last executing test programs:

1m44.088658415s ago: executing program 2 (id=7311):
r0 = socket$igmp(0x2, 0x3, 0x2) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0x12, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0x80}, 0x50)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x401, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
r4 = socket$alg(0x26, 0x5, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x8004)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) (async)
bind$alg(r4, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="35b5063d774995dd03cf8be2a28fe546", 0x10) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
recvmmsg(r8, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=""/177, 0xb1}], 0x1}, 0xed88}], 0x1, 0x2, 0x0) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x8, &(0x7f0000001500)=ANY=[@ANYBLOB="18400000faffffff0000000000000000184b0000fdffffff00000000000000001865000007000000000000000900000018670000eeffffffffffffff1d000000413ede794ee9fbf12cc2c711e6eb1f13ffa95b2c"], &(0x7f0000001240)='syzkaller\x00', 0xb363, 0x74, &(0x7f0000001340)=""/116, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0xd, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001440)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001480)=[{0x0, 0x3, 0xe, 0x1}, {0x3, 0x3, 0x1}, {0x4, 0x3, 0xa, 0x6}, {0x3, 0x20002, 0xc, 0x7}, {0x3, 0x12, 0x9, 0x4}, {0x0, 0x1, 0x0, 0x7}, {0x4, 0x4, 0x6, 0x2}], 0x10, 0x358f}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0x20, &(0x7f00000016c0)={&(0x7f0000001600)=""/135, 0x87, <r10=>0x0, &(0x7f0000001580)=""/115, 0x73}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, r9}, 0x94)

1m43.997791758s ago: executing program 2 (id=7314):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r1, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4)
sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r1, 0x0, 0x0, 0x400000000000000)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000200)={@initdev, @rand_addr, <r3=>0x0}, &(0x7f00000002c0)=0xc)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x670d66906d2c7ca0}, 0x2000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xe65252683092207, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000400)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2800000012002102000000000000000007"], 0x28}}, 0x0)
r6 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r6, &(0x7f00000000c0)="be3dcbb24ccb23a366f5f13ba8a94dd7d224851a4ce5272293110bd5681eb67ea2c95aab68b43643c0c9bdf24d6a00a0bbbbf545202c3b34336583398f0400dd118d478852d3bc35f245df9136ba460e10228819a801e4774f25793ce7296ecc00389658f7a6c37978a018b3fcdbbff376d32799d07feb8a2bab8577b64906d22ad369d405942ee6deace95661dd8cfe77401be275eae8a0a6217cfd3319e3e56eb74114d18d604dc3ffce3539a3749ce32009c82be57bf6f316a94def511abb8986d499563837869a8efad6", 0xcc)
write(r6, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_sctp_SIOCINQ(r7, 0x541b, &(0x7f0000000000))

1m43.825890336s ago: executing program 2 (id=7318):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000100000000000000004c0000000c00a6000000000000000000080001007063690011e4a6aebf10e07131bcb2dcde0002b0c70bedd2ac8b316780240030303030"], 0x3c}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

1m43.76862845s ago: executing program 2 (id=7320):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}}, 0x90)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, r6, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4)

1m43.617606887s ago: executing program 2 (id=7321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x32}, [@mark={0xc}]}, 0x34}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x40800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6)
sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x1c, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, r4, 0x79a94d01912dc93b, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c010}, 0x4048010)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r2)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r11, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x80}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x3}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

1m43.337329101s ago: executing program 2 (id=7323):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) (async)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000f9dbdf257900000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) (async)
listen(r4, 0x100) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp6=r4}, 0x20) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x38, 0x4)
r10 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r11=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r11, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, <r14=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) (async)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x80000000, 0x4, 0x3, 0x40000, 0xffffffffffffffff, 0x8a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x4}, 0x50) (async)
r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r0, 0x3, 0x2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60a8462e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x2, 0x3, 0x2, 0x3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0x16, '\x00', r11, @fallback=0x2f, r12, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x7, 0xffe000, 0x2}, 0x10, 0xffffffffffffffff, r13, 0x0, &(0x7f0000000440)=[0x1, 0x1, r14, r15, r16], 0x0, 0x10, 0x3}, 0x94)

1m28.303272834s ago: executing program 32 (id=7323):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) (async)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000f9dbdf257900000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) (async)
listen(r4, 0x100) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp6=r4}, 0x20) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x38, 0x4)
r10 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r11=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r11, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r11, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, <r14=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) (async)
r15 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x80000000, 0x4, 0x3, 0x40000, 0xffffffffffffffff, 0x8a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x4}, 0x50) (async)
r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r0, 0x3, 0x2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x60a8462e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ldst={0x2, 0x3, 0x2, 0x3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xe, &(0x7f0000000140)=""/14, 0x41000, 0x16, '\x00', r11, @fallback=0x2f, r12, 0x8, &(0x7f00000001c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x7, 0xffe000, 0x2}, 0x10, 0xffffffffffffffff, r13, 0x0, &(0x7f0000000440)=[0x1, 0x1, r14, r15, r16], 0x0, 0x10, 0x3}, 0x94)

2.19934538s ago: executing program 4 (id=8786):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)={0x18, 0x17, 0xa, 0xb01, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$inet6(0xa, 0x1, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x7, 0x8}}, 0xe8) (async)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async)
r6 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r3) (async)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000226bd7000ffdbdf2507000000080009000000c8020bbf52d78a797374656d5f753a6f626a6563745f723a737973746558645f73797374656d63746c5f657865635f743a0330000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0)

1.70786753s ago: executing program 1 (id=8798):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
read$alg(r1, &(0x7f0000000140)=""/131, 0x83)
r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000400), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
writev(r6, &(0x7f0000000740)=[{&(0x7f0000000340)="b37bc9875a5ce52a", 0x8}], 0x1)
r7 = socket$alg(0x26, 0x5, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r9, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x4000054)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10800)
socket(0x2d, 0x2, 0x0)
sendfile(r7, r2, 0x0, 0x9)

1.633305743s ago: executing program 5 (id=8799):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040840}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x14, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0)
r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800)
connect(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x4, 0x2, {0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}}}, 0x80)

1.5658729s ago: executing program 1 (id=8800):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000e40)="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", 0x194}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990", 0xa5}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES64=0x0], 0x28}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="fb4958b6d6d6270faf2ff2d291ff8ffc25dec569309e38010e4ac4046fdabbcc13ec45d120bc15ba2b8c5410bf8269ee0d9c084bfdc64065715f3cea316976a81e342dee91e030963b5c7d359a3f6fa71cb0510c8fc994fc80c9a31e435b6115bdc5cc9cb11e64d9487924191fd6167e8738a3ce487fa21ec40830f2d865"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r7=>0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x84, 0x20, 0x0, 0x0)
sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9598788a21c6422977189831bdf088904ce875734e92fd6fa2b5081f73faba26e353c556d57f729c2cd594129a9947e0bfb8415cfabd0e5cef00"/69, @ANYRES16=r4, @ANYBLOB="10002bbd7000fddbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08001500020000000800150001000000080015000200000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080015000200000008001500c0000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20024000}, 0x4024015)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) (async)
socket$kcm(0x2, 0x3, 0x84) (async)
sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37477813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f126e6df1b0e9c676d1ab5", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000e40)="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", 0x194}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990", 0xa5}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0}) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES64=0x0], 0x28}}, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="fb4958b6d6d6270faf2ff2d291ff8ffc25dec569309e38010e4ac4046fdabbcc13ec45d120bc15ba2b8c5410bf8269ee0d9c084bfdc64065715f3cea316976a81e342dee91e030963b5c7d359a3f6fa71cb0510c8fc994fc80c9a31e435b6115bdc5cc9cb11e64d9487924191fd6167e8738a3ce487fa21ec40830f2d865"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x84, 0x20, 0x0, 0x0) (async)
sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9598788a21c6422977189831bdf088904ce875734e92fd6fa2b5081f73faba26e353c556d57f729c2cd594129a9947e0bfb8415cfabd0e5cef00"/69, @ANYRES16=r4, @ANYBLOB="10002bbd7000fddbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08001500020000000800150001000000080015000200000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080015000200000008001500c0000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20024000}, 0x4024015) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async)

1.554766199s ago: executing program 3 (id=8801):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d300000000000000800040004000000"], 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x4080)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003})

1.480584931s ago: executing program 5 (id=8802):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0xb, [@const={0x7, 0x0, 0x0, 0xa, 0x4}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x5}, @var={0x5, 0x0, 0x0, 0xe, 0x3, 0x2}, @enum={0xa, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x100}, {0x5, 0x3}, {0x0, 0x81}]}]}, {0x0, [0x61, 0x2e, 0x0, 0x61, 0x30, 0x0, 0x30, 0x30, 0x5f]}}, &(0x7f0000000440)=""/205, 0x7f, 0xcd, 0x1, 0x80, 0x10000}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000540)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000580)=[{0x4, 0x1, 0xc, 0x2}, {0x1, 0x1, 0xe, 0x2}, {0x0, 0x2, 0xf, 0x5}, {0x1, 0x1, 0xb, 0x4}, {0x5, 0x4, 0x6, 0x4}, {0x1, 0x4, 0x0, 0x9}, {0x2, 0x3, 0x4, 0x2}, {0x4, 0x1, 0x7, 0xc}, {0x5, 0x4, 0x8, 0x3}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x5, 0x1, 0x5, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], <r3=>0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r1, 0x1e, 0x0, @val=@netkit={@void, @value=r0, @void, @void, r3}}, 0x1c)

1.421879513s ago: executing program 0 (id=8803):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="e6", 0x1}], 0x1}}], 0x1, 0x24000891)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x18) (async)
r3 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) (async)
socket$nl_rdma(0x10, 0x3, 0x14)

1.410916429s ago: executing program 1 (id=8804):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

1.407675985s ago: executing program 5 (id=8805):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x2c, r2, 0x5, 0x3ffd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}}, 0x0)

1.405578876s ago: executing program 3 (id=8806):
r0 = socket(0x10, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
sendmsg$tipc(r0, &(0x7f0000000800)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000380)="eacad0a804e15264b7a3bc0e210c2e15a03dfe87eb06af006c1ee7b8c85af8e401a613156b62adefe7dd037b2865c30c2b554964b3b6d059f457bf7b0c68f1b096a57ed0f3fc", 0x46}, {&(0x7f0000000400)="b37597269c811f1feaf1e1aa534f6117b83625072e85d3302d8c106cf36827960f01f2ae519a79e9c84dff81c76ef00a6d02ccd510c72d54beea8f699b360093decbc0f2b7d0e976d7bf6e29d949e2b970ec6889f698875a7ab9b760964c462b0ebbbea324d6c1d74389a9396e8876cc36386df77d0729f1230ca1868e581ec96381070aefa4bf0493f61940c89294e8ce22edb31b46b5181c04e4582393477e23c0b4a8a3e2f77b4f149421a8b06ab5e8b50eca299c725459", 0xb9}, {&(0x7f0000000700)="898dc32b66329e0aec0a7272f8bffc188dae4381e429f5198ac7075a0582d7c6ce2374664e21bbaa34dbefc0a090a8522c3a49b43d5c34393a378dbdc3445687c123ff6346048aa36219db52026332828ff5dc90f54035d3ea8d4fe069c61a033d267b45a3648b8d664ae5165d133a6bc131c374f298c39eade673f63a91197126bf9e757d40fa931a29296556281f019c729174917d9982153b799c79a6e039c6336e596628444cabefc204ed8a6a4817fad7704911b12f5e0f99348e358d5a3612acf0994296c7254cdaed2cc93022d927425b4f89f26949c2a1eb11fbd9fa077d5d7a8210a1ccb824b8f6f3ea0545533b32", 0xf3}, {&(0x7f0000000300)="c96ea87459379342d2623250b2bf0c73325fadedc6ea8565", 0x18}, {&(0x7f00000004c0)="c4e73dc78b58dfecb45fc334c605bc3fc9cbadc3c1b932623bc32c6c066fa1cb13abf94f4ca7e8027e36e3881fbd7a2f8d02d59367997b96d7ce73cba34ae97abfc6c4fab374943ea803a522ab68", 0x4e}, {&(0x7f00000009c0)="ac7f4d03614102ff2d8cdff0b221b33e929a2c5c2de5854b4c8b29727e9c18b119a0786ec02862ba12c9409e45d04280b4f535f94c6285cac0cfe3261b1b87be2c44ea28a43503345a638d5b513388284a27908b2f72d17f1fef91fef75eb13f91e7723bc003c9d7f961828eb655c8271c19f36518a78f52a198d7bc32cc59dabb21260f7ca939333879aa8024b344ea37cd66ea9a9864407e32afaa4b9c929a6640ba92bbed45694c9dc03c7c40eaa91de8f77a6baf66d7dfeaf626eba77e6c8d4bbece954784acb9f2ba4d07cd4fd4b19ad0b075d5791853df30505f92351291cfb904f44acbf9fa85f81d41652a9942ea8b", 0xf3}], 0x6, &(0x7f00000005c0)="082c27384697d4773deb2df698be609eb01bfc651fc3f5", 0x17}, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=<r5=>r3, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300030000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6, 0xec}, 0x10}, 0x94)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf251800000008000300", @ANYRES32=r8, @ANYBLOB="302030802c0001800800010000000000200003800c0004000201aaaaaaaaaaaa06000100fdff00000800020003000000", @ANYRES32=r6, @ANYRESOCT=r5], 0x4c}}, 0x20000000)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
r10 = epoll_create1(0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000000)={0x2000001c})
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000000040)={0x2000000f})
r12 = accept4(r9, 0x0, 0x0, 0x0)
sendmmsg$alg(r12, &(0x7f00000040c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40088d5}], 0x1, 0x40)
recvmmsg(r12, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x1, 0x10000, 0x0)
r13 = socket$tipc(0x1e, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r13, 0x4000}], 0x1, &(0x7f00000003c0), 0x0, 0x0)
r14 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCBRADDBR(r14, 0x89a0, &(0x7f0000000000)='pimreg0\x00')
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0xfffffff8}, 0x10)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)

1.265994252s ago: executing program 4 (id=8807):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0x6) (async)
ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000200)='Y') (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'geneve1\x00'}) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x700, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)

1.265675942s ago: executing program 1 (id=8808):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfce)

1.197948263s ago: executing program 0 (id=8809):
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'macvlan0\x00', {}, 0x4})
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004)
accept4$ax25(r1, 0x0, 0x0, 0x80800)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000140)=0x4)
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1)

