1 has an invalid length.
[  220.813971][T10493] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1274'.
[  220.837921][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'.
[  221.133493][T10506] team_slave_0: entered allmulticast mode
[  221.149106][T10508] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  221.368141][T10508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1278'.
[  221.657471][T10534] netlink: 'syz.4.1286': attribute type 4 has an invalid length.
[  221.699466][T10539] netlink: 'syz.2.1285': attribute type 7 has an invalid length.
[  221.735484][T10539] netlink: 'syz.2.1285': attribute type 8 has an invalid length.
[  221.974489][T10555] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.266928][T10569] netlink: 'syz.3.1294': attribute type 58 has an invalid length.
[  222.328840][T10569] netlink: 'syz.3.1294': attribute type 1 has an invalid length.
[  222.356461][T10569] netlink: 'syz.3.1294': attribute type 2 has an invalid length.
[  222.750856][T10584] 0ªî{X¹¦: left allmulticast mode
[  222.825155][T10584] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.901661][T10595] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  222.969711][T10600] nbd: must specify at least one socket
[  224.364986][T10681] __nla_validate_parse: 11 callbacks suppressed
[  224.365008][T10681] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1327'.
[  225.156248][T10725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1341'.
[  225.172858][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.982655][T10762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1352'.
[  227.075847][T10762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1352'.
[  227.115744][T10762] validate_nla: 7 callbacks suppressed
[  227.115766][T10762] netlink: 'syz.0.1352': attribute type 1 has an invalid length.
[  227.138171][T10762] netlink: 'syz.0.1352': attribute type 3 has an invalid length.
[  227.642853][T10796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'.
[  227.732132][  T194] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  227.757021][T10806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1367'.
[  227.757340][T10803] rdma_rxe: rxe_newlink: failed to add bond0
[  227.790658][T10806] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  227.817359][T10803] netlink: 'syz.2.1365': attribute type 13 has an invalid length.
[  227.950455][T10811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1368'.
[  228.095708][T10803] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.103016][T10803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.155358][T10803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  228.267649][T10818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.299383][T10813] tipc: Resetting bearer <eth:syzkaller0>
[  228.492309][T10836] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1375'.
[  228.725714][T10831] team0 (unregistering): Port device team_slave_0 removed
[  228.734464][T10831] team0 (unregistering): Port device team_slave_1 removed
[  228.761937][T10819] syzkaller0: entered promiscuous mode
[  228.767684][T10819] syzkaller0: entered allmulticast mode
[  228.823412][T10812] tipc: Resetting bearer <eth:syzkaller0>
[  228.866019][T10812] tipc: Disabling bearer <eth:syzkaller0>
[  229.516819][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'.
[  229.564453][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1393'.
[  229.633538][T10905] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  250.130249][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.159311][T10920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1400'.
[  254.205004][T10920] openvswitch: netlink: Flow actions attr not present in new flow.
[  254.378566][T10933] sctp: [Deprecated]: syz.0.1405 (pid 10933) Use of int in maxseg socket option.
[  254.378566][T10933] Use struct sctp_assoc_value instead
[  254.406605][T10931] sctp: [Deprecated]: syz.0.1405 (pid 10931) Use of int in maxseg socket option.
[  254.406605][T10931] Use struct sctp_assoc_value instead
[  254.711745][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1408'.
[  254.857271][T10938] netlink: 'syz.1.1408': attribute type 10 has an invalid length.
[  254.960714][T10938] bond0: (slave ÿ
): Enslaving as an active interface with an up link
[  255.009052][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'.
[  255.046309][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'.
[  255.239189][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'.
[  255.367555][T10982] pim6reg: entered allmulticast mode
[  255.433835][T10982] 8021q: VLANs not supported on ip6gre0
[  255.465286][T10990] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1422'.
[  255.643001][T10998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.668752][T11002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.479186][T11049]  speed is unknown, defaulting to 1000
[  256.563645][T11058] bond0: Error: Cannot enslave bond to itself.
[  256.622989][T11061] vlan4: entered promiscuous mode
[  256.628279][T11061] vlan4: entered allmulticast mode
[  256.659506][T11061] hsr_slave_1: entered allmulticast mode
[  256.730293][T11061] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1443'.
[  256.954023][T11072] netlink: 'syz.0.1449': attribute type 1 has an invalid length.
[  257.014103][T11072] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1449'.
[  257.050196][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1449'.
[  257.081422][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'.
[  257.219830][T11083] netlink: 'syz.3.1451': attribute type 1 has an invalid length.
[  257.486845][T11100] netlink: 'syz.4.1455': attribute type 22 has an invalid length.
[  257.500253][T11100] netlink: 'syz.4.1455': attribute type 22 has an invalid length.
[  258.565225][T11152] openvswitch: netlink: IPv4 tun info is not correct
[  258.697186][T11157] bridge0: port 3(veth0_to_bridge) entered blocking state
[  258.718768][T11157] bridge0: port 3(veth0_to_bridge) entered disabled state
[  258.733733][T11157] veth0_to_bridge: entered allmulticast mode
[  258.745202][T11157] veth0_to_bridge: entered promiscuous mode
[  258.755081][T11159] tc_dump_action: action bad kind
[  258.929054][T11164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  259.191986][T11177] __nla_validate_parse: 9 callbacks suppressed
[  259.192006][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'.
[  259.266113][T11178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.950543][T11214] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1488'.
[  260.086917][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1489'.
[  260.241454][T11227] netlink: 'syz.2.1493': attribute type 1 has an invalid length.
[  260.286192][T11231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  260.362444][T11233] netlink: 166244 bytes leftover after parsing attributes in process `syz.1.1495'.
[  260.752625][T11253] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1501'.
[  260.894937][T11265] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  261.192398][T11282] team_slave_1: entered allmulticast mode
[  261.254554][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'.
[  261.279824][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'.
[  261.300168][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1510'.
[  261.584296][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'.
[  261.744114][T11315] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1520'.
[  261.829753][T11318] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  262.441036][  T194] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  262.454731][  T194] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  262.464733][  T194] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  262.773303][T11370] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  262.961730][T11379] veth0: entered promiscuous mode
[  263.151313][T11389] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  263.240871][ T7630] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  263.269002][ T7630] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  263.277670][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  263.683920][T11413] wg1 speed is unknown, defaulting to 1000
[  263.698355][T11413] wg1 speed is unknown, defaulting to 1000
[  263.715042][T11413] wg1 speed is unknown, defaulting to 1000
[  263.762869][T11416] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  263.795119][T11413] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  263.820347][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  263.910249][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  263.955964][T11421] bond5: (slave gretap1): making interface the new active one
[  263.997186][T11421] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  264.027127][T11413] wg1 speed is unknown, defaulting to 1000
[  264.075472][T11432]  speed is unknown, defaulting to 1000
[  264.075832][T11413] wg1 speed is unknown, defaulting to 1000
[  264.122576][T11413] wg1 speed is unknown, defaulting to 1000
[  264.134065][T11435] netlink: 'syz.3.1553': attribute type 4 has an invalid length.
[  264.157174][T11413] wg1 speed is unknown, defaulting to 1000
[  264.174832][T11413] wg1 speed is unknown, defaulting to 1000
[  264.193723][T11413] wg1 speed is unknown, defaulting to 1000
[  264.227269][T11439] __nla_validate_parse: 10 callbacks suppressed
[  264.227288][T11439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1555'.
[  264.233290][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1555'.
[  264.257862][T11437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.369880][T11437] syzkaller0: entered promiscuous mode
[  264.382616][T11437] syzkaller0: entered allmulticast mode
[  264.395919][T11437] tipc: Resetting bearer <eth:syzkaller0>
[  264.420902][T11440] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  264.437547][T11440] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  264.458760][T11440] gretap2: entered promiscuous mode
[  264.474566][T11440] gretap2: entered allmulticast mode
[  264.497511][T11436] tipc: Resetting bearer <eth:syzkaller0>
[  264.957434][T11464] xt_l2tp: invalid flags combination: 0
[  265.124673][T11468] netlink: 'syz.4.1561': attribute type 9 has an invalid length.
[  265.244516][T11466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1561'.
[  266.190770][T11436] tipc: Disabling bearer <eth:syzkaller0>
[  266.202416][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'.
[  266.433469][T11480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.508323][T11480] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  266.593454][T11480] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.1564'.
[  266.998956][   T30] audit: type=1107 audit(1758816286.310:3): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  267.004743][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'.
[  267.010162][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  267.141020][T11518] netlink: 'syz.0.1570': attribute type 1 has an invalid length.
[  267.149068][T11518] netlink: 16110 bytes leftover after parsing attributes in process `syz.0.1570'.
[  267.520757][T11524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.561728][T11532] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1575'.
[  267.830969][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'.
[  267.852054][T11544] tc_dump_action: action bad kind
[  268.015374][T11551] netlink: 'syz.2.1582': attribute type 1 has an invalid length.
[  268.099843][T11551] 8021q: adding VLAN 0 to HW filter on device bond3
[  268.167645][T11559] 8021q: adding VLAN 0 to HW filter on device bond3
[  268.175908][T11559] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  268.188208][T11559] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  268.211747][T11563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1582'.