1.19716385s ago: executing program 5 (id=8810):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100))
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000580)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
splice(r4, 0x0, r3, &(0x7f0000000080), 0x6, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r5=>0x0)
connect$nfc_raw(r3, &(0x7f0000000080)={0x27, r5, 0xffffffffffffffff, 0x7}, 0x10)
close(r0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0)

1.055381475s ago: executing program 3 (id=8811):
r0 = socket$inet(0x2b, 0x801, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x16}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='wlan1\x00')
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x3}, 0x8}], 0x3, 0x2, 0x0)
listen(r0, 0x0)

973.883077ms ago: executing program 4 (id=8812):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xc0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x74}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8800}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.time\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000280)=0x6, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'})

973.332327ms ago: executing program 1 (id=8813):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x24, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x47, &(0x7f0000000140)=""/71, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x5, 0x2, 0x4, 0x6}, {0x1, 0x4, 0x0, 0x6}, {0x3, 0x2, 0x4, 0xc}, {0x1, 0x3, 0x8, 0x4}, {0x4, 0x2, 0xa, 0x5}, {0x5, 0x1, 0xc, 0x5}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x3, 0x0, 0x7ff, &(0x7f0000000540)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], <r3=>0x0}, 0x40)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map=r4, r2, 0x34, 0x2, r0, @void, @value=r0, @void, @void, r3}, 0x20)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)

971.779957ms ago: executing program 0 (id=8814):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x21, 0x5, 0x0, 0x0, 0x5}, 0x48)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0x16, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x6, [@enum64={0x10, 0x7, 0x0, 0x13, 0x1, 0x1, [{0x8, 0x3}, {0x6, 0x1ff, 0xfffffff8}, {0x2, 0x0, 0xb0b}, {0xe, 0x10, 0x8415}, {0x9, 0xfffffff9, 0x1bda}, {0x3, 0x4, 0x4}, {0x6, 0x4}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x2f, 0x2}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x4}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61]}}, &(0x7f00000006c0)=""/192, 0xae, 0xc0, 0x1, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000780)=""/139, 0x8b, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000780)=""/139, 0x8b, <r10=>0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001140)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001140)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd700000c1df255c00000008000300", @ANYRES32=r14, @ANYBLOB='\b\x00k\x00<'], 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004010) (async)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd700000c1df255c00000008000300", @ANYRES32=r14, @ANYBLOB='\b\x00k\x00<'], 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004010)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r15 = syz_genetlink_get_family_id$team(&(0x7f0000001ac0), r13)
getpeername$packet(r0, &(0x7f0000001b00)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b40)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001d40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)={0x15c, r15, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf0}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20008005}, 0x841) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000001d40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)={0x15c, r15, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf0}}}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20008005}, 0x841)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x28, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb670, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd048}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x77, &(0x7f0000000100)=""/119, 0x40f00, 0x8, '\x00', r3, @tracing=0x18, r9, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x8, 0x8}, 0x10, r10, r2, 0x3, &(0x7f0000000440)=[r1, r1, r11, r5, r1], &(0x7f0000001880)=[{0x2, 0x4, 0x9, 0x5}, {0x5, 0x2, 0x2, 0x2}, {0x0, 0x2, 0x7, 0x9}], 0x10, 0x1}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x30, r8, 0x1, 0x70bd28, 0x4, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r17}]}, 0x30}}, 0x4000014) (async)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x30, r8, 0x1, 0x70bd28, 0x4, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r17}]}, 0x30}}, 0x4000014)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001a40)={r11, &(0x7f0000001980)="fae16f40f8aa2042059cbfb01cbfec28c571927aeecb9a5954c53d48dbb8702c5e82ffd5b286542cf532e75d6c5e4789dd788bf639d43a09458a870aa4be3f9a28833c05709618d10db8ac4187809fde87051dc4fe0a4e29bda3f1ed24edf45ad58cd1aaec4cdc06809280b0541ab29096a679f30031621efe2534a47ececb6f827c84c0a164237a6f06470aae473cdb01b39eb99611"}, 0x20)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r18 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r18, 0xc004743e, &(0x7f0000000000)=0x2) (async)
ioctl$PPPIOCNEWUNIT(r18, 0xc004743e, &(0x7f0000000000)=0x2)

893.833484ms ago: executing program 3 (id=8815):
r0 = socket$unix(0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000016000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18200500}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, 0x0, 0x800, 0xff, 0x25dfdbfd, {{}, {}, {0x20, 0x17, {0x2, 0xffff09d8, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2)

690.632242ms ago: executing program 4 (id=8816):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x59e8bd019f12e121}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000044}, 0xc814) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x40, r5, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac0b, 0xfac05, 0xfac0c, 0xfac04, 0xfac01]}]]}, 0x40}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x10}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r6, 0x1)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) (async)
r8 = accept$alg(r7, 0x0, 0x0) (async, rerun: 32)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (rerun: 32)
sendmsg$alg(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)={@empty, @dev, <r10=>0x0}, &(0x7f0000000480)=0xc)
ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x5f, r10})
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0xc0, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x71}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc0}}, 0x24000091) (async, rerun: 32)
r11 = accept4(r8, 0x0, 0x0, 0x0) (rerun: 32)
sendmsg$unix(r11, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8044010)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111770000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

617.815199ms ago: executing program 0 (id=8817):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
socket$inet6(0xa, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
getsockopt$MRT6(r2, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f0000000640)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

524.736166ms ago: executing program 3 (id=8818):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac0a}, @typed={0x5a, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac0a}, @typed={0x5a, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

466.587305ms ago: executing program 0 (id=8819):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003904000000000000080000000000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677286001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000004c0)={<r6=>0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, 0xcb, 0xcaf7, 0x5, 0x6, 0x6}, &(0x7f0000000040)=0x98)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={r6, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x3ff}}, 0x400, 0xffff, 0x0, 0x93, 0x2, 0x80000000, 0xe}, &(0x7f00000001c0)=0x9c)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x5, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x8c4)

361.594686ms ago: executing program 4 (id=8820):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$kcm(0x2, 0x200000000000001, 0x106) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xd, &(0x7f0000001e80)=ANY=[@ANYBLOB="980000000000", @ANYRES32=r0, @ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0xfffffffc, 0xfffffdc5, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008000000071102b00000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
pipe(&(0x7f0000000580)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) (async)
sendfile(r6, r7, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="db05eb0c7fbd446bd4bccff95d6b9c91989213dac8bbfc3053a7cea4c0c2ef7773e512b815ff6f21bfd603c0fb5a628fa77b34c985bf73bfa4de9c626850a20165161f2843bd358f551df39be6e66a118c049672173d6931c219274a6de242a0751cb019be8e0b200a9ec27d668cb762372d092d9cd4ec08ef37499fe93e677c9d40c43786294da1eb993a6be5cd705663ec2e4a6fa34f38bcb63f01a412a8c2e34683cea76dcc41121019bc9d9473faa83ed1fbc252e8b9d0fc2e05ba3c3ccb8c117a8bed99f71f667c09b98870c1331613aa0339f83782b6daa724ac74c2c8", @ANYRES32, @ANYRESOCT=r9], 0x30}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0x9, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000004", @ANYRES16=r10, @ANYBLOB="000227bd7000fddbdf25660000000400b800"], 0x18}, 0x1, 0x0, 0x0, 0x20000003}, 0x80) (async)
unshare(0x2000400) (async)
r11 = socket$netlink(0x10, 0x3, 0xe) (async)
r12 = socket(0x28, 0x5, 0x0) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r13, &(0x7f0000000280), 0x0}, 0x20)
bind$inet6(r12, 0x0, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async)
sendmsg(r11, &(0x7f0000001cc0)={&(0x7f0000000600)=@l2tp={0x2, 0x0, @local, 0x3}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000680)="a6037d930d6b840435944c3ba999b82d856aa1b90b5137ea0b61fc151c17f67aa1c26948fc6e18e9b065659a320eec8658127e188a84dca223097e69a6a825d03c5f9d8f68a349d104ddc343f98025a3c431dc7ec419eeccdca57d83b4a623aad05e88c46633f6eeface1cbeb1c1da89d06dc4b72713a1dca5609230f352ba999aa96a006c9c8e670bb52bed34ed112530df0c9afe1332c71cf6baf6f2638b2ddf2643103c63e53440efd5644ddc46765375e61bb7033c5f21b4d69b7b24b0fedb3c4ffbb733", 0xc6}, {&(0x7f00000000c0)="f5ea39537e6c1e1d52ab557214dbb5a2074b497ac36acb8c46540398bc3afd", 0x1f}, {&(0x7f00000007c0)="cb8bd62f361b91e69603e839ef8987786564c82a0e6bdaf8deacfea3b2a13abb41a6dc34c353f83ffd20bca28af64e478567a5f2f2d752ccad371cddab256b7740d7973c1fe468161fc0e6c42705836db7f4217dd3157c29d50f18e5a7efaf990cfa8bdbed6a27750db69dc81efad49ca6bb1651ea1ddd359b40051ce57623737a6e5d9fe267eeb0cba3975deaf04cba0ffc", 0x92}, {&(0x7f0000000880)="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", 0xfa}, {&(0x7f0000000980)="64d741a5d136ad39bb800d5055e7ed1ee9ffe10c4460d151ad33c620d08695de93520d650778e97f157696019b34b5985b4366d96328a9c1fdf715e4bfd1e4c79a2105e6ed6d3093f285d05591a222a18efa29148bb07d35e20a9dfc8f9f8c0590d79aff319c917059077631d4cb87416545fb36b2a4b95bb2e22f57cdef2a414c0bfa8ced2edf12a896c035a9e8a1ee68", 0x91}, {&(0x7f0000000a40)="0ac707098dc069a0027e0720573a9ee628e5cd75eee0b0e1d42e52c2a3eee513cc5f0e67fbd4b8630243c6f5c8c8a592847d094716c4343b3f826dc1e0cd42e77b1db2023df20677b75b5de1666a4db7d3d226fa3e6175617c31713155d6a57a30e6db401bc5984dfacc78eb32661c29216bce5eca231594bdb31026ce84bca9bcf1f693fee38691bd0cdc0f9cbc155e35196fe936542275b9dd8021b981bd34db142f864834716b9d41efcc", 0xac}, {&(0x7f0000000b00)="440ffe69aedee26d39573a4041677d89f496b810c8f0dc751d10a19e9b2a88c0715a59810ed9f85dbaebc40d0fd69642837f0d6936037ddf67edeb0227e20dcca41b5bb2e594f0257d88ee65a176d470a3564d2976e72f0aa3a7899b12470fab", 0x60}, {&(0x7f0000000580)="0836012abdd839b553461fad013a0cfdb06ddf6a898f342883738dfa94efce14df297a5ce6b09ce105a4102e72", 0x2d}, {&(0x7f0000000b80)="406bc75d98b88e51a4db8617f1ed38816e144a281eea03b30299a4114437cd14660b8b2a4b6b60c06841fa17f6af168305fa", 0x32}], 0x9, &(0x7f0000000c80)=[{0x1010, 0x10f, 0x5, "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"}], 0x1010}, 0x0)
r14 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r14, 0x114, 0x1d, &(0x7f0000000000), 0x4)

220.730697ms ago: executing program 4 (id=8821):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x576, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', <r2=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@initdev, <r3=>0x0}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x68, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gre={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x7f}, @IFLA_GRE_TTL={0x5, 0x8, 0x9}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004044)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4d0618", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, {[@fastopen={0x22, 0x5, "27d3de"}]}}}}}}}}, 0x0)

185.141239ms ago: executing program 5 (id=8822):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)
bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0)

133.79845ms ago: executing program 3 (id=8823):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x48}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0xc, 0x3, 'netdevsim0\x00'}]}]}], {0xa4}}, 0xa4}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYBLOB="29e0817cc45c9f579eb849d81631192431892e09cf762ff1fc4ca1ca914cf045ebd02eaf83c166aa662be5a6d60d8057d1fd567cbb3d1761cae1bc6167fcfe4944dd5c2818dad74755654f91a5e6a6b3a411dab7b187066c8ce7c39eaf7c669da76a28f8264c733a8d64e08942e62a14a5537768fefa34847aac50d35fcf145676df5a0157a76280e1e9ab0b", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES8=r0, @ANYRES8=r1, @ANYRESDEC=r2, @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8040)
r4 = socket(0x10, 0x3, 0x0)
recvmmsg(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={<r5=>r3, 0x6, 0x7fff, 0x8000000000000000})
ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f00000003c0))
openat$cgroup_ro(r5, &(0x7f0000000400)='memory.swap.events\x00', 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0x201}, 0x18}}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x33}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000}, 0x0)

132.555533ms ago: executing program 0 (id=8824):
r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700400000001408000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/120], 0x78}}, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) (async)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) (async)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async, rerun: 64)
setsockopt(r0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6) (async)
r7 = socket$isdn(0x22, 0x3, 0x25)
getpeername$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000340)=""/100, &(0x7f00000001c0)=0x64) (async, rerun: 64)
ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000240)={0x0, @can={0x1d, r8}, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @in={0x2, 0x4e22, @remote}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x40, 0x7f}) (async, rerun: 64)
write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2b, 'blkio'}, {0x2b, 'net'}, {0x2d, 'net'}]}, 0x11)

88.169812ms ago: executing program 1 (id=8825):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
unshare(0x8020000) (async)
getpeername$packet(r1, 0x0, 0x0) (async)
close(r0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

0s ago: executing program 5 (id=8826):
syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000398322f60000000000008100000086dd6006211100003c0000000000000000000000ffffffffffffff020000000000000000000000000001"], 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = epoll_create1(0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x6) (async)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000080)=""/52) (async)
ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000080)=""/52)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000011})
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10)
close(r1)
clock_gettime(0x0, &(0x7f0000006040)={<r4=>0x0, <r5=>0x0})
recvmmsg(r0, &(0x7f0000005e80)=[{{&(0x7f0000000240)=@caif=@util, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000300)=""/181, 0xb5}], 0x2, &(0x7f0000000400)=""/66, 0x42}, 0x78c6}, {{&(0x7f0000000480)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/129, 0x81}, {&(0x7f00000025c0)=""/192, 0xc0}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/167, 0xa7}, {&(0x7f0000003740)=""/159, 0x9f}, {&(0x7f0000003800)=""/53, 0x35}, {&(0x7f0000003840)=""/197, 0xc5}], 0x9, &(0x7f0000003a00)=""/172, 0xac}, 0x1}, {{&(0x7f0000003ac0)=@alg, 0x80, &(0x7f0000004f40)=[{&(0x7f0000003b40)=""/241, 0xf1}, {&(0x7f0000003c40)=""/254, 0xfe}, {&(0x7f0000003d40)=""/79, 0x4f}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/70, 0x46}, {&(0x7f0000004e40)=""/204, 0xcc}], 0x6, &(0x7f0000004fc0)=""/223, 0xdf}, 0xa}, {{&(0x7f00000050c0)=@x25, 0x80, &(0x7f0000005380)=[{&(0x7f0000005140)=""/197, 0xc5}, {&(0x7f0000005240)=""/45, 0x2d}, {&(0x7f0000005280)=""/238, 0xee}], 0x3}, 0x81}, {{&(0x7f00000053c0)=@x25, 0x80, &(0x7f0000005680)=[{&(0x7f0000005440)=""/213, 0xd5}, {&(0x7f0000005540)=""/122, 0x7a}, {&(0x7f00000055c0)=""/149, 0x95}], 0x3, &(0x7f00000056c0)=""/83, 0x53}, 0xb939}, {{&(0x7f0000005740)=@rc={0x1f, @none}, 0x80, &(0x7f0000005800)=[{&(0x7f00000057c0)=""/16, 0x10}], 0x1, &(0x7f0000005840)=""/167, 0xa7}, 0x3}, {{&(0x7f0000005900)=@can, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000005980)=""/112, 0x70}, {&(0x7f0000005a00)=""/209, 0xd1}, {&(0x7f0000005b00)=""/254, 0xfe}, {&(0x7f0000005c00)=""/58, 0x3a}, {&(0x7f0000005c40)=""/101, 0x65}, {&(0x7f0000005cc0)=""/229, 0xe5}], 0x6, &(0x7f0000005e40)=""/59, 0x3b}}], 0x7, 0x12000, &(0x7f0000006080)={r4, r5+10000000})

kernel console output (not intermixed with test programs):