[  268.378647][T11551] veth10: entered promiscuous mode
[  268.408070][T11551] bond3: (slave veth10): Enslaving as an active interface with a down link
[  268.457328][T11563] 8021q: adding VLAN 0 to HW filter on device bond3
[  268.633939][T11588] syzkaller0: entered promiscuous mode
[  268.648413][T11588] syzkaller0: entered allmulticast mode
[  268.763496][T11592] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  268.951854][T11584] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  269.509766][T11631] netlink: 'syz.4.1600': attribute type 64 has an invalid length.
[  269.548140][T11631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1600'.
[  269.636781][T11621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.654528][T11643] IPVS: set_ctl: invalid protocol: 31091 97.108.108.101:29232
[  269.738379][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'.
[  269.758776][T11656] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1603'.
[  269.942475][   T30] audit: type=1107 audit(1758816289.260:4): pid=11660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=',‚ĺè$’9kêV!H^á€4~d§éÍb¯›@™‚YÙWî߇Þ3Ø"¼ÊÓ	d?ƒŸ|0ö-Ç:î’ù[÷,¤±ö¢R›DP¡�p¶Á#†}n¢*ÛæŸ~�iW!Žu~z»òòƒx2¼e”ÖóŒX�yëÊAžCVH佶éí4&–˜ÑŸuÿ\‰Ð‰o‰©Û/­ßš¾·fÔûë�¸1%0ƮൌáÖ•B”J Õž1’k	°Y
[  269.942475][   T30] ¢õ}tG•fo}Bª{»Ê'
[  270.027068][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'.
[  270.253322][T11684] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1612'.
[  270.356681][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'.
[  270.386047][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'.
[  270.427913][T11690]  speed is unknown, defaulting to 1000
[  270.637122][T11704] FAULT_INJECTION: forcing a failure.
[  270.637122][T11704] name failslab, interval 1, probability 0, space 0, times 1
[  270.678486][T11708] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1619'.
[  270.692898][T11704] CPU: 0 UID: 0 PID: 11704 Comm: syz.4.1618 Not tainted syzkaller #0 PREEMPT(full) 
[  270.692928][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  270.692944][T11704] Call Trace:
[  270.692952][T11704]  <TASK>
[  270.692961][T11704]  dump_stack_lvl+0x189/0x250
[  270.692991][T11704]  ? __pfx____ratelimit+0x10/0x10
[  270.693014][T11704]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.693038][T11704]  ? __pfx__printk+0x10/0x10
[  270.693069][T11704]  ? __lock_acquire+0xab9/0xd20
[  270.693121][T11704]  should_fail_ex+0x414/0x560
[  270.693156][T11704]  should_failslab+0xa8/0x100
[  270.693189][T11704]  kmem_cache_alloc_noprof+0x73/0x3c0
[  270.693215][T11704]  ? skb_clone+0x212/0x3a0
[  270.693247][T11704]  skb_clone+0x212/0x3a0
[  270.693277][T11704]  __netlink_deliver_tap+0x404/0x850
[  270.693314][T11704]  ? netlink_deliver_tap+0x2e/0x1b0
[  270.693337][T11704]  netlink_deliver_tap+0x19c/0x1b0
[  270.693361][T11704]  netlink_unicast+0x7fa/0x9e0
[  270.693402][T11704]  ? __pfx_netlink_unicast+0x10/0x10
[  270.693437][T11704]  ? netlink_sendmsg+0x642/0xb30
[  270.693456][T11704]  ? skb_put+0x11b/0x210
[  270.693484][T11704]  netlink_sendmsg+0x805/0xb30
[  270.693516][T11704]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.693542][T11704]  ? aa_sock_msg_perm+0xf1/0x1d0
[  270.693564][T11704]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  270.693586][T11704]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.693609][T11704]  __sock_sendmsg+0x219/0x270
[  270.693644][T11704]  ____sys_sendmsg+0x505/0x830
[  270.693675][T11704]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.693711][T11704]  ? import_iovec+0x74/0xa0
[  270.693743][T11704]  ___sys_sendmsg+0x21f/0x2a0
[  270.693772][T11704]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.693839][T11704]  ? __fget_files+0x2a/0x420
[  270.693857][T11704]  ? __fget_files+0x3a0/0x420
[  270.693888][T11704]  __x64_sys_sendmsg+0x19b/0x260
[  270.693918][T11704]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.693955][T11704]  ? __pfx_ksys_write+0x10/0x10
[  270.693980][T11704]  ? rcu_is_watching+0x15/0xb0
[  270.694006][T11704]  ? do_syscall_64+0xbe/0x3b0
[  270.694034][T11704]  do_syscall_64+0xfa/0x3b0
[  270.694055][T11704]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.694076][T11704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.694105][T11704]  ? clear_bhb_loop+0x60/0xb0
[  270.694130][T11704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.694156][T11704] RIP: 0033:0x7f52eb98eec9
[  270.694176][T11704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.694194][T11704] RSP: 002b:00007f52ec751038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.694216][T11704] RAX: ffffffffffffffda RBX: 00007f52ebbe5fa0 RCX: 00007f52eb98eec9
[  270.694231][T11704] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  270.694244][T11704] RBP: 00007f52ec751090 R08: 0000000000000000 R09: 0000000000000000
[  270.694256][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.694268][T11704] R13: 00007f52ebbe6038 R14: 00007f52ebbe5fa0 R15: 00007ffd52223478
[  270.694301][T11704]  </TASK>
[  270.803112][T11708] netlink: 'syz.1.1619': attribute type 1 has an invalid length.
[  271.085764][T11719] geneve3: entered promiscuous mode
[  271.112429][T11719] geneve3: entered allmulticast mode
[  271.140164][T11650] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0
[  271.181936][T11650] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0
[  271.202400][T11650] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0
[  271.217196][T11724] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1623'.
[  271.235380][T11724] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1623'.
[  271.472127][T11690] wg1 speed is unknown, defaulting to 1000
[  271.655720][T11744] netlink: 'syz.2.1628': attribute type 1 has an invalid length.
[  271.759415][T11751] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  272.233209][T11779] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  272.263718][T11780] netlink: 'syz.4.1635': attribute type 11 has an invalid length.
[  272.971864][T11821] siw: device registration error -23
[  273.088346][T11829] tipc: New replicast peer: 255.255.255.255
[  273.107497][T11829] tipc: Enabled bearer <udp:syz2>, priority 10
[  273.283903][T11842] netlink: 'syz.2.1656': attribute type 1 has an invalid length.
[  273.344865][T11851] netlink: 'syz.4.1655': attribute type 12 has an invalid length.
[  273.370491][T11851] netlink: 'syz.4.1655': attribute type 29 has an invalid length.
[  275.090201][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  276.476653][T11886] __nla_validate_parse: 6 callbacks suppressed
[  276.476674][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1666'.
[  276.501543][T11886] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1666'.
[  276.527768][T11892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1666'.
[  276.555312][T11893] netlink: 'syz.4.1668': attribute type 7 has an invalid length.
[  276.563818][T11892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1666'.
[  276.575036][T11891] rdma_rxe: rxe_newlink: failed to add bond0
[  276.577026][T11893] netlink: 'syz.4.1668': attribute type 1 has an invalid length.
[  276.645446][T11897] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1668'.
[  276.799564][T11906] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20001
[  276.829088][T11906] netlink: 'syz.2.1672': attribute type 10 has an invalid length.
[  276.843599][T11908] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  276.900397][T11906] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20001
[  276.923233][T11911] netlink: 'syz.2.1672': attribute type 10 has an invalid length.
[  276.984465][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'.
[  277.018246][T11916] netlink: 'syz.1.1675': attribute type 25 has an invalid length.
[  277.047422][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'.
[  277.125496][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'.
[  277.136275][T11654] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.137796][T11916] netlink: 'syz.1.1675': attribute type 25 has an invalid length.
[  277.168460][T11654] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.195025][T11654] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.229804][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'.
[  277.252245][T11654] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.323869][T11931] netlink: 'syz.0.1679': attribute type 29 has an invalid length.
[  277.338997][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'.
[  277.407465][T11929] netlink: 'syz.4.1680': attribute type 2 has an invalid length.
[  277.669433][T11948] netlink: 'syz.0.1686': attribute type 1 has an invalid length.
[  277.722002][T11948] netlink: 'syz.0.1686': attribute type 11 has an invalid length.
[  278.221059][T11979] netlink: 'syz.1.1696': attribute type 1 has an invalid length.
[  278.302729][T11987] ip6tnl0: Caught tx_queue_len zero misconfig
[  278.315468][T11987] netlink: 'syz.3.1697': attribute type 2 has an invalid length.
[  278.522545][T12000] netlink: 'syz.0.1701': attribute type 1 has an invalid length.
[  278.776048][T12000] 8021q: adding VLAN 0 to HW filter on device bond6
[  279.044881][T12038] netlink: 'syz.0.1712': attribute type 24 has an invalid length.
[  279.419629][T12064] netlink: 'syz.4.1718': attribute type 1 has an invalid length.
[  279.973376][T12092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.282632][T12126] openvswitch: netlink: Flow key attr not present in new flow.