etlink: 24 bytes leftover after parsing attributes in process `syz.4.6654'.
[  769.472905][T28684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6655'.
[  770.135251][T28731] validate_nla: 3 callbacks suppressed
[  770.135269][T28731] netlink: 'syz.3.6669': attribute type 1 has an invalid length.
[  770.150521][T28731] netlink: 'syz.3.6669': attribute type 10 has an invalid length.
[  770.159575][T28731] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6669'.
[  770.399183][T28745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6671'.
[  770.451623][T28745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6671'.
[  770.720369][T28764] netlink: 'syz.4.6676': attribute type 10 has an invalid length.
[  770.738394][T28764] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6676'.
[  770.779426][T28764] team0: Port device geneve0 added
[  770.785721][T27948] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  770.804092][T27948] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  770.823452][T27948] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  770.835672][T27948] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  771.630652][T28818] netlink: 'syz.4.6693': attribute type 13 has an invalid length.
[  771.789380][T28830] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.800207][T28830] bridge0: port 2(bridge_slave_1) entered disabled state
[  771.934384][T28841] net_ratelimit: 396 callbacks suppressed
[  771.934401][T28841] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  771.965247][T28841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.182348][T28854] netlink: 'syz.4.6703': attribute type 13 has an invalid length.
[  772.351808][T28863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  773.011812][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  773.082422][T28904] netlink: 'syz.1.6717': attribute type 29 has an invalid length.
[  773.098732][T28905] netlink: 'syz.1.6717': attribute type 29 has an invalid length.
[  773.361011][T28917] __nla_validate_parse: 8 callbacks suppressed
[  773.361029][T28917] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6720'.
[  773.534712][T28926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  773.602955][T28930] netlink: 'syz.3.6727': attribute type 1 has an invalid length.
[  773.679228][T28932] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6726'.
[  773.715422][T28930] bond1 (unregistering): Released all slaves
[  773.816160][T28933] ip6tnl1: entered promiscuous mode
[  773.834730][T28933] ip6tnl1: entered allmulticast mode
[  773.897981][T28944] netlink: 'syz.2.6728': attribute type 10 has an invalid length.
[  773.949610][T28944] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  774.328378][T28967] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  774.345234][T28969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6734'.
[  774.465428][T28975] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.6739'.
[  774.552416][T28979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6743'.
[  774.595449][T28983] tipc: Failed to obtain node identity
[  774.598617][T28979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6743'.
[  774.605338][T28983] tipc: Enabling of bearer <ib:gre0> rejected, failed to enable media
[  774.685254][T28988] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6746'.
[  774.743103][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6740'.
[  774.928595][T29004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  775.187115][T29019] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6752'.
[  775.277168][T29019] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6752'.
[  775.341304][T29030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  775.386377][T29030] syzkaller0: entered promiscuous mode
[  775.393669][T29030] syzkaller0: entered allmulticast mode
[  775.422970][T29035] syzkaller0: entered promiscuous mode
[  775.455801][T29035] syzkaller0: entered allmulticast mode
[  775.490639][T29026] tipc: Resetting bearer <eth:syzkaller0>
[  775.569127][T29026] tipc: Disabling bearer <eth:syzkaller0>
[  775.606661][T29041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  775.646446][T29051] tipc: Started in network mode
[  775.653873][T29051] tipc: Node identity 7e57f422907a, cluster identity 4711
[  775.670800][T29051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  775.685385][T29051] syzkaller0: entered promiscuous mode
[  775.695122][T29051] syzkaller0: entered allmulticast mode
[  775.719282][T29034] tipc: Resetting bearer <eth:syzkaller0>
[  775.819589][T29034] tipc: Disabling bearer <eth:syzkaller0>
[  776.000256][T29049] tipc: Resetting bearer <eth:syzkaller0>
[  776.140673][T29049] tipc: Disabling bearer <eth:syzkaller0>
[  776.243679][T29081] team0: Device wireguard0 is of different type
[  776.984089][T29129] vlan2: entered promiscuous mode
[  777.044061][T29129] bridge0: entered promiscuous mode
[  777.498703][T25223] IPVS: starting estimator thread 0...
[  777.598083][T29174] IPVS: using max 28 ests per chain, 67200 per kthread
[  777.728961][T29187] netlink: 'syz.0.6802': attribute type 7 has an invalid length.
[  777.736954][T29187] netlink: 'syz.0.6802': attribute type 8 has an invalid length.
[  777.757267][T29188] ipvlan0: entered promiscuous mode
[  777.763414][T29188] ipvlan0: entered allmulticast mode
[  777.768922][T29188] veth0_vlan: entered allmulticast mode
[  777.876226][T29194] netlink: 'syz.3.6804': attribute type 4 has an invalid length.
[  778.228913][T29203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  778.236432][T29203] syzkaller0: entered promiscuous mode
[  778.242843][T29203] syzkaller0: entered allmulticast mode
[  778.254590][T29203] tipc: Resetting bearer <eth:syzkaller0>
[  778.264810][T29202] tipc: Resetting bearer <eth:syzkaller0>
[  778.282343][T29202] tipc: Disabling bearer <eth:syzkaller0>
[  778.366928][T29205] veth0: entered promiscuous mode
[  778.375418][T29205] __nla_validate_parse: 5 callbacks suppressed
[  778.375437][T29205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6808'.
[  778.395850][T29204] veth0: left promiscuous mode
[  778.553255][T29216] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component
[  778.577995][T29218] netlink: 'syz.2.6811': attribute type 11 has an invalid length.
[  778.624681][T29210] GUP no longer grows the stack in syz.2.6811 (29210): 200000003000-20000000a000 (200000001000)
[  778.653868][T29210] CPU: 1 UID: 0 PID: 29210 Comm: syz.2.6811 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) 
[  778.653919][T29210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  778.653942][T29210] Call Trace:
[  778.653951][T29210]  <TASK>
[  778.653959][T29210]  dump_stack_lvl+0x189/0x250
[  778.653993][T29210]  ? __pfx_dump_stack_lvl+0x10/0x10
[  778.654016][T29210]  ? __pfx__printk+0x10/0x10
[  778.654038][T29210]  ? find_vma+0xe7/0x160
[  778.654062][T29210]  ? __lock_acquire+0xab9/0xd20
[  778.654099][T29210]  __get_user_pages+0x24d0/0x2ce0
[  778.654124][T29210]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  778.654175][T29210]  ? rcu_is_watching+0x15/0xb0
[  778.654200][T29210]  __gup_longterm_locked+0xde9/0x1660
[  778.654237][T29210]  ? sanity_check_pinned_pages+0x123a/0x1300
[  778.654270][T29210]  gup_fast_fallback+0x1e6a/0x2010
[  778.654328][T29210]  ? __pfx_gup_fast_fallback+0x10/0x10
[  778.654348][T29210]  ? stack_trace_save+0x9c/0xe0
[  778.654369][T29210]  ? __pfx_stack_trace_save+0x10/0x10
[  778.654402][T29210]  ? pin_user_pages_fast+0x4d/0xb0
[  778.654427][T29210]  iov_iter_extract_pages+0x35a/0x5e0
[  778.654456][T29210]  extract_iter_to_sg+0xe46/0x24e0
[  778.654499][T29210]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  778.654542][T29210]  ? __asan_memset+0x22/0x50
[  778.654566][T29210]  af_alg_get_rsgl+0x436/0x810
[  778.654606][T29210]  aead_recvmsg+0x4cc/0x13f0
[  778.654639][T29210]  ? rcu_is_watching+0x15/0xb0
[  778.654667][T29210]  ? __pfx_aead_recvmsg+0x10/0x10
[  778.654692][T29210]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  778.654764][T29210]  ? __pfx_aead_recvmsg+0x10/0x10
[  778.654788][T29210]  sock_recvmsg_nosec+0x183/0x1c0
[  778.654817][T29210]  ____sys_recvmsg+0x3aa/0x460
[  778.654852][T29210]  ? __pfx_____sys_recvmsg+0x10/0x10
[  778.654894][T29210]  ? import_iovec+0x74/0xa0
[  778.654913][T29210]  ___sys_recvmsg+0x1b5/0x510
[  778.654944][T29210]  ? __pfx____sys_recvmsg+0x10/0x10
[  778.655004][T29210]  ? __might_fault+0xb0/0x130
[  778.655031][T29210]  do_recvmmsg+0x307/0x770
[  778.655066][T29210]  ? __pfx_do_recvmmsg+0x10/0x10
[  778.655090][T29210]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  778.655131][T29210]  ? __pfx_do_futex+0x10/0x10
[  778.655171][T29210]  __x64_sys_recvmmsg+0x190/0x240
[  778.655202][T29210]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  778.655226][T29210]  ? rcu_is_watching+0x15/0xb0
[  778.655251][T29210]  ? do_syscall_64+0xbe/0x3b0
[  778.655278][T29210]  do_syscall_64+0xfa/0x3b0
[  778.655299][T29210]  ? lockdep_hardirqs_on+0x9c/0x150
[  778.655321][T29210]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.655339][T29210]  ? clear_bhb_loop+0x60/0xb0
[  778.655362][T29210]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.655380][T29210] RIP: 0033:0x7fccf698ebe9
[  778.655398][T29210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  778.655414][T29210] RSP: 002b:00007fccf7896038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  778.655434][T29210] RAX: ffffffffffffffda RBX: 00007fccf6bb5fa0 RCX: 00007fccf698ebe9
[  778.655447][T29210] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000a
[  778.655458][T29210] RBP: 00007fccf6a11e19 R08: 0000000000000000 R09: 0000000000000000
[  778.655469][T29210] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  778.655479][T29210] R13: 00007fccf6bb6038 R14: 00007fccf6bb5fa0 R15: 00007ffdc2e36158
[  778.655508][T29210]  </TASK>
[  779.007511][T29224] netlink: 'syz.1.6813': attribute type 7 has an invalid length.
[  779.050161][T29224] sctp: Trying to GSO but underlying device doesn't support it.
[  779.091162][T29229] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6814'.
[  779.191522][T29234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6817'.
[  779.379925][T29246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6821'.
[  779.472486][T29251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6823'.
[  779.624426][T29266] netlink: 'syz.2.6827': attribute type 1 has an invalid length.
[  779.993357][T29290] geneve2: entered promiscuous mode
[  780.186097][T29300] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6840'.
[  780.269106][T29310] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  780.531639][T29329] netlink: 788 bytes leftover after parsing attributes in process `syz.1.6847'.
[  780.771768][T29342] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  781.028076][T29358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6854'.
[  781.209954][T29369] syzkaller1: entered promiscuous mode
[  781.223929][T29369] syzkaller1: entered allmulticast mode
[  781.267085][T29365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6857'.
[  781.464450][T29384] sctp: [Deprecated]: syz.0.6863 (pid 29384) Use of int in maxseg socket option.
[  781.464450][T29384] Use struct sctp_assoc_value instead
[  781.532924][T29376] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  782.146079][T29406] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6867'.
[  782.471508][T29423] netlink: 'syz.3.6872': attribute type 2 has an invalid length.
[  783.124470][T29461] vlan2: entered allmulticast mode
[  783.146318][T29461] veth1: entered allmulticast mode
[  783.176000][T29464] syz_tun: entered allmulticast mode
[  783.265565][T29463] syz_tun: left allmulticast mode
[  783.371427][ T3074] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  783.404944][ T3074] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  783.474599][ T3074] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  783.514619][ T3074] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  783.593002][T29492] netlink: 'syz.0.6890': attribute type 1 has an invalid length.
[  783.604207][T29492] netlink: 'syz.0.6890': attribute type 4 has an invalid length.
[  783.612881][T29492] __nla_validate_parse: 3 callbacks suppressed
[  783.612899][T29492] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.6890'.
[  783.651383][T29492] netlink: 'syz.0.6890': attribute type 1 has an invalid length.
[  784.207850][T27661] Bluetooth: hci1: command 0x0405 tx timeout
[  784.400158][T29516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6899'.
[  784.490276][T29525] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6900'.
[  784.630532][T29530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6904'.
[  784.685563][T29532] sctp: [Deprecated]: syz.3.6903 (pid 29532) Use of struct sctp_assoc_value in delayed_ack socket option.
[  784.685563][T29532] Use struct sctp_sack_info instead
[  784.711749][T29533] netlink: 636 bytes leftover after parsing attributes in process `syz.1.6905'.
[  784.763300][T29536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6906'.
[  784.864131][T27951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  784.884327][T27951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  784.893325][T25221] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  784.975934][T29548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6906'.
[  785.031098][T29536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6906'.
[  785.216623][T29560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6910'.
[  785.237150][T29560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6910'.
[  785.292084][T29560] gretap1: entered promiscuous mode
[  785.298711][T29560] gretap1: entered allmulticast mode
[  785.573548][T29583] netlink: 'syz.0.6918': attribute type 21 has an invalid length.
[  785.650102][T25221] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  785.662176][T29583] netlink: 'syz.0.6918': attribute type 5 has an invalid length.
[  785.737783][T25221] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  785.829269][T29594] syzkaller0: entered promiscuous mode
[  785.834777][T29594] syzkaller0: entered allmulticast mode
[  786.606673][T29603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  786.872545][T29620] netlink: ct family unspecified
[  786.883333][T29620] openvswitch: netlink: Actions may not be safe on all matching packets
[  786.932096][T29615] syzkaller0: entered promiscuous mode
[  786.956277][T29615] syzkaller0: entered allmulticast mode
[  787.913352][T29665] netlink: 'syz.2.6944': attribute type 10 has an invalid length.
[  789.102722][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  789.273839][T29646] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  789.281296][T29646] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  789.481054][T29675] __nla_validate_parse: 11 callbacks suppressed
[  789.481074][T29675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6946'.
[  789.571143][T29681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6948'.
[  789.586418][T29683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6946'.
[  789.793542][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6952'.
[  789.803255][T29691] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6952'.
[  789.866199][T29696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6954'.
[  790.108980][T29707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6958'.
[  790.153353][T29707] netlink: 788 bytes leftover after parsing attributes in process `syz.1.6958'.
[  790.239904][T29708] netlink: 788 bytes leftover after parsing attributes in process `syz.1.6958'.
[  790.506612][T29725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6964'.
[  790.636857][T29731] openvswitch: netlink: IP tunnel dst address not specified
[  790.846360][T29746] veth5: entered allmulticast mode
[  791.306827][T29775] netlink: 'syz.2.6979': attribute type 21 has an invalid length.
[  791.315608][T29775] netlink: 'syz.2.6979': attribute type 4 has an invalid length.
[  791.323875][T29775] netlink: 'syz.2.6979': attribute type 5 has an invalid length.
[  791.335875][T29775] netlink: 'syz.2.6979': attribute type 1 has an invalid length.
[  791.343813][T29775] netlink: 'syz.2.6979': attribute type 3 has an invalid length.
[  791.352990][T29775] NCSI netlink: No device for ifindex 813332851
[  791.405587][T29781] netlink: 'syz.2.6980': attribute type 11 has an invalid length.
[  791.924554][T29806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  792.007208][T29814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  792.106669][T29819] tipc: Started in network mode
[  792.112834][T29819] tipc: Node identity 080211000001, cluster identity 4711
[  792.120774][T29819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  792.352939][T29838] macsec0: entered promiscuous mode
[  792.366295][T29838] macsec0: entered allmulticast mode
[  792.382981][T29838] veth1_macvtap: entered allmulticast mode
[  792.394684][T29838] macsec0: left promiscuous mode
[  792.408689][T29838] macsec0: left allmulticast mode
[  792.413969][T29838] veth1_macvtap: left allmulticast mode
[  792.778929][T29861] netlink: 'syz.3.7007': attribute type 7 has an invalid length.
[  792.825678][T29866] netlink: 'syz.4.7008': attribute type 11 has an invalid length.
[  792.951356][T29872] netlink: 'syz.4.7010': attribute type 3 has an invalid length.
[  793.116145][T29884] block nbd4: not configured, cannot reconfigure
[  793.238328][T25221] tipc: Node number set to 134418688
[  793.289218][ T3074] tipc: Subscription rejected, illegal request
[  793.459352][T29894] macvtap1: entered promiscuous mode
[  793.461111][ T5916] hid (null): unknown global tag 0xe
[  793.471743][ T5916] hid (null): nested delimiters
[  793.481341][ T5916] hid (null): report_id 51204 is invalid
[  793.483371][T29894] vlan0: entered promiscuous mode
[  793.486990][ T5916] hid (null): unknown global tag 0xd
[  793.487044][ T5916] hid (null): unknown global tag 0xc
[  793.503334][ T5916] hid (null): unknown global tag 0x6a
[  793.522938][T29894] macvtap1: entered allmulticast mode
[  793.544806][T29894] vlan0: entered allmulticast mode
[  793.584804][T29894] veth0_vlan: entered allmulticast mode
[  793.647964][T29922] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  793.853141][T29931] netlink: 'syz.3.7025': attribute type 15 has an invalid length.
[  793.872680][T29936] netlink: 'syz.2.7026': attribute type 4 has an invalid length.
[  794.761434][T29981] __nla_validate_parse: 22 callbacks suppressed
[  794.761472][T29981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7041'.
[  794.898198][T29994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  795.290945][T30018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7048'.
[  795.577673][T30035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  795.595164][T30035] veth0_virt_wifi: entered promiscuous mode