[  280.446532][T12136] netlink: 'syz.1.1738': attribute type 8 has an invalid length.
[  280.927137][T12174] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  281.120695][T12181] netlink: 'syz.2.1752': attribute type 10 has an invalid length.
[  281.135900][T12181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.305964][T12196] syzkaller0: entered promiscuous mode
[  281.358039][T12196] syzkaller0: entered allmulticast mode
[  282.128952][T12237] __nla_validate_parse: 19 callbacks suppressed
[  282.128973][T12237] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1763'.
[  282.161235][T12236] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1763'.
[  282.203173][T12244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1767'.
[  282.339880][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1769'.
[  282.384719][T12249] pim6reg: entered allmulticast mode
[  282.446532][T12249] pim6reg: left allmulticast mode
[  282.631787][T12260] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜�z
[  282.642740][T12264] netlink: 'syz.3.1772': attribute type 12 has an invalid length.
[  282.814863][T12265]  speed is unknown, defaulting to 1000
[  282.952209][T12272]  speed is unknown, defaulting to 1000
[  282.954647][T12281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1775'.
[  283.269098][T12284]  speed is unknown, defaulting to 1000
[  283.365571][T12295] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1779'.
[  283.409516][T12297] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1780'.
[  283.450083][T12297] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1780'.
[  283.541046][T12265] wg1 speed is unknown, defaulting to 1000
[  283.762113][T12305] 8021q: adding VLAN 0 to HW filter on device bond6
[  283.864873][T12315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1784'.
[  283.874753][T12315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1784'.
[  284.144031][T12321] raw_sendmsg: syz.0.1786 forgot to set AF_INET. Fix it!
[  284.337946][T12284] wg1 speed is unknown, defaulting to 1000
[  284.348989][T12272] wg1 speed is unknown, defaulting to 1000
[  285.225011][T12341] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  286.001268][T12371] openvswitch: netlink: Key 9 has unexpected len 0 expected 4
[  286.047521][T12370]  speed is unknown, defaulting to 1000
[  286.242248][T12390] openvswitch: netlink: IPv6 tunnel dst address is zero
[  286.264697][T12396] netlink: 'syz.3.1812': attribute type 21 has an invalid length.
[  286.323035][T12396] IPv6: NLM_F_CREATE should be specified when creating new route
[  286.331529][T12396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  286.338766][T12396] IPv6: NLM_F_CREATE should be set when creating new route
[  286.346119][T12396] IPv6: NLM_F_CREATE should be set when creating new route
[  286.353415][T12396] IPv6: NLM_F_CREATE should be set when creating new route
[  286.434614][T12375] netlink: 'syz.2.1808': attribute type 13 has an invalid length.
[  286.496151][T12375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.673647][T12419] Bluetooth: MGMT ver 1.23
[  287.256025][T12457] __nla_validate_parse: 7 callbacks suppressed
[  287.256045][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'.
[  287.466221][T12466] macvtap1: entered promiscuous mode
[  287.500317][T12466] macvtap1: entered allmulticast mode
[  287.506364][T12466] bond_slave_0: entered promiscuous mode
[  287.512404][T12466] bond_slave_1: entered promiscuous mode
[  287.518148][T12466] mac80211_hwsim hwsim8 ÿ
: entered promiscuous mode
[  287.575297][T12466] bond0: entered allmulticast mode
[  287.588458][T12466] bond_slave_0: entered allmulticast mode
[  287.609482][T12466] bond_slave_1: entered allmulticast mode
[  287.639426][T12466] mac80211_hwsim hwsim8 ÿ
: entered allmulticast mode
[  287.665470][T12466] bond0: entered promiscuous mode
[  287.699404][T12466] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  287.726183][T12466] team0: Device macvtap1 failed to register rx_handler
[  287.758710][T12466] bond0: left allmulticast mode
[  287.774158][T12466] bond_slave_0: left allmulticast mode
[  287.792647][T12466] bond_slave_1: left allmulticast mode
[  287.805178][T12466] mac80211_hwsim hwsim8 ÿ
: left allmulticast mode
[  287.813461][T12466] bond0: left promiscuous mode
[  287.822829][T12466] bond_slave_0: left promiscuous mode
[  287.828325][T12466] bond_slave_1: left promiscuous mode
[  287.833970][T12466] mac80211_hwsim hwsim8 ÿ
: left promiscuous mode
[  287.907766][T12499] x_tables: ip_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 64
[  287.969744][T12475] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  288.223919][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'.
[  288.319299][T12529] netlink: 'syz.4.1847': attribute type 23 has an invalid length.
[  290.302072][T12558] 8021q: VLANs not supported on lo
[  290.450225][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  290.471146][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'.
[  290.489360][T12572] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1857'.
[  290.524526][T12572] 8021q: VLANs not supported on ip_vti0
[  290.589720][T12577] vlan1: entered allmulticast mode
[  290.604370][T12577] veth0_vlan: entered allmulticast mode
[  290.914255][T12601] netlink: 'syz.3.1864': attribute type 10 has an invalid length.
[  290.940139][T12601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1864'.
[  290.959562][T12601] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  290.970770][T12601] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  290.995597][T12601] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  291.041983][T12607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1861'.
[  291.065970][T12601] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  291.187632][T12609] netlink: 'syz.1.1866': attribute type 1 has an invalid length.
[  291.196045][T12609] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1866'.
[  291.226660][T12609] netlink: 'syz.1.1866': attribute type 2 has an invalid length.
[  291.242974][T12609] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1866'.
[  291.311696][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'.
[  291.644964][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'.
[  291.665058][T12631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.673434][T12631] syzkaller0: entered promiscuous mode
[  291.698323][T12631] syzkaller0: entered allmulticast mode
[  291.917386][T12634] tipc: Resetting bearer <eth:syzkaller0>
[  291.955983][T12630] tipc: Resetting bearer <eth:syzkaller0>
[  292.028265][T12630] tipc: Disabling bearer <eth:syzkaller0>
[  292.281056][T12657] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  292.321987][T12659] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  292.585817][T12666] netlink: 'syz.1.1883': attribute type 1 has an invalid length.
[  292.765147][T12678] __nla_validate_parse: 1 callbacks suppressed
[  292.765165][T12678] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1886'.
[  292.797545][T12682] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1886'.
[  292.819558][T12677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'.
[  292.822854][T12683] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1888'.
[  292.829991][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'.
[  293.471072][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'.
[  293.492960][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'.
[  293.498582][T12715] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  293.618555][T12722] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1898'.
[  294.044008][T12733] syzkaller0: entered promiscuous mode
[  294.061978][T12733] syzkaller0: entered allmulticast mode
[  294.493764][T12744] pim6reg1: entered promiscuous mode
[  294.499154][T12744] pim6reg1: entered allmulticast mode
[  294.635826][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'.
[  294.658607][T12749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1908'.
[  294.764285][T12757] netlink: 'syz.4.1911': attribute type 1 has an invalid length.
[  294.857851][T12760] bond0: (slave bridge5): making interface the new active one
[  294.939835][T12760] bond0: (slave bridge5): Enslaving as an active interface with an up link
[  295.045351][T12768] netlink: 'syz.2.1913': attribute type 1 has an invalid length.
[  295.082786][T12772] netlink: 'syz.2.1913': attribute type 1 has an invalid length.
[  295.104463][T12768] netlink: 'syz.2.1913': attribute type 4 has an invalid length.
[  295.119046][T12772] netlink: 'syz.2.1913': attribute type 4 has an invalid length.
[  295.178793][T12777] tipc: Can't bind to reserved service type 0
[  295.251763][T12783] syzkaller1: entered promiscuous mode
[  295.257303][T12783] syzkaller1: entered allmulticast mode
[  295.425379][T12797] 8021q: adding VLAN 0 to HW filter on device bond5
[  295.464405][T12797] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  296.238138][T12846] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  296.258470][T12846] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  296.268260][T12846] gretap3: entered promiscuous mode
[  296.278399][T12846] gretap3: entered allmulticast mode
[  296.377105][T12851] bridge_slave_1: left allmulticast mode
[  296.387115][T12851] bridge_slave_1: left promiscuous mode
[  296.394640][T12851] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.408531][T12851] bridge_slave_0: left allmulticast mode
[  296.433713][T12851] bridge_slave_0: left promiscuous mode
[  296.452699][T12851] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.625449][T12867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.637759][T12856] tipc: Resetting bearer <eth:syzkaller0>
[  296.689747][T12872] netlink: 'syz.0.1940': attribute type 1 has an invalid length.
[  296.768371][T12872] 8021q: adding VLAN 0 to HW filter on device bond7
[  296.878362][T12876] bond7: (slave veth9): Enslaving as an active interface with a down link
[  296.992243][T12854] tipc: Resetting bearer <eth:syzkaller0>
[  297.404553][T12889] IPv6: NLM_F_CREATE should be specified when creating new route
[  297.702955][  T980] tipc: Node number set to 3454731611
[  298.557887][T12854] tipc: Disabling bearer <eth:syzkaller0>
[  298.574833][T12872] bond7: (slave veth0_to_bond): making interface the new active one
[  298.584199][T12872] veth0_to_bond: entered promiscuous mode
[  298.590827][T12872] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  298.628550][T12876] bond7: (slave veth11): Enslaving as an active interface with a down link
[  298.736772][T12903] __nla_validate_parse: 8 callbacks suppressed
[  298.736792][T12903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1951'.
[  298.902648][T12913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  298.972378][T12914] IPv6: sit1: Disabled Multicast RS
[  298.978755][T12914] sit1: entered allmulticast mode
[  298.985397][T12919] delete_channel: no stack
[  299.221350][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'.
[  299.359864][T12918] delete_channel: no stack
[  299.489371][T12950] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1964'.
[  299.519712][T12950] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  299.542439][T12950] openvswitch: netlink: Message has 6332 unknown bytes.
[  299.639548][T12956] netlink: 'syz.0.1966': attribute type 1 has an invalid length.
[  299.757236][T12956] 8021q: adding VLAN 0 to HW filter on device bond8
[  299.808721][T12970] tipc: Enabled bearer <udp:syz2>, priority 10
[  299.843604][T12963] 8021q: adding VLAN 0 to HW filter on device bond8
[  299.852144][T12963] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address
[  299.881996][T12963] bond8: (slave vxcan5): Error -95 calling set_mac_address
[  299.929089][T12970] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  299.959205][T12970] tipc: Enabled bearer <udp:syz0>, priority 10
[  300.038054][T12985] sock: sock_timestamping_bind_phc: sock not bind to device
[  300.088798][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'.
[  300.110472][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'.
[  300.165066][T12989] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1977'.
[  300.174410][T12989] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1977'.
[  300.189676][T12989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1977'.
[  300.206427][T12992] openvswitch: netlink: IP tunnel dst address not specified
[  300.234445][T12989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1977'.
[  300.464736][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'.
[  300.594593][T13008] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  300.611418][T13009] netlink: 'syz.1.1982': attribute type 21 has an invalid length.
[  300.628997][T13009] IPv6: NLM_F_CREATE should be specified when creating new route
[  300.768007][T12992] infiniband syz0: set down
[  300.788106][T12992] infiniband syz0: added ipvlan1
[  300.921487][T12992] RDS/IB: syz0: added
[  300.926077][T12992] smc: adding ib device syz0 with port count 1
[  300.933024][T12992] smc:    ib device syz0 port 1 has pnetid 
[  301.891558][T13068] bond3: entered promiscuous mode
[  301.903990][T13068] bond3: entered allmulticast mode
[  301.909795][T13068] 8021q: adding VLAN 0 to HW filter on device bond3
[  302.156773][T13092] netlink: 'syz.2.2000': attribute type 1 has an invalid length.
[  302.163313][T13094] netlink: 'syz.4.2001': attribute type 2 has an invalid length.
[  302.227040][T13096] bond6 (unregistering): Released all slaves
[  302.304303][T13092] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  302.379877][T13104] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.432986][T13104] syzkaller0: entered promiscuous mode
[  302.482670][T13104] syzkaller0: entered allmulticast mode
[  302.549200][T13110] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  302.638201][T13113] tipc: Resetting bearer <eth:syzkaller0>
[  302.670646][T13103] tipc: Resetting bearer <eth:syzkaller0>
[  302.737521][T13103] tipc: Disabling bearer <eth:syzkaller0>
[  302.977894][T13124] veth1_macvtap: left promiscuous mode
[  303.009221][T13124] macsec0: entered promiscuous mode
[  303.015626][T13124] macsec0: entered allmulticast mode
[  303.079693][T13124] veth1_macvtap: entered promiscuous mode
[  303.098801][T13124] veth1_macvtap: entered allmulticast mode
[  303.120678][T13124] macsec0: left promiscuous mode
[  303.134856][T13124] macsec0: left allmulticast mode
[  303.151845][T13124] veth1_macvtap: left allmulticast mode
[  303.327726][T13136] netlink: 'syz.4.2011': attribute type 1 has an invalid length.
[  303.617247][T13143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.656430][T13143] syzkaller0: entered promiscuous mode
[  303.689636][T13143] syzkaller0: entered allmulticast mode
[  303.787081][T13143] tipc: Resetting bearer <eth:syzkaller0>
[  303.859751][T13141] tipc: Resetting bearer <eth:syzkaller0>
[  303.930308][T13141] tipc: Disabling bearer <eth:syzkaller0>
[  304.104700][T13165] __nla_validate_parse: 10 callbacks suppressed
[  304.104721][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'.
[  304.104726][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2019'.
[  304.204190][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'.
[  304.252435][T13167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.282661][T13167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.310497][T13167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  304.342239][T13167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  304.896807][T13173] netlink: 'syz.2.2020': attribute type 4 has an invalid length.
[  305.156183][T13167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.194968][T13167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.219550][T13167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  305.275798][T13167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  305.481338][T13167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.521227][T13167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.556701][T13167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  305.590087][T13167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  305.798194][T13219] openvswitch: netlink: Multiple metadata blocks provided
[  305.942819][T13225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2033'.
[  305.973028][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2032'.
[  306.046660][T11648] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  306.073566][T11648] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  306.086498][T11648] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  306.100334][T11648] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  306.111584][T13233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2036'.
[  306.142881][T11654] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  306.157029][T11654] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  306.176131][T11654] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  306.190201][T11654] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  306.283030][T11649] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  306.300073][T11649] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  306.308549][T11649] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  306.326947][T13241] netlink: 'syz.2.2037': attribute type 3 has an invalid length.
[  306.365637][T11649] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  306.377358][T13245] netlink: 'syz.2.2037': attribute type 3 has an invalid length.
[  306.385398][T11649] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  306.385435][T11649] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  306.385682][T11649] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  306.385710][T11649] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  306.516909][T13250] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  306.679739][T13258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2042'.
[  306.828721][T13262] netlink: 'syz.3.2044': attribute type 32 has an invalid length.
[  307.031593][T13277] bond0: entered promiscuous mode
[  307.040465][T13277] bond_slave_0: entered promiscuous mode
[  307.046444][T13277] bond_slave_1: entered promiscuous mode
[  307.131401][T13284] netlink: 'syz.3.2044': attribute type 3 has an invalid length.
[  307.143816][T13284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2044'.
[  307.336679][T13298] sctp: [Deprecated]: syz.2.2052 (pid 13298) Use of int in max_burst socket option.
[  307.336679][T13298] Use struct sctp_assoc_value instead
[  307.664225][T13317] tipc: Enabled bearer <udp:s>, priority 10
[  307.807582][T13326] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2059'.
[  307.901032][T13332] netlink: 'syz.3.2060': attribute type 39 has an invalid length.
[  308.040800][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2062'.
[  308.040848][T13334] netlink: 'syz.2.2061': attribute type 1 has an invalid length.
[  308.162176][T13334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.185637][T13334] syzkaller0: entered promiscuous mode
[  308.211006][T13334] syzkaller0: entered allmulticast mode
[  308.381008][T13334] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  308.445018][T13361] netlink: 'syz.0.2068': attribute type 4 has an invalid length.
[  308.484352][T13361] netlink: 'syz.0.2068': attribute type 4 has an invalid length.
[  308.518959][T13333] tipc: Resetting bearer <eth:syzkaller0>
[  308.571191][T13333] tipc: Disabling bearer <eth:syzkaller0>
[  308.949686][T13383] : entered promiscuous mode
[  309.106920][T13390] geneve3: entered promiscuous mode
[  309.128619][T13390] geneve3: entered allmulticast mode
[  309.213153][   T24] tipc: Node number set to 4058488186
[  309.248573][T13406] __nla_validate_parse: 3 callbacks suppressed
[  309.248595][T13406] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2083'.
[  309.341981][T13413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.433075][T13423] tipc: Resetting bearer <eth:syzkaller0>
[  309.605170][T13434] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2087'.
[  309.762573][T13443] IPVS: Unknown mcast interface: vcan0
[  309.831382][T11647] veth0_to_bond: left promiscuous mode
[  309.876371][T13450] netlink: 'syz.3.2092': attribute type 1 has an invalid length.
[  309.920237][T13450] netlink: 7938 bytes leftover after parsing attributes in process `syz.3.2092'.
[  310.019559][T13403] tipc: Disabling bearer <eth:syzkaller0>
[  310.058517][T13457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2094'.
[  310.206936][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2094'.
[  310.523552][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2098'.
[  310.583213][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'.
[  310.606425][T13476] netlink: 'syz.4.2098': attribute type 12 has an invalid length.
[  310.824365][T13493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'.
[  311.323375][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'.
[  311.500601][T13536] validate_nla: 3 callbacks suppressed
[  311.500621][T13536] netlink: 'syz.4.2117': attribute type 1 has an invalid length.
[  311.565898][T13536] 8021q: adding VLAN 0 to HW filter on device bond4
[  311.578006][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'.
[  311.691414][T13544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.818868][T13541] tipc: Disabling bearer <eth:syzkaller0>
[  311.879661][T13553] netlink: 'syz.0.2121': attribute type 2 has an invalid length.
[  312.001058][T13559] bridge0: entered promiscuous mode
[  312.027644][T13559] bridge0: entered allmulticast mode
[  312.556818][T13590] netlink: 'syz.3.2131': attribute type 1 has an invalid length.