[  795.613869][T30035] veth0_virt_wifi: entered allmulticast mode
[  795.626276][T30036] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  795.662499][T30035] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  795.697244][T30038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7056'.
[  795.763874][T30035] tipc: Resetting bearer <eth:syzkaller0>
[  795.854109][T30042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7058'.
[  795.858178][ T5916] hid-generic 0005:0D45:1012.0003: unknown global tag 0xe
[  795.889954][ T5916] hid-generic 0005:0D45:1012.0003: item 0 2 1 14 parsing failed
[  795.906330][ T5916] hid-generic 0005:0D45:1012.0003: probe with driver hid-generic failed with error -22
[  795.933423][T30034] tipc: Disabling bearer <eth:syzkaller0>
[  795.999243][T30050] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  796.018702][T30050] mac80211_hwsim hwsim66 syzkaller0: entered promiscuous mode
[  796.033254][T30050] mac80211_hwsim hwsim66 syzkaller0: entered allmulticast mode
[  796.053895][T30050] tipc: Resetting bearer <eth:syzkaller0>
[  796.113643][T30058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7062'.
[  796.523808][T30085] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode
[  796.552663][T30091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7071'.
[  796.572747][T30087] validate_nla: 5 callbacks suppressed
[  796.572766][T30087] netlink: 'syz.2.7070': attribute type 2 has an invalid length.
[  796.579072][T30090] netlink: 'syz.1.7072': attribute type 6 has an invalid length.
[  796.595764][T30085] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode
[  796.608388][T30087] netlink: 'syz.2.7070': attribute type 8 has an invalid length.
[  796.640483][T30087] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.7070'.
[  796.671807][T30097] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  796.811159][T30105] 
: renamed from bridge_slave_0 (while UP)
[  796.854638][T30108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7077'.
[  796.882905][T30109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7078'.
[  797.110226][T30119] netlink: 'syz.1.7081': attribute type 12 has an invalid length.
[  797.129011][T30119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7081'.
[  797.807598][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  798.264250][T30175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  798.287099][T30174] tipc: Resetting bearer <eth:syzkaller0>
[  798.302456][T30173] tipc: Disabling bearer <eth:syzkaller0>
[  798.642799][T30193] netlink: 'syz.2.7106': attribute type 1 has an invalid length.
[  798.937266][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  798.985354][T18485] erspan0 (unregistering): left promiscuous mode
[  799.016737][T18485] gretap0 (unregistering): left promiscuous mode
[  799.127312][T18485] team0: Port device geneve0 removed
[  799.166294][T18485] tipc: Disabling bearer <eth:syzkaller0>
[  799.719387][T18485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  799.739875][T18485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  799.752787][T18485] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  799.763146][T18485] bond0 (unregistering): (slave team0): Releasing backup interface
[  799.774287][T18485] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  799.784569][T18485] bond0 (unregistering): Released all slaves
[  799.913097][T18485] bond1 (unregistering): Released all slaves
[  800.035656][T18485] bond2 (unregistering): (slave vlan2): Releasing active interface
[  800.045016][T18485] bond2 (unregistering): Released all slaves
[  800.161725][T18485] bond3 (unregistering): (slave wlan0): Releasing active interface
[  800.171026][T18485] bond3 (unregistering): Released all slaves
[  800.184948][T18485] bond4 (unregistering): Released all slaves
[  800.202156][T18485] bond5 (unregistering): Released all slaves
[  800.217546][T18485] bond6 (unregistering): Released all slaves
[  800.235782][T18485] bond7 (unregistering): Released all slaves
[  800.261392][T30198] __nla_validate_parse: 8 callbacks suppressed
[  800.261412][T30198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7107'.
[  800.277488][T30198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7107'.
[  800.419336][T30206] syzkaller0: entered promiscuous mode
[  800.424847][T30206] syzkaller0: entered allmulticast mode
[  800.435623][T30215] syzkaller0: left promiscuous mode
[  800.447503][T30215] syzkaller0: left allmulticast mode
[  800.485818][T30230] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7116'.
[  800.505878][T30230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7116'.
[  800.640196][T30226] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  802.396973][T30239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7118'.
[  802.433693][T30242] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  802.598006][T30254] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7124'.
[  802.613324][T30255] netlink: 'syz.3.7123': attribute type 3 has an invalid length.
[  802.649433][T30254] IPv6: sit1: Disabled Multicast RS
[  802.697771][T30266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7126'.
[  802.750567][T30266] netlink: 'syz.0.7126': attribute type 5 has an invalid length.
[  802.801460][T30266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7126'.
[  802.850346][T18485] : left promiscuous mode
[  802.961144][T27949] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  803.076803][T30288] netlink: 'syz.4.7129': attribute type 1 has an invalid length.
[  803.096542][T30289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7131'.
[  803.105661][T30289] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  803.113063][T27951] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  803.123408][T18485] tipc: Left network mode
[  803.151729][T27951] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  803.205490][T18485] IPVS: stopping master sync thread 23766 ...
[  803.260701][T30280] bond1: (slave bridge5): making interface the new active one
[  803.270717][T30280] bond1: (slave bridge5): Enslaving as an active interface with an up link
[  803.284802][T27951] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  803.305921][T30293] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222)
[  803.350816][T30302] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7134'.
[  803.526587][T30312] netlink: 'syz.4.7140': attribute type 1 has an invalid length.
[  803.573119][T30310] netlink: 'syz.3.7138': attribute type 2 has an invalid length.
[  803.581288][T30310] netlink: 'syz.3.7138': attribute type 8 has an invalid length.
[  803.614082][T30316] netlink: 'syz.1.7142': attribute type 1 has an invalid length.
[  803.989837][T30337] netlink: 'syz.1.7146': attribute type 11 has an invalid length.
[  804.046667][T18485] hsr_slave_1: left promiscuous mode
[  804.054510][T18485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  804.068600][T18485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  804.083399][T18485] veth1_to_bond: left allmulticast mode
[  804.094843][T18485] veth1_to_bond: left promiscuous mode
[  804.141350][T18485] team0 (unregistering): Port device macvlan3 removed
[  804.653473][T18485] team0 (unregistering): Port device team_slave_1 removed
[  804.702549][T18485] team0 (unregistering): Port device team_slave_0 removed
[  805.371669][T30372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  805.401769][T30372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  805.446195][T30372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  805.484326][T30372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  805.508397][T30382] __nla_validate_parse: 4 callbacks suppressed
[  805.508415][T30382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7155'.
[  805.528607][T30384] netlink: 'syz.1.7157': attribute type 2 has an invalid length.
[  805.578130][T30384] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7157'.
[  805.637746][T30389] netlink: 51 bytes leftover after parsing attributes in process `syz.3.7159'.
[  805.949605][T30399] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7161'.
[  806.137720][T30412] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  806.189885][T30416] bridge_slave_1: left allmulticast mode
[  806.195562][T30416] bridge_slave_1: left promiscuous mode
[  806.207894][T30416] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.258607][T30416] bridge_slave_0: left allmulticast mode
[  806.264283][T30416] bridge_slave_0: left promiscuous mode
[  806.298798][T30416] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.335670][T30425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7173'.
[  806.346079][T30425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7173'.
[  806.418184][T30427] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7170'.
[  806.564106][T30440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7175'.
[  806.566951][T30430] syzkaller0: entered promiscuous mode
[  806.579170][T30430] syzkaller0: entered allmulticast mode
[  806.586576][T30427] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7170'.
[  806.775720][T30449] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7178'.
[  808.546590][T30461] pim6reg: entered allmulticast mode
[  808.728988][T30476] : entered promiscuous mode
[  808.903040][T30493] netlink: 'syz.3.7191': attribute type 2 has an invalid length.
[  809.863000][T30536] chnl_net:caif_netlink_parms(): no params data found
[  810.270475][T30555] team0: Device ip6gre1 is of different type
[  810.420670][T30570] netlink: 'syz.0.7215': attribute type 30 has an invalid length.
[  810.691519][T30595] IPVS: Error connecting to the multicast addr
[  811.129411][T30615] netlink: 'syz.4.7227': attribute type 1 has an invalid length.
[  811.139783][T30615] netlink: 'syz.4.7227': attribute type 2 has an invalid length.
[  811.178099][T30615] __nla_validate_parse: 15 callbacks suppressed
[  811.178117][T30615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7227'.
[  811.433969][T30631] Bluetooth: MGMT ver 1.23
[  811.623079][T30642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7238'.
[  811.635019][T30642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7238'.
[  811.685927][T30646] netlink: 'syz.1.7239': attribute type 1 has an invalid length.
[  811.817813][T30658] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7243'.
[  811.919585][T30654] bond6: (slave gretap1): making interface the new active one
[  811.939788][T30654] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  812.238074][T30678] veth0: entered promiscuous mode
[  812.255406][T30678] veth0: left promiscuous mode
[  812.256718][T30680] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7249'.
[  812.273312][T30681] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7249'.
[  812.301106][T30686] netlink: 'syz.3.7251': attribute type 6 has an invalid length.
[  812.315755][T30687] sit0: entered promiscuous mode
[  812.430481][T30687] netlink: 'syz.0.7250': attribute type 1 has an invalid length.
[  812.472429][T30687] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7250'.
[  812.485778][T30688] netlink: 'syz.0.7250': attribute type 1 has an invalid length.
[  812.494704][T30688] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7250'.
[  812.538479][T30700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7256'.
[  812.597582][T30702] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7257'.
[  812.809407][T30720] netlink: 'syz.0.7264': attribute type 1 has an invalid length.
[  812.832066][T30717] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  812.848367][T30717] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.856108][T30717] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.873464][T30720] netlink: 'syz.0.7264': attribute type 4 has an invalid length.
[  813.813795][T30773] openvswitch: netlink: IPv6 tunnel dst address is zero
[  814.500489][T30814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  814.786195][T30836] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  815.087664][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  815.742109][T30886] netlink: 'syz.2.7314': attribute type 4 has an invalid length.
[  816.244515][T30913] __nla_validate_parse: 13 callbacks suppressed
[  816.244535][T30913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7322'.
[  816.325679][T30915] netlink: 'syz.3.7322': attribute type 6 has an invalid length.
[  816.388793][T30917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7323'.
[  816.745602][T30942] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7331'.
[  816.770102][T30941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7331'.
[  816.921461][T30953] veth0: entered promiscuous mode
[  816.927548][T30954] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7333'.
[  816.936805][T30953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7333'.
[  816.946186][T30954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7333'.
[  817.226242][T30972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7338'.
[  817.277825][T25219] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  817.436759][T30992] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  817.869060][T31009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  817.876631][T31009] syzkaller0: entered promiscuous mode
[  817.885445][T31009] syzkaller0: entered allmulticast mode
[  817.993406][T31009] tipc: Resetting bearer <eth:syzkaller0>
[  818.019258][T31008] tipc: Resetting bearer <eth:syzkaller0>
[  818.063389][T31008] tipc: Disabling bearer <eth:syzkaller0>
[  818.245307][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7351'.
[  818.288514][T25219] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  818.920247][T31058] team0 (unregistering): Port device team_slave_0 removed
[  818.986372][T31058] team0 (unregistering): Port device team_slave_1 removed
[  819.011000][T31067] tipc: Failed to remove unknown binding: 66,1,1/134418688:4271949006/4271949008
[  819.027126][T31067] tipc: Failed to remove unknown binding: 66,1,1/134418688:4271949006/4271949008
[  819.044451][T31067] tipc: Failed to remove unknown binding: 66,1,1/134418688:4271949006/4271949008
[  819.093108][T31070] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  819.102438][T31069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7362'.
[  819.707786][T31100] netlink: 'syz.0.7371': attribute type 39 has an invalid length.
[  819.831324][T31106] sctp: [Deprecated]: syz.0.7371 (pid 31106) Use of int in max_burst socket option.
[  819.831324][T31106] Use struct sctp_assoc_value instead
[  819.930916][T31108] netlink: 'syz.4.7373': attribute type 3 has an invalid length.
[  820.131567][T31115] Dead loop on virtual device ip6_vti0, fix it urgently!
[  820.139016][T31115] Dead loop on virtual device ip6_vti0, fix it urgently!
[  820.146258][T31115] Dead loop on virtual device ip6_vti0, fix it urgently!
[  820.153659][T31115] Dead loop on virtual device ip6_vti0, fix it urgently!
[  820.161167][T31115] Dead loop on virtual device ip6_vti0, fix it urgently!
[  820.168572][T31115] Dead loop on virtual device ip6_vti0, fix it urgently!
[  820.440249][T31128] netlink: 'syz.1.7380': attribute type 10 has an invalid length.
[  820.457671][T31128] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  820.481518][T31128] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  820.869354][T31146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  821.277248][T31164] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  821.303387][T31164] __nla_validate_parse: 3 callbacks suppressed
[  821.303403][T31164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7393'.
[  821.318832][T31164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7393'.
[  821.354554][T31167] netlink: 'syz.3.7392': attribute type 11 has an invalid length.
[  821.362620][T31167] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7392'.
[  821.374856][T31167] netlink: 'syz.3.7392': attribute type 4 has an invalid length.
[  821.823043][T31189] syzkaller0: tun_chr_ioctl cmd 2147767511
[  821.830566][T31191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7402'.
[  821.885246][T31191] vlan0: entered allmulticast mode
[  821.895369][T31191] bridge6: entered allmulticast mode
[  822.007336][T31194] syzkaller0: entered promiscuous mode
[  822.014034][T31194] syzkaller0: entered allmulticast mode
[  822.032833][T18467] syzkaller0: tun_net_xmit 48
[  822.044207][T31189] syzkaller0: tun_chr_ioctl cmd 1074025677
[  822.056922][T31189] syzkaller0: Linktype set failed because interface is up
[  822.078955][T31202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7404'.
[  822.093838][T31202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7404'.
[  823.809675][T31200] macsec2: entered promiscuous mode
[  823.815005][T31200] macsec2: entered allmulticast mode
[  823.928021][T31218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  823.939020][T31218] openvswitch: netlink: Flow actions attr not present in new flow.
[  823.956950][T31218] netlink: 'syz.3.7410': attribute type 1 has an invalid length.
[  824.025828][T31218] 8021q: adding VLAN 0 to HW filter on device bond1
[  824.043840][T31225] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7413'.
[  824.061133][T31225] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7413'.
[  824.110175][T31226] 8021q: adding VLAN 0 to HW filter on device bond1
[  824.118029][T31226] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[  824.140786][T31226] bond1: (slave vxcan5): Error -95 calling set_mac_address
[  824.231868][T31242] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.7416'.
[  824.303729][T31218] veth3: entered promiscuous mode
[  824.317330][T31218] bond1: (slave veth3): Enslaving as an active interface with a down link
[  824.344144][T31236] vlan0: entered allmulticast mode
[  824.350835][T31236] bond1: entered allmulticast mode
[  824.460090][T31244] 
: left allmulticast mode
[  824.482910][T31244] bridge0: port 1(
) entered disabled state
[  824.527864][T31254] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.7417'.
[  824.561389][T31244] bridge_slave_1: left allmulticast mode
[  824.572810][T31244] bridge_slave_1: left promiscuous mode
[  824.592041][T31244] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.617222][T31244] bond0: (slave bond_slave_0): Releasing backup interface
[  824.644092][T31244] bond0: (slave bond_slave_1): Releasing backup interface
[  824.684948][T31244] team0: Port device team_slave_0 removed
[  824.705408][T31244] team0: Port device team_slave_1 removed
[  824.744514][T31244] bond0: (slave netdevsim0): Releasing backup interface
[  824.776163][T31244] bond1: (slave bond2): Releasing backup interface
[  824.786415][T31244] bond2: left promiscuous mode
[  824.804080][T31244] bond6: (slave gretap1): Releasing active interface
[  824.904641][T25221] syz!: Port: 1 Link DOWN
[  825.104405][T31284] veth3: entered allmulticast mode
[  825.311735][T31300] netlink: 'syz.1.7426': attribute type 10 has an invalid length.
[  825.325900][T31303] netlink: 'syz.0.7429': attribute type 11 has an invalid length.
[  825.379565][T31300] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  825.429365][T31312] netlink: 'syz.0.7429': attribute type 10 has an invalid length.
[  825.471319][T31312] team0: Device ipvlan1 failed to register rx_handler
[  825.596145][T31324] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  825.773577][T31328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.575379][T31354] __nla_validate_parse: 9 callbacks suppressed
[  826.575396][T31354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7444'.
[  826.591016][T31354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7444'.
[  826.847758][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.893192][T31375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7451'.
[  827.036870][T31384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7454'.
[  827.046701][T31384] netlink: 'syz.4.7454': attribute type 1 has an invalid length.
[  827.084254][T31384] netlink: 'syz.4.7454': attribute type 1 has an invalid length.
[  827.092746][T31384] netlink: 'syz.4.7454': attribute type 2 has an invalid length.
[  827.111868][T31384] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7454'.
[  827.430227][T31415] netlink: zone id is out of range
[  827.450028][T31415] netlink: del zone limit has 4 unknown bytes
[  827.480589][T31417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7462'.
[  827.663569][T31428] netlink: 'syz.0.7466': attribute type 1 has an invalid length.
[  827.673839][T31428] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7466'.
[  827.887687][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.074999][T31454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7473'.
[  828.110309][T31456] net veth1_virt_wifi .: renamed from virt_wifi0
[  828.731730][T31494] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7482'.
[  828.932074][T31478] vlan0: left allmulticast mode
[  828.936986][T31478] veth0_vlan: left allmulticast mode
[  828.942653][T31478] vlan0: left promiscuous mode
[  828.963284][T31497] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  828.978110][T27948] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  828.987255][T27948] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  828.996722][T27948] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  829.007150][T27948] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  829.054848][T27948] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  829.072302][T27948] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  829.152061][T27948] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  829.163218][T27948] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  829.181433][T31506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7486'.
[  829.367949][T31513] gretap0: entered promiscuous mode
[  829.421703][T31513] netlink: 'syz.0.7488': attribute type 28 has an invalid length.
[  829.439802][T31513] netlink: 'syz.0.7488': attribute type 3 has an invalid length.
[  830.427338][T31563] netlink: 'syz.3.7504': attribute type 11 has an invalid length.
[  830.494768][T31567] netlink: 'syz.1.7505': attribute type 1 has an invalid length.
[  830.559350][T31569] bond7 (unregistering): Released all slaves
[  830.591529][T31567] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  830.923447][T31601] sctp: [Deprecated]: syz.4.7511 (pid 31601) Use of int in maxseg socket option.
[  830.923447][T31601] Use struct sctp_assoc_value instead
[  831.387290][T31634] netlink: 'syz.0.7524': attribute type 4 has an invalid length.
[  831.612215][T31640] netlink: 'syz.0.7525': attribute type 11 has an invalid length.
[  831.620589][T31640] __nla_validate_parse: 12 callbacks suppressed
[  831.620607][T31640] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7525'.
[  831.840766][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  831.853484][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  831.861718][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  831.872493][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  831.881580][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  832.094417][T31654] Can't find ip_set type bitmap:ip,m!c
[  832.485869][T31674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7533'.
[  833.969736][   T51] Bluetooth: hci3: command tx timeout
[  834.013855][T31707] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7541'.
[  834.406910][T31645] chnl_net:caif_netlink_parms(): no params data found
[  834.597170][T31718] bond0: entered promiscuous mode
[  834.607110][T31718] bond_slave_0: entered promiscuous mode
[  834.625138][T31718] bond_slave_1: entered promiscuous mode
[  834.641005][T31718] dummy0: entered promiscuous mode
[  834.666651][T31718] bond0: left promiscuous mode
[  834.671889][T31718] bond_slave_0: left promiscuous mode
[  834.679239][T31718] bond_slave_1: left promiscuous mode
[  834.685103][T31718] dummy0: left promiscuous mode
[  834.839646][T31645] bridge0: port 1(bridge_slave_0) entered blocking state
[  834.848149][T31645] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.855438][T31645] bridge_slave_0: entered allmulticast mode
[  834.871662][T31645] bridge_slave_0: entered promiscuous mode
[  834.880975][T31645] bridge0: port 2(bridge_slave_1) entered blocking state
[  834.896385][T31645] bridge0: port 2(bridge_slave_1) entered disabled state
[  834.910345][T31645] bridge_slave_1: entered allmulticast mode
[  834.937126][T31645] bridge_slave_1: entered promiscuous mode
[  834.945008][T31730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7549'.
[  834.956950][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7549'.
[  835.105606][T31736] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[  835.108613][T31750] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613)
[  835.193565][T31645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  835.213601][T31750] netlink: 'syz.1.7552': attribute type 4 has an invalid length.
[  835.228852][T31750] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7552'.
[  835.269770][T31645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  835.492482][T31645] team0: Port device team_slave_0 added
[  835.515547][T31645] team0: Port device team_slave_1 added
[  835.614857][T31770] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7555'.
[  835.673987][T31645] batman_adv: batadv0: Adding interface: batadv_slave_0
[  835.710123][T31645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  835.772750][T31645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  835.800481][T31645] batman_adv: batadv0: Adding interface: batadv_slave_1
[  835.827985][T31645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  835.855878][T31645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  836.048444][   T51] Bluetooth: hci3: command tx timeout
[  836.104191][T31645] hsr_slave_0: entered promiscuous mode
[  836.124411][T31645] hsr_slave_1: entered promiscuous mode
[  836.132096][T31645] debugfs: 'hsr0' already exists in 'hsr'
[  836.139397][T31645] Cannot create hsr debugfs directory
[  836.249037][T31796] ksmbd: Unknown IPC event: 4, ignore.
[  836.325107][T31796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7563'.
[  836.342184][T31796] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7563'.
[  836.379011][T31796] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7563'.
[  836.475717][T31799] geneve3: entered promiscuous mode
[  836.481163][T31799] geneve3: entered allmulticast mode
[  836.536729][ T8767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  836.554329][ T8767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  836.613427][ T8767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  836.637649][ T8767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  836.673849][T31818] __nla_validate_parse: 1 callbacks suppressed
[  836.673867][T31818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7567'.
[  836.694471][T31818] tipc: Invalid UDP bearer configuration
[  836.694526][T31818] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  836.823641][T31826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7571'.
[  837.076715][T31843] netlink: 'syz.4.7577': attribute type 11 has an invalid length.
[  837.103963][T31843] netlink: 'syz.4.7577': attribute type 4 has an invalid length.
[  837.120532][T31843] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7577'.
[  837.179003][T31850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7580'.
[  837.193046][T31848] netlink: 'syz.0.7579': attribute type 16 has an invalid length.
[  837.204544][T31645] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  837.222226][T31848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7579'.
[  837.240972][T31645] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  837.277926][T31857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7579'.
[  837.301200][T31645] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  837.350181][T31860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7582'.
[  837.350557][T31645] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  837.520136][T31860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7582'.
[  837.673798][T31883] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7586'.
[  837.736413][T31885] netlink: 'syz.4.7587': attribute type 5 has an invalid length.
[  837.771509][T31645] 8021q: adding VLAN 0 to HW filter on device bond0
[  837.813792][T31645] 8021q: adding VLAN 0 to HW filter on device team0
[  837.831956][T31891] netlink: 'syz.3.7588': attribute type 1 has an invalid length.
[  837.855032][T18485] bridge0: port 1(bridge_slave_0) entered blocking state
[  837.862271][T18485] bridge0: port 1(bridge_slave_0) entered forwarding state
[  837.887317][ T8767] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.894570][ T8767] bridge0: port 2(bridge_slave_1) entered forwarding state
[  837.914268][T31894] netlink: 'syz.0.7590': attribute type 1 has an invalid length.
[  838.129360][   T51] Bluetooth: hci3: command tx timeout
[  838.271943][T31918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7594'.
[  838.322406][T31645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  838.549966][T31645] veth0_vlan: entered promiscuous mode
[  838.564820][T31645] veth1_vlan: entered promiscuous mode
[  838.598163][T31645] veth0_macvtap: entered promiscuous mode
[  838.608532][T31645] veth1_macvtap: entered promiscuous mode
[  838.633856][T31645] batman_adv: batadv0: Interface activated: batadv_slave_0
[  838.650973][T31645] batman_adv: batadv0: Interface activated: batadv_slave_1
[  838.667261][ T8767] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  838.692775][T27951] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  838.711598][T27951] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  838.801383][T27948] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  839.054767][T27951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  839.084978][T27951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  839.146594][T31943] netlink: 'syz.4.7602': attribute type 3 has an invalid length.
[  839.154792][T31948] netlink: 'syz.0.7603': attribute type 25 has an invalid length.
[  839.173624][T31943] netlink: 'syz.4.7602': attribute type 3 has an invalid length.
[  839.182564][T31943] netlink: 'syz.4.7602': attribute type 3 has an invalid length.
[  839.205047][T27951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  839.221681][T27951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  839.392070][T31960] syzkaller0: entered promiscuous mode
[  839.422567][T31960] syzkaller0: entered allmulticast mode
[  839.446380][T31959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  839.471209][T31966] macvlan2: entered allmulticast mode
[  839.477066][T31966] bond0: (slave macvlan2): Error -22 calling dev_set_mtu
[  840.189523][T27951] bond8 (unregistering): (slave bridge7): Releasing active interface
[  840.209107][   T51] Bluetooth: hci3: command tx timeout
[  840.515625][T27951] bond0 (unregistering): Released all slaves
[  840.536420][T27951] bond1 (unregistering): Released all slaves
[  840.551742][T27951] bond2 (unregistering): Released all slaves
[  840.563729][T25223] tipc: Node number set to 4126259026
[  840.666641][T27951] bond3 (unregistering): Released all slaves
[  840.778149][T27951] bond4 (unregistering): Released all slaves
[  840.793090][T27951] bond5 (unregistering): Released all slaves
[  840.805625][T27951] bond6 (unregistering): Released all slaves
[  840.918954][T27951] bond7 (unregistering): Released all slaves
[  840.933724][T27951] bond8 (unregistering): Released all slaves
[  841.056849][T27951] bond9 (unregistering): (slave veth7): Releasing active interface
[  841.066545][T27951] bond9 (unregistering): Released all slaves
[  841.083015][T31959] tipc: Resetting bearer <eth:syzkaller0>
[  841.119026][T31959] tipc: Disabling bearer <eth:syzkaller0>
[  841.213320][T27951] tipc: Disabling bearer <eth:syzkaller0>
[  841.262772][T27951] tipc: Left network mode
[  841.406712][T32006] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  841.696466][T32027] validate_nla: 62 callbacks suppressed
[  841.696485][T32027] netlink: 'syz.4.7627': attribute type 49 has an invalid length.
[  842.035005][T32044] __nla_validate_parse: 69 callbacks suppressed
[  842.035033][T32044] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7633'.
[  842.074125][T32045] netlink: 'syz.4.7632': attribute type 11 has an invalid length.
[  842.117511][T32045] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7632'.
[  842.280299][T32052] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7639'.
[  842.391050][T32052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7639'.
[  842.436452][T32068] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7642'.
[  842.460430][T32071] netlink: 'syz.0.7643': attribute type 1 has an invalid length.
[  842.482964][T32071] netlink: 'syz.0.7643': attribute type 1 has an invalid length.
[  842.502611][T32071] netlink: 'syz.0.7643': attribute type 1 has an invalid length.
[  842.555052][T32071] netlink: 'syz.0.7643': attribute type 2 has an invalid length.
[  842.593612][T32071] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7643'.
[  842.605965][T32071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7643'.
[  842.708763][T27951] veth1_macvtap: left promiscuous mode
[  842.714300][T27951] veth0_macvtap: left promiscuous mode
[  842.734537][T27951] veth1_vlan: left promiscuous mode
[  842.832786][T32088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7647'.
[  842.866370][T32088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7647'.
[  843.759139][T32096] lo: entered allmulticast mode
[  843.764512][T32096] lo: left allmulticast mode
[  843.901256][T32105] dvmrp1: entered allmulticast mode
[  843.960460][T32113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7655'.
[  844.338552][T27951] IPVS: stop unused estimator thread 0...
[  844.666347][T32154] netlink: 'syz.0.7670': attribute type 10 has an invalid length.
[  844.700425][T32154] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.725837][T32154] bridge_slave_1: left allmulticast mode
[  844.737996][T32154] bridge_slave_1: left promiscuous mode
[  844.748931][T32154] bridge0: port 2(bridge_slave_1) entered disabled state
[  844.775870][T32154] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  845.072740][T32182] tipc: Started in network mode
[  845.084677][T32182] tipc: Node identity ac14140f, cluster identity 4711
[  845.093940][T32182] tipc: New replicast peer: 255.255.255.255
[  845.101593][T32182] tipc: Enabled bearer <udp:syz2>, priority 2
[  845.195897][T32184] gretap0: entered promiscuous mode
[  845.213120][T32184] gretap0: left promiscuous mode
[  845.643914][T32223] : entered promiscuous mode
[  846.216440][T32252] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  846.237921][T25221] tipc: Node number set to 2886997007
[  846.393174][T32254] veth3: entered allmulticast mode
[  846.980060][T32286] IPv6: NLM_F_CREATE should be specified when creating new route
[  847.071237][T32288] ip6gre3: entered allmulticast mode
[  847.227987][T32296] __nla_validate_parse: 13 callbacks suppressed
[  847.228006][T32296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7716'.
[  847.299686][T32298] netlink: 'syz.0.7718': attribute type 12 has an invalid length.
[  847.338443][T32298] netlink: 'syz.0.7718': attribute type 28 has an invalid length.
[  847.378695][T32298] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7718'.
[  847.521958][T32312] bridge7: entered promiscuous mode
[  847.546270][T32312] bridge7: entered allmulticast mode
[  847.559949][T32314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7724'.
[  847.847320][T32337] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  847.872304][T32337] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7732'.
[  847.905364][T32337] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  847.936052][T32342] tipc: Resetting bearer <eth:syzkaller0>
[  847.958808][T32337] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  848.044767][T32345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7735'.
[  848.150299][T32350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  848.345097][T32354] IPv6: sit2: Disabled Multicast RS
[  848.394641][T32354] sit2: entered allmulticast mode
[  848.431399][T32362] sctp: [Deprecated]: syz.5.7739 (pid 32362) Use of int in maxseg socket option.
[  848.431399][T32362] Use struct sctp_assoc_value instead
[  848.463934][T32352] netlink: 'syz.4.7738': attribute type 29 has an invalid length.
[  848.507218][T32352] netlink: 'syz.4.7738': attribute type 29 has an invalid length.
[  848.525546][T32363] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7739'.
[  848.539499][T32363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7739'.
[  848.642217][T32363] veth5: entered allmulticast mode
[  848.661898][T32368] netlink: 340 bytes leftover after parsing attributes in process `syz.3.7741'.
[  848.661979][T32369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7741'.
[  849.004731][T18485] tipc: Resetting bearer <eth:syzkaller0>
[  849.017988][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  849.658294][T32405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7751'.
[  850.096993][T32423] dvmrp1: entered allmulticast mode
[  850.291285][T32435] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  850.319613][T32435] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  850.383375][T32440] bond0: Error: Cannot enslave bond to itself.
[  850.555493][T32457] netlink: 'syz.1.7768': attribute type 12 has an invalid length.
[  850.637208][T32463] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  850.945321][T32476] netlink: 'syz.0.7773': attribute type 10 has an invalid length.