[  312.805386][T13600] 8021q: adding VLAN 0 to HW filter on device bond9
[  312.816522][T13600] bond8: (slave bond9): making interface the new active one
[  312.826506][T13615] netlink: 'syz.0.2135': attribute type 9 has an invalid length.
[  312.837540][T13600] bond8: (slave bond9): Enslaving as an active interface with an up link
[  312.866198][T13604] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  312.882576][T13604] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  314.183766][T13688] netlink: 'syz.1.2155': attribute type 23 has an invalid length.
[  314.259103][T13683]  speed is unknown, defaulting to 1000
[  314.295783][T13692] __nla_validate_parse: 9 callbacks suppressed
[  314.295803][T13692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'.
[  314.337370][T13688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2155'.
[  314.368726][T13699] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  314.516410][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'.
[  314.646542][T13712] netlink: 'syz.1.2160': attribute type 29 has an invalid length.
[  314.702025][T13712] netlink: 'syz.1.2160': attribute type 29 has an invalid length.
[  314.727189][T13712] netlink: 'syz.1.2160': attribute type 29 has an invalid length.
[  314.794597][T13712] netlink: 'syz.1.2160': attribute type 29 has an invalid length.
[  314.836236][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2164'.
[  314.850407][T13721] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2165'.
[  314.855599][T13716] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  314.874659][T13721] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2165'.
[  314.954429][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'.
[  314.983740][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2166'.
[  315.038078][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2166'.
[  315.162921][T13683] wg1 speed is unknown, defaulting to 1000
[  315.484929][T13752] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  316.185673][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2182'.
[  316.938698][T13824] netlink: 'syz.4.2193': attribute type 1 has an invalid length.
[  317.037928][T13826] netlink: 'syz.0.2195': attribute type 3 has an invalid length.
[  317.331580][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.663129][T13850] openvswitch: netlink: IPv4 tun info is not correct
[  317.688230][T13853] netlink: 'syz.3.2202': attribute type 1 has an invalid length.
[  317.735204][T13853] 8021q: adding VLAN 0 to HW filter on device bond10
[  317.798303][T13853] bond10: (slave gretap1): making interface the new active one
[  317.807977][T13853] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  318.139717][T13885] netlink: 'syz.3.2211': attribute type 1 has an invalid length.
[  318.240713][T13885] 8021q: adding VLAN 0 to HW filter on device bond11
[  318.287554][T13889] 8021q: adding VLAN 0 to HW filter on device bond11
[  318.295230][T13889] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  318.311969][T13889] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  318.828706][T13922] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  319.053958][T13932] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  319.071395][T13939] netlink: 'syz.1.2223': attribute type 4 has an invalid length.
[  319.250227][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  319.634193][T13971] __nla_validate_parse: 9 callbacks suppressed
[  319.634215][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2235'.
[  320.611244][T14019] netlink: 'syz.4.2247': attribute type 11 has an invalid length.
[  320.643072][T14017]  speed is unknown, defaulting to 1000
[  320.821812][T14029] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2251'.
[  321.009435][T14017] wg1 speed is unknown, defaulting to 1000
[  321.217068][T14042] netlink: 'syz.4.2255': attribute type 32 has an invalid length.
[  321.241137][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'.
[  321.292042][T14042] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52)
[  321.309414][T14046] bridge0: port 1(syz_tun) entered blocking state
[  321.316328][T14046] bridge0: port 1(syz_tun) entered disabled state
[  321.325311][T14046] syz_tun: entered allmulticast mode
[  321.335962][T14046] syz_tun: entered promiscuous mode
[  321.347863][T14046] bridge0: port 1(syz_tun) entered blocking state
[  321.354478][T14045] netlink: 'syz.3.2256': attribute type 10 has an invalid length.
[  321.354775][T14046] bridge0: port 1(syz_tun) entered forwarding state
[  321.382328][T14045] bridge0: port 1(syz_tun) entered disabled state
[  321.382335][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2255'.
[  321.404912][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2256'.
[  321.414044][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'.
[  321.513691][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'.
[  321.525938][T14049] bridge_slave_0: entered promiscuous mode
[  321.696399][T14054] netlink: 'syz.4.2259': attribute type 11 has an invalid length.
[  321.777628][T14059] syz_tun: entered allmulticast mode
[  321.788353][T14059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2261'.
[  321.797528][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'.
[  321.814545][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'.
[  321.835519][T14059] syz_tun: left allmulticast mode
[  322.370775][ T7638] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.431805][ T7638] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.440284][ T5943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  322.457747][ T1304] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  322.559202][T14096] netlink: 'syz.1.2268': attribute type 1 has an invalid length.
[  322.575475][T14096] netlink: 'syz.1.2268': attribute type 1 has an invalid length.
[  322.778969][T14101] tipc: MTU too low for tipc bearer
[  322.792879][ T5943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  323.060132][ T5943] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  323.216616][T14122] netlink: 'syz.3.2273': attribute type 1 has an invalid length.
[  323.224733][T14122] netlink: 'syz.3.2273': attribute type 1 has an invalid length.
[  323.423971][T14142] netlink: 'syz.4.2277': attribute type 2 has an invalid length.
[  323.476081][T14143] netlink: 'syz.1.2278': attribute type 3 has an invalid length.
[  323.506452][T14143] netlink: 'syz.1.2278': attribute type 7 has an invalid length.
[  323.523408][T14143] netlink: 'syz.1.2278': attribute type 8 has an invalid length.
[  323.550300][T14143] openvswitch: netlink: EtherType 0 is less than min 600
[  323.855965][T14162]  speed is unknown, defaulting to 1000
[  324.034764][T14174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.094477][T14174] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  324.171446][T14176]  speed is unknown, defaulting to 1000
[  324.218115][T14177] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  324.357150][T14182] netlink: 'syz.1.2289': attribute type 12 has an invalid length.
[  324.368566][T14183] openvswitch: netlink: EtherType 0 is less than min 600
[  324.563067][T14162] wg1 speed is unknown, defaulting to 1000
[  325.011534][T14204] __nla_validate_parse: 11 callbacks suppressed
[  325.011559][T14204] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2297'.
[  325.042365][T14204] IPv6: NLM_F_CREATE should be specified when creating new route
[  325.081541][T14204] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  325.099611][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2299'.
[  325.190660][T14204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2297'.
[  325.368388][T14176] wg1 speed is unknown, defaulting to 1000
[  326.207403][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'.
[  326.850173][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  327.004928][T14276] vlan2: entered promiscuous mode
[  327.030728][T14276] bridge0: entered promiscuous mode
[  327.483925][T14288] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2319'.
[  328.027518][T14311] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526
[  328.045903][T14312] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2325'.
[  328.411075][T14335] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  328.508101][T14333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.564183][T14333] syzkaller0: entered promiscuous mode
[  328.569795][T14333] syzkaller0: entered allmulticast mode
[  328.715748][T14337]  speed is unknown, defaulting to 1000
[  328.736773][T14322] tipc: Resetting bearer <eth:syzkaller0>
[  328.801829][T14322] tipc: Disabling bearer <eth:syzkaller0>
[  328.905811][    T9] wg1 speed is unknown, defaulting to 1000
[  329.122573][ T5920] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  329.318381][T14370] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.2340'.
[  329.342453][T14370] openvswitch: netlink: Message has 5 unknown bytes.
[  329.363625][T14370] syz.3.2340 uses old SIOCAX25GETINFO
[  329.376223][T14337] wg1 speed is unknown, defaulting to 1000
[  329.459566][T14375] netlink: 'syz.1.2343': attribute type 11 has an invalid length.
[  329.477434][T14375] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2343'.
[  329.492486][ T7633] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex
[  330.131556][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  330.245374][T14418] dvmrp0: left allmulticast mode
[  330.260091][T14418] vlan1: left allmulticast mode
[  330.272566][T14418] veth0_vlan: left allmulticast mode
[  330.279859][T14420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2354'.
[  330.346856][T14425] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  330.348530][T14420] IPVS: stopping master sync thread 14425 ...
[  330.427550][T14426] netlink: 'syz.2.2356': attribute type 29 has an invalid length.
[  330.719603][T14447] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  331.343481][T14469] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2369'.
[  331.376738][T14469] gre0: entered promiscuous mode
[  331.391843][T14472] netlink: 'syz.1.2371': attribute type 1 has an invalid length.
[  331.419144][T14469] gre0: entered allmulticast mode
[  331.702964][T14484] netlink: 'syz.2.2374': attribute type 1 has an invalid length.
[  331.717528][T14484] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2374'.
[  331.728649][T14484] block nbd1: not configured, cannot reconfigure
[  331.854543][T14485] syzkaller0: entered promiscuous mode
[  331.862275][T14485] syzkaller0: entered allmulticast mode
[  331.956188][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'.
[  332.186119][T14516] netlink: 'syz.2.2384': attribute type 6 has an invalid length.
[  332.199479][T14518] netlink: 'syz.2.2384': attribute type 6 has an invalid length.
[  333.663875][T14496] bond4: (slave bridge0): Releasing active interface
[  333.748060][T14512] 
: renamed from veth1_macvtap (while UP)
[  333.774446][T14532] tap0: tun_chr_ioctl cmd 1074025672
[  333.790597][T14532] tap0: ignored: set checksum disabled
[  333.810670][T14544] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2390'.
[  334.127364][T14561] openvswitch: netlink: Message has 4 unknown bytes.
[  335.004499][T14605] netlink: 'syz.4.2410': attribute type 1 has an invalid length.
[  335.041692][T14605] 8021q: adding VLAN 0 to HW filter on device bond5
[  335.081039][T14605] 8021q: adding VLAN 0 to HW filter on device bond5
[  335.102834][T14605] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  335.119645][T14605] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  335.193030][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2411'.
[  335.221739][T14611] veth1: entered promiscuous mode
[  335.242314][T14611] bond5: (slave veth1): Enslaving as an active interface with a down link
[  335.265615][T14616] vlan6: entered allmulticast mode
[  335.275861][T14616] bond5: entered allmulticast mode
[  335.416059][T14611] vlan6: entered allmulticast mode
[  335.421420][T14611] bond0: entered allmulticast mode
[  335.426559][T14611] bridge5: entered allmulticast mode
[  335.442790][T14620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2413'.
[  335.519761][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  335.568909][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  335.618342][T14629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2416'.
[  335.634543][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  335.699089][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  335.763553][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  335.889095][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  335.898502][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  336.023118][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  336.097333][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  336.883205][T14695] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  336.982223][T14695] netlink: 'syz.0.2435': attribute type 10 has an invalid length.
[  337.034390][T14695] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  337.923979][T14742] netlink: 'syz.1.2451': attribute type 1 has an invalid length.
[  338.045653][T14742] bond7: entered promiscuous mode
[  338.052808][T14742] 8021q: adding VLAN 0 to HW filter on device bond7
[  338.180870][T14742] bond7: (slave bridge6): making interface the new active one
[  338.208345][T14742] bridge6: entered promiscuous mode
[  338.232734][T14742] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  338.381844][T14769] netlink: 'syz.3.2459': attribute type 2 has an invalid length.
[  339.418743][T14812] netlink: 'syz.0.2467': attribute type 10 has an invalid length.
[  340.459413][T14812] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  340.503465][T14814] __nla_validate_parse: 12 callbacks suppressed
[  340.503486][T14814] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2467'.
[  340.534060][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2468'.
[  340.543487][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2468'.
[  340.651834][T14825] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2469'.
[  340.924861][T14847] netlink: 'syz.4.2477': attribute type 11 has an invalid length.
[  340.934148][T14844] netlink: 'syz.2.2475': attribute type 1 has an invalid length.
[  340.953221][T14849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2478'.
[  341.002278][T14853] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.2479'.
[  341.025748][T14844] 8021q: adding VLAN 0 to HW filter on device bond6
[  341.135635][T14854] bond6: (slave veth40): Enslaving as an active interface with a down link
[  341.214878][T14865] netlink: 'syz.4.2480': attribute type 1 has an invalid length.
[  341.244878][T14848] bond6: (slave veth42): Enslaving as an active interface with a down link
[  341.290320][T14865] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2480'.
[  341.427431][T14877] netlink: 'syz.1.2486': attribute type 64 has an invalid length.
[  341.462777][T14878] netlink: 'syz.2.2485': attribute type 1 has an invalid length.
[  341.471204][T14877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2486'.
[  341.518878][T14884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2484'.
[  341.564127][T14878] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  341.818654][T14899] xt_l2tp: missing protocol rule (udp|l2tpip)
[  342.033094][T14917] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  342.113180][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'.
[  342.904219][T14965] syz.0.2506 (14965) used greatest stack depth: 16728 bytes left
[  343.242666][    C0] vcan0: j1939_tp_rxtimer: 0xffff888058de0800: rx timeout, send abort
[  343.253364][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058de0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  343.727691][T15015] netlink: 'syz.0.2516': attribute type 29 has an invalid length.
[  343.751520][T15015] netlink: 'syz.0.2516': attribute type 29 has an invalid length.
[  343.988736][T15033] netlink: 'syz.2.2519': attribute type 4 has an invalid length.
[  344.380892][T15051] sctp: [Deprecated]: syz.0.2527 (pid 15051) Use of struct sctp_assoc_value in delayed_ack socket option.
[  344.380892][T15051] Use struct sctp_sack_info instead
[  344.584486][T15070] sch_fq: defrate 0 ignored.
[  344.601185][T15060] netlink: 'syz.2.2529': attribute type 11 has an invalid length.
[  344.928056][T15086] netlink: 'syz.4.2537': attribute type 5 has an invalid length.
[  344.956121][T15093] netlink: 'syz.0.2539': attribute type 1 has an invalid length.
[  345.017930][T15093] 8021q: adding VLAN 0 to HW filter on device bond9
[  345.274848][T15113] netlink: 'syz.0.2544': attribute type 1 has an invalid length.
[  345.305028][T15109] can: request_module (can-proto-0) failed.
[  345.334474][T15114] veth0_to_team: entered allmulticast mode
[  345.462414][T15121] nbd: must specify a device to reconfigure
[  345.515116][T15121] __nla_validate_parse: 12 callbacks suppressed
[  345.515138][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'.
[  346.119722][T15156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.142084][T15156] syzkaller0: entered promiscuous mode
[  346.147633][T15156] syzkaller0: entered allmulticast mode
[  346.195642][T15156] tipc: Resetting bearer <eth:syzkaller0>
[  346.229095][T15154] tipc: Resetting bearer <eth:syzkaller0>
[  346.284438][T15154] tipc: Disabling bearer <eth:syzkaller0>
[  346.478708][T15179] netlink: 'syz.3.2562': attribute type 1 has an invalid length.
[  346.530990][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.607001][T15179] 8021q: adding VLAN 0 to HW filter on device bond12
[  346.659285][T15188] netlink: 'syz.4.2565': attribute type 1 has an invalid length.
[  346.693303][T15181] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.733805][T15181] syzkaller0: entered promiscuous mode
[  346.753711][T15181] syzkaller0: entered allmulticast mode
[  346.783155][T15181] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2564'.
[  346.840509][T15180] tipc: Resetting bearer <eth:syzkaller0>
[  346.878307][T15180] tipc: Disabling bearer <eth:syzkaller0>
[  346.985151][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2571'.
[  347.081398][T15211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2574'.
[  347.345946][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.546007][T15234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2581'.
[  347.561514][T15234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2581'.
[  347.746908][T15240] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  347.972053][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2587'.
[  348.081018][T15260] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2589'.
[  348.201578][T15271] syzkaller0: entered promiscuous mode
[  348.215559][T15271] syzkaller0: entered allmulticast mode
[  348.293606][T15271] syzkaller0: left allmulticast mode
[  348.708441][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2598'.
[  348.878764][T15302] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2602'.
[  349.078506][T15316] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  349.216175][T15320] veth0_to_team: entered promiscuous mode
[  349.315162][T15327] netlink: 'syz.4.2611': attribute type 5 has an invalid length.
[  349.362719][T15330] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2
[  349.426171][T15330] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€
[  349.597963][T15338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.538442][T15374] __nla_validate_parse: 6 callbacks suppressed
[  351.538465][T15374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2620'.
[  352.015986][T15409] openvswitch: netlink: IPv4 tun info is not correct
[  352.160153][T15413] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  352.328532][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2635'.
[  352.378815][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'.
[  352.558345][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'.
[  352.577706][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2637'.
[  352.596995][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'.
[  352.775009][T15443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2639'.
[  352.889369][T15451] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  352.987557][T15460] netlink: 'syz.1.2643': attribute type 1 has an invalid length.
[  353.119645][T15463] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  353.152199][T15463] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  353.267146][T15465] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  353.279608][T15465] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  353.292461][T15465] gretap2: entered promiscuous mode
[  353.297794][T15465] gretap2: entered allmulticast mode
[  353.326504][T15470] macvlan3: entered promiscuous mode
[  353.332467][T15470] macvlan3: entered allmulticast mode
[  353.342100][T15483] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2649'.
[  353.352800][T15470] bond8: entered promiscuous mode
[  353.358792][T15470] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  353.381965][T15470] bond8: left promiscuous mode
[  353.577549][T15491] netlink: 'syz.3.2652': attribute type 15 has an invalid length.
[  353.955148][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  354.305377][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2664'.
[  354.435772][T15532] dvmrp0: entered allmulticast mode
[  354.900458][T15560] vxcan1: tx address claim with dest, not broadcast
[  354.914084][T15561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2674'.
[  355.498052][T15601] netlink: 'syz.3.2684': attribute type 21 has an invalid length.
[  356.998943][T15673] netlink: 'syz.0.2702': attribute type 33 has an invalid length.
[  357.043464][T15673] __nla_validate_parse: 6 callbacks suppressed
[  357.043485][T15673] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2702'.
[  357.387767][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'.
[  357.456154][T15707] netlink: 'syz.2.2711': attribute type 1 has an invalid length.
[  357.484191][T15707] netlink: 'syz.2.2711': attribute type 2 has an invalid length.