[  851.253594][T32497] netlink: 'syz.3.7780': attribute type 1 has an invalid length.
[  851.262140][T32497] netlink: 'syz.3.7780': attribute type 10 has an invalid length.
[  851.276916][T32497] netlink: 'syz.3.7780': attribute type 4 has an invalid length.
[  851.419864][T32504] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2
[  851.451565][T32504] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€
[  851.607092][T32514] veth5: entered allmulticast mode
[  851.731089][T32404] Bluetooth: hci2: command 0x0406 tx timeout
[  851.737786][T32404] Bluetooth: hci5: command 0x0406 tx timeout
[  852.080473][T32530] syzkaller1: entered promiscuous mode
[  852.086018][T32530] syzkaller1: entered allmulticast mode
[  852.119246][T32543] netlink: 'syz.1.7796': attribute type 13 has an invalid length.
[  852.312446][T32551] __nla_validate_parse: 28 callbacks suppressed
[  852.312464][T32551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7798'.
[  852.409096][T32557] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7800'.
[  852.439362][T32562] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7803'.
[  852.470951][T32562] validate_nla: 1 callbacks suppressed
[  852.470967][T32562] netlink: 'syz.1.7803': attribute type 1 has an invalid length.
[  852.485438][T32566] netlink: 596 bytes leftover after parsing attributes in process `syz.5.7802'.
[  852.871199][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7813'.
[  852.912371][T32598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7812'.
[  852.924850][T32599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7813'.
[  852.963480][T32605] netlink: 'syz.4.7815': attribute type 10 has an invalid length.
[  852.998386][T32605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7815'.
[  853.036500][T32608] erspan0: entered allmulticast mode
[  853.070320][T32609] netlink: 81 bytes leftover after parsing attributes in process `syz.0.7817'.
[  853.215647][T32620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7821'.
[  853.900384][T32670] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  853.910432][T32670] sctp: [Deprecated]: syz.5.7833 (pid 32670) Use of int in maxseg socket option.
[  853.910432][T32670] Use struct sctp_assoc_value instead
[  853.934827][T32672] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  854.033514][T32682] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  854.094241][T32682] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  854.108525][T32682] gretap2: entered promiscuous mode
[  854.113819][T32682] gretap2: entered allmulticast mode
[  854.120948][T32685] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  854.143616][T32685] bridge0: port 1(bridge_slave_0) entered disabled state
[  854.196122][T32687] ip6gre2: entered allmulticast mode
[  854.240811][T32696] nftables ruleset with unbound chain
[  854.247193][T32691] netlink: 'syz.4.7843': attribute type 29 has an invalid length.
[  854.300281][T32701] tipc: Trying to set illegal importance in message
[  854.991757][T32747] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  855.023418][T32747] bridge0: port 2(bridge_slave_1) entered disabled state
[  855.031152][T32747] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.196430][T32764] sctp: [Deprecated]: syz.1.7865 (pid 32764) Use of int in max_burst socket option.
[  855.196430][T32764] Use struct sctp_assoc_value instead
[  855.954694][  T325] netlink: 'syz.3.7874': attribute type 2 has an invalid length.
[  856.469438][  T352] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  856.519243][  T354] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  857.096742][  T398] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  857.294237][  T407] bridge_slave_0: entered promiscuous mode
[  857.482037][  T418] __nla_validate_parse: 19 callbacks suppressed
[  857.482058][  T418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7901'.
[  857.508119][  T418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7901'.
[  857.672624][  T433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7906'.
[  857.762492][   T30] audit: type=1800 audit(1755137845.377:7): pid=440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7905" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1792 res=0 errno=0
[  857.817718][  T439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7907'.
[  858.115208][  T457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7913'.
[  858.170687][  T463] syzkaller1: entered promiscuous mode
[  858.176196][  T463] syzkaller1: entered allmulticast mode
[  858.200716][  T462] C: renamed from team_slave_0
[  858.215991][  T462] netlink: 'syz.3.7912': attribute type 1 has an invalid length.
[  858.232533][  T462] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  858.358737][  T471] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  858.483383][  T480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7921'.
[  858.527064][  T484] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7920'.
[  858.704578][  T491] IPv6: NLM_F_CREATE should be specified when creating new route
[  858.713893][  T491] sctp: [Deprecated]: syz.0.7923 (pid 491) Use of int in maxseg socket option.
[  858.713893][  T491] Use struct sctp_assoc_value instead
[  859.091770][  T518] netlink: 'syz.5.7932': attribute type 1 has an invalid length.
[  859.265076][  T530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  859.289775][  T535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7939'.
[  859.308501][  T535] netlink: 'syz.1.7939': attribute type 7 has an invalid length.
[  859.316451][  T535] netlink: 'syz.1.7939': attribute type 8 has an invalid length.
[  859.324709][  T535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7939'.
[  859.413901][  T530] tipc: Disabling bearer <eth:syzkaller0>
[  859.456044][  T544] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7942'.
[  859.480740][  T544] gretap0: entered promiscuous mode
[  859.509965][  T547] 0ªî{X¹¦: renamed from gretap0
[  859.526653][  T547] 0ªî{X¹¦: left promiscuous mode
[  859.532128][  T547] 0ªî{X¹¦: entered allmulticast mode
[  859.542079][  T547] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  859.560838][  T544] 1ªî{X¹¦: renamed from 
30ªî{X¹¦ (while UP)
[  859.580592][  T544] A link change request failed with some changes committed already. Interface 
31ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  859.630552][T25221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  859.671185][  T555] netlink: 'syz.5.7944': attribute type 4 has an invalid length.
[  859.843016][  T565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  859.861686][  T560] pim6reg1: entered promiscuous mode
[  859.867157][  T560] pim6reg1: entered allmulticast mode
[  860.198367][T25222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.198658][  T575] tipc: Invalid UDP bearer configuration
[  860.212026][  T575] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  860.288689][T27949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  860.649781][  T602] netlink: 'syz.1.7961': attribute type 11 has an invalid length.
[  860.680696][  T602] netlink: 'syz.1.7961': attribute type 11 has an invalid length.
[  860.706155][  T607] netlink: 'syz.3.7963': attribute type 10 has an invalid length.
[  860.754068][  T607] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  861.338771][T27953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.377734][T27953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.467775][T25227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  861.800721][  T683] syzkaller1: entered promiscuous mode
[  861.806388][  T683] syzkaller1: entered allmulticast mode
[  861.929351][  T688] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  861.941742][  T688] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.150974][  T701] netlink: 'syz.1.7990': attribute type 4 has an invalid length.
[  862.185479][  T688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  862.202472][  T688] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.235774][  T705] syzkaller1: entered promiscuous mode
[  862.250148][  T705] syzkaller1: entered allmulticast mode
[  862.330810][  T688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  862.365712][  T688] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.561713][  T688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  862.573081][  T688] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.669333][  T729] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  862.766007][T27949] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  862.818670][T27949] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  862.849676][T27949] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  862.884450][T27949] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  862.938475][T27949] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  862.946981][T27949] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  862.968444][T27949] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  862.977005][T27949] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  863.135812][  T754] __nla_validate_parse: 21 callbacks suppressed
[  863.135831][  T754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8006'.
[  863.541078][  T776] delete_channel: no stack
[  863.845767][  T786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8011'.
[  864.303308][  T799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8016'.
[  864.436016][  T805] tap0: tun_chr_ioctl cmd 1074025676
[  864.446235][  T805] tap0: owner set to 0
[  865.102923][  T845] tipc: Resetting bearer <eth:syzkaller0>
[  865.153081][  T843] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  865.407935][  T861] veth0: entered promiscuous mode
[  865.452233][  T852] veth0: left promiscuous mode
[  865.636927][  T879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8039'.
[  865.647040][  T879] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8039'.
[  865.727828][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  865.748517][  T886] dvmrp0: entered allmulticast mode
[  865.854282][  T892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8043'.
[  866.127338][  T902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8047'.
[  866.418392][  T918] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  866.548153][  T924] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  866.602833][  T927] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8055'.
[  866.629893][  T927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8055'.
[  866.649770][  T927] netlink: 'syz.3.8055': attribute type 26 has an invalid length.
[  866.660133][  T927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8055'.
[  866.780996][  T934] macvlan2: entered promiscuous mode
[  866.792383][  T934] macvlan2: entered allmulticast mode
[  867.411894][T27661] Bluetooth: hci3: command tx timeout
[  867.885426][ T1021] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  868.093425][ T1027] bridge0: port 1(vlan3) entered blocking state
[  868.105177][ T1027] bridge0: port 1(vlan3) entered disabled state
[  868.112161][ T1027] vlan3: entered allmulticast mode
[  868.118927][ T1027] bridge0: entered allmulticast mode
[  868.129740][ T1027] vlan3: left allmulticast mode
[  868.139155][ T1027] bridge0: left allmulticast mode
[  868.166539][ T1029] __nla_validate_parse: 6 callbacks suppressed
[  868.166555][ T1029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8082'.
[  868.483827][ T1057] pim6reg1: entered promiscuous mode
[  868.508091][ T1057] pim6reg1: entered allmulticast mode
[  868.631052][ T1070] sctp: [Deprecated]: syz.3.8090 (pid 1070) Use of struct sctp_assoc_value in delayed_ack socket option.
[  868.631052][ T1070] Use struct sctp_sack_info instead
[  868.806594][ T1076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8093'.
[  868.843817][ T1076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8093'.
[  868.862245][ T1076] netlink: 'syz.0.8093': attribute type 7 has an invalid length.
[  868.913881][ T1088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8095'.
[  869.127602][ T1103] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  869.235854][ T1108] sctp: [Deprecated]: syz.1.8100 (pid 1108) Use of int in max_burst socket option deprecated.
[  869.235854][ T1108] Use struct sctp_assoc_value instead
[  869.264934][ T1111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8101'.
[  869.294730][ T1113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8102'.
[  869.310152][ T1109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8101'.
[  869.368929][ T1119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8105'.
[  869.435617][ T8767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.461208][ T8767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  869.768936][ T1140] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8113'.
[  869.808736][ T1140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8113'.
[  870.239165][ T1169] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  870.715851][ T1194] netlink: 'syz.3.8130': attribute type 10 has an invalid length.
[  870.725265][ T1196] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  870.799601][ T1194] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  871.048537][ T1215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  871.056233][ T1215] syzkaller0: entered promiscuous mode
[  871.062376][ T1215] syzkaller0: entered allmulticast mode
[  871.098491][ T1215] tipc: Resetting bearer <eth:syzkaller0>
[  871.112502][ T1206] tipc: Resetting bearer <eth:syzkaller0>
[  871.228474][ T1206] tipc: Disabling bearer <eth:syzkaller0>
[  871.500178][ T1243] netlink: 'syz.1.8144': attribute type 6 has an invalid length.
[  871.923106][ T1273] gretap0: entered promiscuous mode
[  872.322870][ T1298] netlink: 'syz.0.8161': attribute type 1 has an invalid length.
[  872.399644][ T1298] bond1 (unregistering): Released all slaves
[  872.728401][ T1320] nbd5: detected capacity change from 0 to 549764202496
[  872.784762][T27661] block nbd5: Receive control failed (result -32)
[  873.033540][ T1338] netlink: 'syz.0.8172': attribute type 2 has an invalid length.
[  873.058662][ T1338] netlink: 'syz.0.8172': attribute type 8 has an invalid length.
[  873.169716][ T1349] __nla_validate_parse: 24 callbacks suppressed
[  873.169736][ T1349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8175'.
[  873.374602][T25223] IPVS: starting estimator thread 0...
[  873.400863][ T1364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8178'.
[  873.489576][ T1365] IPVS: using max 30 ests per chain, 72000 per kthread
[  873.714502][ T1380] netlink: 'syz.1.8182': attribute type 1 has an invalid length.
[  873.723990][ T1380] netlink: 'syz.1.8182': attribute type 3 has an invalid length.
[  873.733228][ T1380] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8182'.
[  873.802136][ T8767] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  873.815986][ T8767] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  874.023952][ T1394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8187'.
[  874.068681][ T1396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8188'.
[  874.161503][ T1396] 8021q: adding VLAN 0 to HW filter on device bond8
[  874.185560][ T1396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8188'.
[  874.213478][ T1396] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8188'.
[  874.399988][ T1407] netlink: 'syz.5.8191': attribute type 10 has an invalid length.
[  874.653726][ T1418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8197'.
[  874.674768][ T1418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8197'.
[  874.886013][ T1439] netlink: 'syz.5.8204': attribute type 12 has an invalid length.
[  874.943353][ T1439] netlink: 'syz.5.8204': attribute type 29 has an invalid length.
[  874.981579][ T1439] netlink: 148 bytes leftover after parsing attributes in process `syz.5.8204'.
[  874.989696][ T1449] netlink: 'syz.5.8204': attribute type 1 has an invalid length.
[  875.033769][ T1449] 8021q: adding VLAN 0 to HW filter on device bond1
[  875.087903][ T1439] bond1: (slave ip6erspan0): making interface the new active one
[  875.100006][ T1439] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  875.164995][ T1455] netlink: 'syz.5.8209': attribute type 10 has an invalid length.
[  875.174028][ T1455] dummy0: entered promiscuous mode
[  875.180649][ T1455] bridge0: port 3(dummy0) entered blocking state
[  875.187738][ T1455] bridge0: port 3(dummy0) entered disabled state
[  875.194409][ T1455] dummy0: entered allmulticast mode
[  875.203216][ T1455] bridge0: port 3(dummy0) entered blocking state
[  875.209719][ T1455] bridge0: port 3(dummy0) entered forwarding state
[  875.250170][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  875.344664][ T1460] tipc: Enabling of bearer <eth:ipvlan0> rejected, failed to enable media
[  876.048519][ T1498] vlan0: entered allmulticast mode
[  876.054650][ T1498] veth0_to_hsr: entered allmulticast mode
[  876.083371][ T1493] IPVS: Error joining to the multicast group
[  876.310516][ T1514] Dead loop on virtual device ip6_vti0, fix it urgently!
[  876.317938][ T1514] Dead loop on virtual device ip6_vti0, fix it urgently!
[  876.325269][ T1514] Dead loop on virtual device ip6_vti0, fix it urgently!
[  876.332657][ T1514] Dead loop on virtual device ip6_vti0, fix it urgently!
[  876.340016][ T1514] Dead loop on virtual device ip6_vti0, fix it urgently!
[  876.347335][ T1514] Dead loop on virtual device ip6_vti0, fix it urgently!
[  877.135659][ T1544] team0 (unregistering): Port device team_slave_0 removed
[  877.162130][ T1544] team0 (unregistering): Port device team_slave_1 removed
[  877.723976][ T1588] validate_nla: 3 callbacks suppressed
[  877.723993][ T1588] netlink: 'syz.3.8249': attribute type 1 has an invalid length.
[  877.756076][ T1588] netlink: 'syz.3.8249': attribute type 4 has an invalid length.
[  877.924517][ T1589] veth5: entered allmulticast mode
[  878.242885][ T1623] bond0: entered promiscuous mode
[  878.270252][ T1623] bond_slave_0: entered promiscuous mode
[  878.289741][ T1623] bond_slave_1: entered promiscuous mode
[  878.322376][ T1623] bond0: left promiscuous mode
[  878.335347][ T1623] bond_slave_0: left promiscuous mode
[  878.342123][ T1623] bond_slave_1: left promiscuous mode
[  878.594430][ T1638] veth7: entered promiscuous mode
[  878.621602][ T1638] veth7: entered allmulticast mode
[  879.282305][ T1688] rdma_op ffff8880609229f0 conn xmit_rdma 0000000000000000
[  879.316021][ T1690] __nla_validate_parse: 14 callbacks suppressed
[  879.316040][ T1690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8279'.
[  879.344697][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8278'.
[  879.666027][ T1716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8287'.