[  357.580947][T15712] netlink: 'syz.3.2712': attribute type 11 has an invalid length.
[  357.607104][T15712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2712'.
[  357.616747][T15712] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2712'.
[  357.653658][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2712'.
[  357.801282][T15724] openvswitch: netlink: IPv6 tunnel dst address is zero
[  358.012649][T15735] bond0: entered allmulticast mode
[  358.026904][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'.
[  358.059999][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'.
[  358.292714][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.372667][ T6289] IPVS: ip_vs_send_async error -101
[  358.446387][T15751] sit0: entered promiscuous mode
[  358.491122][T15751] netlink: 'syz.4.2725': attribute type 1 has an invalid length.
[  358.528496][T15751] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2725'.
[  358.934161][T15768] netlink: 'syz.0.2732': attribute type 3 has an invalid length.
[  358.942154][T15768] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.102082][T15771] netlink: 'syz.4.2733': attribute type 3 has an invalid length.
[  359.120694][T15774] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  359.143765][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'.
[  359.321279][T15785] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2735'.
[  359.625142][T15794] : entered promiscuous mode
[  359.675966][T15804] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  360.028957][T15820] syz_tun: left allmulticast mode
[  360.034321][T15820] syz_tun: left promiscuous mode
[  360.039769][T15820] bridge0: port 1(syz_tun) entered disabled state
[  361.059033][T15863]  speed is unknown, defaulting to 1000
[  361.222222][T15870] netlink: 'syz.1.2762': attribute type 1 has an invalid length.
[  361.439607][T15863] wg1 speed is unknown, defaulting to 1000
[  361.495698][T15877] wg2: entered promiscuous mode
[  361.506846][T15877] wg2: entered allmulticast mode
[  362.137229][T15895] dvmrp0: entered allmulticast mode
[  362.581898][T15929] netlink: 'syz.4.2782': attribute type 1 has an invalid length.
[  362.590016][T15929] __nla_validate_parse: 2 callbacks suppressed
[  362.590034][T15929] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2782'.
[  362.605758][T15929] nbd: couldn't find device at index 1048576
[  362.616134][T15935] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  362.750143][T15943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.804191][T15926] syzkaller0: entered promiscuous mode
[  362.809724][T15926] syzkaller0: entered allmulticast mode
[  362.851450][T15950] netlink: 'syz.0.2785': attribute type 12 has an invalid length.
[  362.935519][T15958] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  363.134134][T15926] tipc: Resetting bearer <eth:syzkaller0>
[  363.192482][T15924] tipc: Resetting bearer <eth:syzkaller0>
[  363.298590][T15924] tipc: Disabling bearer <eth:syzkaller0>
[  363.981347][T15999] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2794'.
[  364.372303][T16014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2799'.
[  364.388701][T16017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.658747][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  364.668597][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  364.677543][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  364.702450][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  364.707525][T16028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'.
[  364.719298][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.768259][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  364.778926][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  364.791890][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  364.804386][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  364.814443][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  364.964819][T16023]  speed is unknown, defaulting to 1000
[  365.005234][ T7633] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.053940][ T7633] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  365.104613][ T7633] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.134102][ T7633] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  365.258352][T16045] IPVS: Error connecting to the multicast addr
[  365.291226][T16047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2809'.
[  365.323863][ T7633] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.354175][ T7633] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  365.370405][ T7633] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.386786][ T7633] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  365.482122][ T7633] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.516935][ T7633] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  365.555699][ T7633] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.579512][T16057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2813'.
[  365.581948][ T7633] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  365.617249][T16057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2813'.
[  365.727666][T16059] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.2814'.
[  365.739559][ T7633] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  365.763716][ T7633] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  365.790038][ T7633] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  365.799752][ T7633] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  365.852146][T16023] wg1 speed is unknown, defaulting to 1000
[  366.034645][T16071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  366.042526][T16071] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  366.076872][T16071] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  366.126272][T16071] tipc: Resetting bearer <eth:syzkaller0>
[  366.229689][T16072] tipc: Resetting bearer <eth:syzkaller0>
[  366.529016][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'.
[  366.860153][ T5868] Bluetooth: hci1: command tx timeout
[  367.133871][ T7633] bond0 (unregistering): (slave bridge5): Releasing active interface
[  367.143559][ T7633] bridge5 (unregistering): left allmulticast mode
[  367.446736][ T7633] bond1 (unregistering): Released all slaves
[  367.562177][ T7633] bond2 (unregistering): Released all slaves
[  367.579764][ T7633] bond0 (unregistering): Released all slaves
[  367.686780][ T7633] bond3 (unregistering): Released all slaves
[  367.796468][ T7633] bond4 (unregistering): Released all slaves
[  367.907864][ T7633] bond5 (unregistering): (slave veth1): Releasing active interface
[  367.918495][ T7633] bond5 (unregistering): Released all slaves
[  367.935710][ T7633] bond6 (unregistering): Released all slaves
[  367.954509][ T7633] bond7 (unregistering): Released all slaves
[  367.977168][ T7633] bond8 (unregistering): Released all slaves
[  368.189355][ T7643] smc: removing ib device syz0
[  368.242479][ T7644] tipc: Resetting bearer <eth:syzkaller0>
[  368.324488][ T7633] : left promiscuous mode
[  368.368638][ T5943] ==================================================================
[  368.376762][ T5943] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  368.385562][ T5943] Read of size 8 at addr ffff88805404a2e8 by task kworker/1:5/5943
[  368.393480][ T5943] 
[  368.395835][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) 
[  368.395862][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  368.395876][ T5943] Workqueue: events smc_ib_port_event_work
[  368.395925][ T5943] Call Trace:
[  368.395934][ T5943]  <TASK>
[  368.395943][ T5943]  dump_stack_lvl+0x189/0x250
[  368.395970][ T5943]  ? rcu_is_watching+0x15/0xb0
[  368.395990][ T5943]  ? __kasan_check_byte+0x12/0x40
[  368.396020][ T5943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.396042][ T5943]  ? rcu_is_watching+0x15/0xb0
[  368.396061][ T5943]  ? lock_release+0x4b/0x3e0
[  368.396092][ T5943]  ? __virt_addr_valid+0x1c8/0x5c0
[  368.396118][ T5943]  ? __virt_addr_valid+0x4a5/0x5c0
[  368.396146][ T5943]  print_report+0xca/0x240
[  368.396165][ T5943]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  368.396191][ T5943]  kasan_report+0x118/0x150
[  368.396221][ T5943]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  368.396250][ T5943]  __ethtool_get_link_ksettings+0x6e/0x190
[  368.396278][ T5943]  ib_get_eth_speed+0x15e/0x7b0
[  368.396312][ T5943]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  368.396343][ T5943]  ? do_raw_spin_unlock+0x122/0x240
[  368.396373][ T5943]  rxe_query_port+0x93/0x3b0
[  368.396395][ T5943]  ib_query_port+0x16d/0x830
[  368.396430][ T5943]  smc_ib_port_event_work+0x15a/0x940
[  368.396465][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.396483][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  368.396503][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  368.396523][ T5943]  process_scheduled_works+0xae1/0x17b0
[  368.396558][ T5943]  ? __pfx_process_scheduled_works+0x10/0x10
[  368.396588][ T5943]  worker_thread+0x8a0/0xda0
[  368.396610][ T5943]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  368.396646][ T5943]  ? __kthread_parkme+0x7b/0x200
[  368.396672][ T5943]  kthread+0x70e/0x8a0
[  368.396698][ T5943]  ? __pfx_worker_thread+0x10/0x10
[  368.396718][ T5943]  ? __pfx_kthread+0x10/0x10
[  368.396743][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  368.396760][ T5943]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.396779][ T5943]  ? __pfx_kthread+0x10/0x10
[  368.396803][ T5943]  ret_from_fork+0x439/0x7d0
[  368.396823][ T5943]  ? __pfx_ret_from_fork+0x10/0x10
[  368.396845][ T5943]  ? __switch_to_asm+0x39/0x70
[  368.396869][ T5943]  ? __switch_to_asm+0x33/0x70
[  368.396892][ T5943]  ? __pfx_kthread+0x10/0x10
[  368.396915][ T5943]  ret_from_fork_asm+0x1a/0x30
[  368.396947][ T5943]  </TASK>
[  368.396955][ T5943] 
[  368.630868][ T5943] Allocated by task 5870:
[  368.635195][ T5943]  kasan_save_track+0x3e/0x80
[  368.639884][ T5943]  __kasan_kmalloc+0x93/0xb0
[  368.644485][ T5943]  __kvmalloc_node_noprof+0x30d/0x5f0
[  368.649869][ T5943]  alloc_netdev_mqs+0xa3/0x11b0
[  368.654738][ T5943]  rtnl_create_link+0x31f/0xd10
[  368.659601][ T5943]  rtnl_newlink_create+0x25c/0xb00
[  368.664718][ T5943]  rtnl_newlink+0x16d6/0x1c70
[  368.669407][ T5943]  rtnetlink_rcv_msg+0x7cf/0xb70
[  368.674347][ T5943]  netlink_rcv_skb+0x208/0x470
[  368.679117][ T5943]  netlink_unicast+0x82f/0x9e0
[  368.683916][ T5943]  netlink_sendmsg+0x805/0xb30
[  368.688685][ T5943]  __sock_sendmsg+0x219/0x270
[  368.693439][ T5943]  __sys_sendto+0x3bd/0x520
[  368.697948][ T5943]  __x64_sys_sendto+0xde/0x100
[  368.702715][ T5943]  do_syscall_64+0xfa/0x3b0
[  368.707228][ T5943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.713143][ T5943] 
[  368.715466][ T5943] Freed by task 16084:
[  368.719549][ T5943]  kasan_save_track+0x3e/0x80
[  368.724240][ T5943]  kasan_save_free_info+0x46/0x50
[  368.729277][ T5943]  __kasan_slab_free+0x5b/0x80
[  368.734053][ T5943]  kfree+0x18e/0x440
[  368.737953][ T5943]  device_release+0x9c/0x1c0
[  368.742550][ T5943]  kobject_put+0x22b/0x480
[  368.746975][ T5943]  netdev_run_todo+0xd2e/0xea0
[  368.751749][ T5943]  rtnl_dellink+0x537/0x710
[  368.756258][ T5943]  rtnetlink_rcv_msg+0x7cf/0xb70
[  368.761198][ T5943]  netlink_rcv_skb+0x208/0x470
[  368.765967][ T5943]  netlink_unicast+0x82f/0x9e0
[  368.770744][ T5943]  netlink_sendmsg+0x805/0xb30
[  368.775510][ T5943]  __sock_sendmsg+0x219/0x270
[  368.780201][ T5943]  ____sys_sendmsg+0x505/0x830
[  368.784988][ T5943]  ___sys_sendmsg+0x21f/0x2a0
[  368.789670][ T5943]  __x64_sys_sendmsg+0x19b/0x260
[  368.794613][ T5943]  do_syscall_64+0xfa/0x3b0
[  368.799119][ T5943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.805017][ T5943] 
[  368.807345][ T5943] The buggy address belongs to the object at ffff88805404a000
[  368.807345][ T5943]  which belongs to the cache kmalloc-cg-4k of size 4096
[  368.821662][ T5943] The buggy address is located 744 bytes inside of
[  368.821662][ T5943]  freed 4096-byte region [ffff88805404a000, ffff88805404b000)
[  368.835557][ T5943] 
[  368.837891][ T5943] The buggy address belongs to the physical page:
[  368.844319][ T5943] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54048
[  368.853090][ T5943] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  368.861588][ T5943] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  368.869140][ T5943] page_type: f5(slab)
[  368.873130][ T5943] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  368.881738][ T5943] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  368.890323][ T5943] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000
[  368.898999][ T5943] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  368.907676][ T5943] head: 00fff00000000003 ffffea0001501201 00000000ffffffff 00000000ffffffff
[  368.916350][ T5943] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  368.925020][ T5943] page dumped because: kasan: bad access detected
[  368.931445][ T5943] page_owner tracks the page as allocated
[  368.937160][ T5943] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5870, tgid 5870 (syz-executor), ts 92608927204, free_ts 29696627905
[  368.958698][ T5943]  post_alloc_hook+0x240/0x2a0
[  368.963483][ T5943]  get_page_from_freelist+0x21e4/0x22c0
[  368.969033][ T5943]  __alloc_frozen_pages_noprof+0x181/0x370
[  368.974860][ T5943]  alloc_pages_mpol+0x232/0x4a0
[  368.979721][ T5943]  allocate_slab+0x8a/0x370
[  368.984229][ T5943]  ___slab_alloc+0xbeb/0x1420
[  368.988923][ T5943]  __kmalloc_noprof+0x305/0x4f0
[  368.993778][ T5943]  __register_sysctl_table+0x72/0x1340
[  368.999245][ T5943]  __addrconf_sysctl_register+0x328/0x4c0
[  369.004976][ T5943]  addrconf_sysctl_register+0x168/0x1c0
[  369.010526][ T5943]  ipv6_add_dev+0xd46/0x1370
[  369.015122][ T5943]  addrconf_notify+0x794/0x1010
[  369.019996][ T5943]  notifier_call_chain+0x1b3/0x3e0
[  369.025122][ T5943]  register_netdevice+0x1608/0x1ae0
[  369.030333][ T5943]  virt_wifi_newlink+0x428/0x860
[  369.035280][ T5943]  rtnl_newlink_create+0x310/0xb00
[  369.040395][ T5943] page last free pid 1 tgid 1 stack trace:
[  369.046198][ T5943]  __free_frozen_pages+0xbc4/0xd30
[  369.051328][ T5943]  free_contig_range+0x1bd/0x4a0
[  369.056271][ T5943]  destroy_args+0x69/0x660
[  369.060718][ T5943]  debug_vm_pgtable+0x39f/0x3b0
[  369.065579][ T5943]  do_one_initcall+0x233/0x820
[  369.070348][ T5943]  do_initcall_level+0x104/0x190
[  369.075290][ T5943]  do_initcalls+0x59/0xa0
[  369.079631][ T5943]  kernel_init_freeable+0x334/0x4b0
[  369.084837][ T5943]  kernel_init+0x1d/0x1d0
[  369.089174][ T5943]  ret_from_fork+0x439/0x7d0
[  369.093764][ T5943]  ret_from_fork_asm+0x1a/0x30
[  369.098997][ T5943] 
[  369.101337][ T5943] Memory state around the buggy address:
[  369.106972][ T5943]  ffff88805404a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  369.115037][ T5943]  ffff88805404a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  369.123102][ T5943] >ffff88805404a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  369.131159][ T5943]                                                           ^
[  369.138609][ T5943]  ffff88805404a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  369.146667][ T5943]  ffff88805404a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  369.154843][ T5943] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  369.179996][ T5868] Bluetooth: hci1: command tx timeout
[  369.228701][ T5943] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  369.235965][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) 
[  369.245362][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  369.255520][ T5943] Workqueue: events smc_ib_port_event_work
[  369.261355][ T5943] Call Trace:
[  369.264716][ T5943]  <TASK>
[  369.267678][ T5943]  dump_stack_lvl+0x99/0x250
[  369.272294][ T5943]  ? __asan_memcpy+0x40/0x70
[  369.276942][ T5943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.282155][ T5943]  ? __pfx__printk+0x10/0x10
[  369.286774][ T5943]  vpanic+0x281/0x750
[  369.290771][ T5943]  ? preempt_schedule+0xae/0xc0
[  369.295632][ T5943]  ? __pfx_vpanic+0x10/0x10
[  369.300146][ T5943]  ? preempt_schedule_common+0x83/0xd0
[  369.305612][ T5943]  ? preempt_schedule+0xae/0xc0
[  369.310462][ T5943]  ? __pfx_preempt_schedule+0x10/0x10
[  369.315839][ T5943]  panic+0xb9/0xc0
[  369.319566][ T5943]  ? __pfx_panic+0x10/0x10
[  369.323997][ T5943]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  369.329913][ T5943]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  369.335931][ T5943]  check_panic_on_warn+0x89/0xb0
[  369.340898][ T5943]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  369.346904][ T5943]  end_report+0x78/0x160
[  369.351169][ T5943]  kasan_report+0x129/0x150
[  369.355691][ T5943]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  369.361687][ T5943]  __ethtool_get_link_ksettings+0x6e/0x190
[  369.367511][ T5943]  ib_get_eth_speed+0x15e/0x7b0
[  369.372377][ T5943]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  369.377771][ T5943]  ? do_raw_spin_unlock+0x122/0x240
[  369.382993][ T5943]  rxe_query_port+0x93/0x3b0
[  369.387589][ T5943]  ib_query_port+0x16d/0x830
[  369.392190][ T5943]  smc_ib_port_event_work+0x15a/0x940
[  369.397585][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  369.402891][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  369.408610][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  369.414336][ T5943]  process_scheduled_works+0xae1/0x17b0
[  369.419924][ T5943]  ? __pfx_process_scheduled_works+0x10/0x10
[  369.425917][ T5943]  worker_thread+0x8a0/0xda0
[  369.430600][ T5943]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  369.436943][ T5943]  ? __kthread_parkme+0x7b/0x200
[  369.441894][ T5943]  kthread+0x70e/0x8a0
[  369.445973][ T5943]  ? __pfx_worker_thread+0x10/0x10
[  369.451082][ T5943]  ? __pfx_kthread+0x10/0x10
[  369.455678][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  369.460975][ T5943]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.466213][ T5943]  ? __pfx_kthread+0x10/0x10
[  369.470819][ T5943]  ret_from_fork+0x439/0x7d0
[  369.475422][ T5943]  ? __pfx_ret_from_fork+0x10/0x10
[  369.480547][ T5943]  ? __switch_to_asm+0x39/0x70
[  369.485358][ T5943]  ? __switch_to_asm+0x33/0x70
[  369.490154][ T5943]  ? __pfx_kthread+0x10/0x10
[  369.494755][ T5943]  ret_from_fork_asm+0x1a/0x30
[  369.499536][ T5943]  </TASK>
[  369.502908][ T5943] Kernel Offset: disabled
[  369.507237][ T5943] Rebooting in 86400 seconds..