[  879.882846][ T1729] macvlan3: entered allmulticast mode
[  879.913713][ T1729] veth1_vlan: entered allmulticast mode
[  879.924767][ T1729] bond0: (slave macvlan3): Enslaving as an active interface with an up link
[  880.513627][ T1758] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8299'.
[  880.549614][ T1756] syzkaller1: entered promiscuous mode
[  880.555115][ T1756] syzkaller1: entered allmulticast mode
[  880.607204][ T1763] netlink: 'syz.4.8302': attribute type 9 has an invalid length.
[  880.609731][ T1756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  880.652446][ T1762] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8303'.
[  881.153424][ T1784] tunl0: entered promiscuous mode
[  881.188959][ T1784] netlink: 'syz.4.8307': attribute type 3 has an invalid length.
[  881.237934][ T1784] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8307'.
[  881.717741][ T1809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8315'.
[  882.023332][ T1809] 8021q: adding VLAN 0 to HW filter on device bond2
[  882.056209][ T1811] vlan1: entered allmulticast mode
[  882.062626][ T1811] bond2: entered allmulticast mode
[  882.235406][ T1820] netlink: 788 bytes leftover after parsing attributes in process `syz.4.8317'.
[  882.309228][ T1822] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  882.590574][ T1828] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20002
[  882.717295][ T1844] netlink: 'syz.1.8325': attribute type 1 has an invalid length.
[  882.831163][ T1844] 8021q: adding VLAN 0 to HW filter on device bond9
[  882.968347][ T1845] 8021q: adding VLAN 0 to HW filter on device bond9
[  882.995270][ T1845] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address
[  883.029423][ T1845] bond9: (slave vxcan5): Error -95 calling set_mac_address
[  883.121356][ T1853] IPVS: Error connecting to the multicast addr
[  883.405024][ T1866] lo: entered allmulticast mode
[  883.457786][ T1866] lo: left allmulticast mode
[  883.484966][ T1866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8331'.
[  883.796568][ T1887] netlink: 'syz.0.8337': attribute type 1 has an invalid length.
[  883.805034][ T1887] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8337'.
[  883.825460][ T1887] netlink: 'syz.0.8337': attribute type 39 has an invalid length.
[  884.279872][ T1900] netlink: 'syz.3.8341': attribute type 1 has an invalid length.
[  884.419638][ T1910] __nla_validate_parse: 3 callbacks suppressed
[  884.419656][ T1910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8345'.
[  884.458651][ T1900] 8021q: adding VLAN 0 to HW filter on device bond3
[  884.500619][ T1907] bond3: (slave veth0_to_bond): making interface the new active one
[  884.533701][ T1907] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  884.558247][ T1902] syzkaller0: entered promiscuous mode
[  884.563750][ T1902] syzkaller0: entered allmulticast mode
[  884.722726][ T1918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8346'.
[  885.451120][ T1962] netlink: 10 bytes leftover after parsing attributes in process `syz.4.8354'.
[  885.610950][ T1972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8358'.
[  885.855934][ T1982] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8362'.
[  886.044040][ T1989] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8366'.
[  886.157332][ T1993] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  886.313718][ T2008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8372'.
[  886.314008][ T2005] FAULT_INJECTION: forcing a failure.
[  886.314008][ T2005] name failslab, interval 1, probability 0, space 0, times 0
[  886.341619][ T1993] syzkaller0: entered promiscuous mode
[  886.343264][ T2005] CPU: 1 UID: 0 PID: 2005 Comm: syz.0.8370 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) 
[  886.343290][ T2005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  886.343301][ T2005] Call Trace:
[  886.343309][ T2005]  <TASK>
[  886.343318][ T2005]  dump_stack_lvl+0x189/0x250
[  886.343345][ T2005]  ? __pfx____ratelimit+0x10/0x10
[  886.343367][ T2005]  ? __pfx_dump_stack_lvl+0x10/0x10
[  886.343388][ T2005]  ? __pfx__printk+0x10/0x10
[  886.343418][ T2005]  ? __pfx___might_resched+0x10/0x10
[  886.343440][ T2005]  should_fail_ex+0x414/0x560
[  886.343465][ T2005]  should_failslab+0xa8/0x100
[  886.343491][ T2005]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  886.343516][ T2005]  ? __alloc_skb+0x112/0x2d0
[  886.343540][ T2005]  __alloc_skb+0x112/0x2d0
[  886.343565][ T2005]  netlink_sendmsg+0x5c6/0xb30
[  886.343597][ T2005]  ? __pfx_netlink_sendmsg+0x10/0x10
[  886.343622][ T2005]  ? aa_sock_msg_perm+0xf1/0x1d0
[  886.343649][ T2005]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  886.343668][ T2005]  ? __pfx_netlink_sendmsg+0x10/0x10
[  886.343691][ T2005]  __sock_sendmsg+0x21c/0x270
[  886.343714][ T2005]  ____sys_sendmsg+0x505/0x830
[  886.343744][ T2005]  ? __pfx_____sys_sendmsg+0x10/0x10
[  886.343777][ T2005]  ? import_iovec+0x74/0xa0
[  886.343798][ T2005]  ___sys_sendmsg+0x21f/0x2a0
[  886.343825][ T2005]  ? __pfx____sys_sendmsg+0x10/0x10
[  886.343884][ T2005]  ? __fget_files+0x2a/0x420
[  886.343908][ T2005]  ? __fget_files+0x3a0/0x420
[  886.343942][ T2005]  __x64_sys_sendmsg+0x19b/0x260
[  886.343970][ T2005]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  886.344004][ T2005]  ? __pfx_ksys_write+0x10/0x10
[  886.344024][ T2005]  ? rcu_is_watching+0x15/0xb0
[  886.344047][ T2005]  ? do_syscall_64+0xbe/0x3b0
[  886.344073][ T2005]  do_syscall_64+0xfa/0x3b0
[  886.344099][ T2005]  ? lockdep_hardirqs_on+0x9c/0x150
[  886.344120][ T2005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.344138][ T2005]  ? clear_bhb_loop+0x60/0xb0
[  886.344159][ T2005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.344177][ T2005] RIP: 0033:0x7fe0b818ebe9
[  886.344195][ T2005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  886.344210][ T2005] RSP: 002b:00007fe0b8fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  886.344229][ T2005] RAX: ffffffffffffffda RBX: 00007fe0b83b5fa0 RCX: 00007fe0b818ebe9
[  886.344242][ T2005] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  886.344253][ T2005] RBP: 00007fe0b8fb5090 R08: 0000000000000000 R09: 0000000000000000
[  886.344264][ T2005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  886.344274][ T2005] R13: 00007fe0b83b6038 R14: 00007fe0b83b5fa0 R15: 00007fffee52d888
[  886.344303][ T2005]  </TASK>
[  886.465014][ T2014] openvswitch: netlink: Message has 4 unknown bytes.
[  886.543350][ T1993] syzkaller0: entered allmulticast mode
[  886.622728][ T2022] netlink: 'syz.0.8373': attribute type 33 has an invalid length.
[  886.654327][ T1993] tipc: Resetting bearer <eth:syzkaller0>
[  886.684501][ T2015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8375'.
[  886.764947][ T1992] tipc: Resetting bearer <eth:syzkaller0>
[  886.900540][ T2029] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8377'.
[  886.963041][ T2035] netlink: 'syz.0.8378': attribute type 1 has an invalid length.
[  887.102977][ T2046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8377'.
[  888.661688][ T1992] tipc: Disabling bearer <eth:syzkaller0>
[  888.674244][ T2037] bridge0: port 1(syz_tun) entered blocking state
[  888.681205][ T2037] bridge0: port 1(syz_tun) entered disabled state
[  888.689071][ T2037] syz_tun: entered allmulticast mode
[  888.696065][ T2037] syz_tun: entered promiscuous mode
[  888.704549][ T2035] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  888.763857][ T2046] bond0: (slave bond_slave_0): Releasing backup interface
[  888.825691][ T2046] bond0: (slave bond_slave_1): Releasing backup interface
[  888.852250][ T2046] team0: Port device team_slave_0 removed
[  888.872543][ T2046] team0: Port device team_slave_1 removed
[  888.894185][ T2046] team0: Port device geneve0 removed
[  888.910149][ T2046] bond1: (slave bridge5): Releasing active interface
[  888.931848][ T2051] team0: Mode changed to "activebackup"
[  888.939232][ T5916] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  888.960294][ T3074] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.979794][ T3074] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  889.018589][ T3074] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  889.081546][ T3074] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  889.148606][ T2076] netlink: 'syz.1.8390': attribute type 10 has an invalid length.
[  889.227972][ T2076] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  889.240185][ T2076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  889.289759][ T8767] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  889.394806][ T8767] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  889.553394][ T2102] __nla_validate_parse: 3 callbacks suppressed
[  889.553412][ T2102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8395'.
[  889.628081][ T8767] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  889.668480][ T8767] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  889.901968][T25222] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  890.372621][ T2150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8409'.
[  890.401267][ T2146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8408'.
[  890.405274][ T2150] netlink: 'syz.1.8409': attribute type 7 has an invalid length.
[  890.430767][ T2150] netlink: 'syz.1.8409': attribute type 8 has an invalid length.
[  890.443609][ T2146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8408'.
[  890.454084][ T2150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8409'.
[  891.193085][ T2192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8420'.
[  891.274461][ T2198] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8421'.
[  891.342345][T18485] tipc: Disabling bearer <ib:gre0>
[  891.753886][T18485] bond0 (unregistering): Released all slaves
[  891.872787][T18485] bond1 (unregistering): Released all slaves
[  892.000193][T18485] bond2 (unregistering): Released all slaves
[  892.112089][T18485] bond3 (unregistering): Released all slaves
[  892.129649][T18485] bond4 (unregistering): Released all slaves
[  892.145549][T18485] bond5 (unregistering): Released all slaves
[  892.158830][T18485] bond6 (unregistering): Released all slaves
[  892.294522][T18485] bond7 (unregistering): Released all slaves
[  892.308098][ T2165] syzkaller0: entered promiscuous mode
[  892.313942][ T2165] syzkaller0: entered allmulticast mode
[  892.363245][ T2192] macsec2: entered promiscuous mode
[  892.390907][ T2192] team0: entered promiscuous mode
[  892.396160][ T2192] macsec2: entered allmulticast mode
[  892.421051][ T2192] team0: entered allmulticast mode
[  892.430457][ T2192] team0: Device macsec2 is already an upper device of the team interface
[  892.459032][ T2192] team0: left allmulticast mode
[  892.463959][ T2192] team0: left promiscuous mode
[  892.485033][ T2207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8424'.
[  892.561997][T18485] : left promiscuous mode
[  892.578402][ T2207] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  892.661591][ T2212] digital: digital_start_poll: Unknown protocol
[  892.701035][T18485] tipc: Disabling bearer <udp:syz1>
[  892.718139][T18485] tipc: Left network mode
[  892.718161][ T2213] C: renamed from team_slave_0
[  892.784829][ T2213] netlink: 'syz.4.8426': attribute type 1 has an invalid length.
[  892.822316][ T2213] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  892.838686][ T2212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8425'.
[  892.965994][ T2223] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8429'.
[  893.167525][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  893.550416][ T2267] FAULT_INJECTION: forcing a failure.
[  893.550416][ T2267] name failslab, interval 1, probability 0, space 0, times 0
[  893.596860][ T2267] CPU: 1 UID: 0 PID: 2267 Comm: syz.0.8443 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) 
[  893.596888][ T2267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  893.596899][ T2267] Call Trace:
[  893.596907][ T2267]  <TASK>
[  893.596916][ T2267]  dump_stack_lvl+0x189/0x250
[  893.596943][ T2267]  ? __pfx____ratelimit+0x10/0x10
[  893.596967][ T2267]  ? __pfx_dump_stack_lvl+0x10/0x10
[  893.596989][ T2267]  ? __pfx__printk+0x10/0x10
[  893.597010][ T2267]  ? genl_rcv+0x28/0x40
[  893.597036][ T2267]  ? ____sys_sendmsg+0x505/0x830
[  893.597059][ T2267]  ? __x64_sys_sendmsg+0x19b/0x260
[  893.597095][ T2267]  should_fail_ex+0x414/0x560
[  893.597122][ T2267]  should_failslab+0xa8/0x100
[  893.597149][ T2267]  kmem_cache_alloc_noprof+0x73/0x3c0
[  893.597172][ T2267]  ? skb_clone+0x212/0x3a0
[  893.597194][ T2267]  skb_clone+0x212/0x3a0
[  893.597215][ T2267]  __netlink_deliver_tap+0x404/0x850
[  893.597252][ T2267]  ? netlink_deliver_tap+0x2e/0x1b0
[  893.597276][ T2267]  netlink_deliver_tap+0x19c/0x1b0
[  893.597301][ T2267]  netlink_sendskb+0x68/0x140
[  893.597324][ T2267]  netlink_unicast+0x397/0x9e0
[  893.597346][ T2267]  ? __asan_memcpy+0x40/0x70
[  893.597371][ T2267]  ? __pfx_netlink_unicast+0x10/0x10
[  893.597399][ T2267]  netlink_rcv_skb+0x28c/0x470
[  893.597418][ T2267]  ? __lock_acquire+0xab9/0xd20
[  893.597441][ T2267]  ? __pfx_genl_rcv_msg+0x10/0x10
[  893.597459][ T2267]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  893.597498][ T2267]  ? down_read+0x1ad/0x2e0
[  893.597525][ T2267]  genl_rcv+0x28/0x40
[  893.597548][ T2267]  netlink_unicast+0x82c/0x9e0
[  893.597579][ T2267]  ? __pfx_netlink_unicast+0x10/0x10
[  893.597609][ T2267]  ? netlink_sendmsg+0x642/0xb30
[  893.597629][ T2267]  ? skb_put+0x11b/0x210
[  893.597655][ T2267]  netlink_sendmsg+0x805/0xb30
[  893.597687][ T2267]  ? __pfx_netlink_sendmsg+0x10/0x10
[  893.597713][ T2267]  ? aa_sock_msg_perm+0xf1/0x1d0
[  893.597740][ T2267]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  893.597759][ T2267]  ? __pfx_netlink_sendmsg+0x10/0x10
[  893.597782][ T2267]  __sock_sendmsg+0x21c/0x270
[  893.597805][ T2267]  ____sys_sendmsg+0x505/0x830
[  893.597836][ T2267]  ? __pfx_____sys_sendmsg+0x10/0x10
[  893.597868][ T2267]  ? import_iovec+0x74/0xa0
[  893.597895][ T2267]  ___sys_sendmsg+0x21f/0x2a0
[  893.597923][ T2267]  ? __pfx____sys_sendmsg+0x10/0x10
[  893.597984][ T2267]  ? __fget_files+0x2a/0x420
[  893.598008][ T2267]  ? __fget_files+0x3a0/0x420
[  893.598044][ T2267]  __x64_sys_sendmsg+0x19b/0x260
[  893.598072][ T2267]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  893.598107][ T2267]  ? __pfx_ksys_write+0x10/0x10
[  893.598128][ T2267]  ? rcu_is_watching+0x15/0xb0
[  893.598153][ T2267]  ? do_syscall_64+0xbe/0x3b0
[  893.598180][ T2267]  do_syscall_64+0xfa/0x3b0
[  893.598201][ T2267]  ? lockdep_hardirqs_on+0x9c/0x150
[  893.598222][ T2267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  893.598240][ T2267]  ? clear_bhb_loop+0x60/0xb0
[  893.598263][ T2267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  893.598281][ T2267] RIP: 0033:0x7fe0b818ebe9
[  893.598299][ T2267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  893.598314][ T2267] RSP: 002b:00007fe0b8fb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  893.598334][ T2267] RAX: ffffffffffffffda RBX: 00007fe0b83b5fa0 RCX: 00007fe0b818ebe9
[  893.598347][ T2267] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  893.598358][ T2267] RBP: 00007fe0b8fb5090 R08: 0000000000000000 R09: 0000000000000000
[  893.598369][ T2267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  893.598380][ T2267] R13: 00007fe0b83b6038 R14: 00007fe0b83b5fa0 R15: 00007fffee52d888
[  893.598410][ T2267]  </TASK>
[  894.146998][T18485] hsr_slave_0: left promiscuous mode
[  894.156423][T18485] hsr_slave_1: left promiscuous mode
[  894.165429][T18485] vlan0: left allmulticast mode
[  894.173679][T18485] veth0_vlan: left allmulticast mode
[  894.180285][T18485] vlan0: left promiscuous mode
[  894.785535][ T2307] __nla_validate_parse: 4 callbacks suppressed
[  894.785552][ T2307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8453'.
[  894.838306][ T2308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8453'.
[  895.022797][T18485] pim6reg (unregistering): left allmulticast mode
[  895.034628][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888057eff800: rx timeout, send abort
[  895.534698][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88804f728400: rx timeout, send abort
[  895.543676][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888057eff800: abort rx timeout. Force session deactivation
[  895.965302][ T2317] FAULT_INJECTION: forcing a failure.
[  895.965302][ T2317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  896.009094][ T2317] CPU: 1 UID: 0 PID: 2317 Comm: syz.0.8456 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) 
[  896.009120][ T2317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  896.009130][ T2317] Call Trace:
[  896.009138][ T2317]  <TASK>
[  896.009147][ T2317]  dump_stack_lvl+0x189/0x250
[  896.009173][ T2317]  ? __pfx____ratelimit+0x10/0x10
[  896.009196][ T2317]  ? __pfx_dump_stack_lvl+0x10/0x10
[  896.009217][ T2317]  ? __pfx__printk+0x10/0x10
[  896.009259][ T2317]  should_fail_ex+0x414/0x560
[  896.009285][ T2317]  _copy_to_user+0x31/0xb0
[  896.009307][ T2317]  simple_read_from_buffer+0xe1/0x170
[  896.009337][ T2317]  proc_fail_nth_read+0x1b3/0x220
[  896.009360][ T2317]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  896.009384][ T2317]  ? rw_verify_area+0x2a6/0x4d0
[  896.009406][ T2317]  ? __lock_acquire+0xab9/0xd20
[  896.009428][ T2317]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  896.009450][ T2317]  vfs_read+0x200/0x980
[  896.009471][ T2317]  ? fdget_pos+0x247/0x320
[  896.009492][ T2317]  ? __pfx___mutex_lock+0x10/0x10
[  896.009515][ T2317]  ? __pfx_vfs_read+0x10/0x10
[  896.009539][ T2317]  ? __fget_files+0x2a/0x420
[  896.009569][ T2317]  ? __fget_files+0x3a0/0x420
[  896.009592][ T2317]  ? __fget_files+0x2a/0x420
[  896.009626][ T2317]  ksys_read+0x145/0x250
[  896.009650][ T2317]  ? __pfx_ksys_read+0x10/0x10
[  896.009670][ T2317]  ? rcu_is_watching+0x15/0xb0
[  896.009695][ T2317]  ? do_syscall_64+0xbe/0x3b0
[  896.009721][ T2317]  do_syscall_64+0xfa/0x3b0
[  896.009741][ T2317]  ? lockdep_hardirqs_on+0x9c/0x150
[  896.009762][ T2317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.009781][ T2317]  ? clear_bhb_loop+0x60/0xb0
[  896.009803][ T2317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  896.009821][ T2317] RIP: 0033:0x7fe0b818d5fc
[  896.009839][ T2317] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  896.009855][ T2317] RSP: 002b:00007fe0b8fb5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  896.009874][ T2317] RAX: ffffffffffffffda RBX: 00007fe0b83b5fa0 RCX: 00007fe0b818d5fc
[  896.009888][ T2317] RDX: 000000000000000f RSI: 00007fe0b8fb50a0 RDI: 0000000000000004
[  896.009899][ T2317] RBP: 00007fe0b8fb5090 R08: 0000000000000000 R09: 0000000000000000
[  896.009911][ T2317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  896.009921][ T2317] R13: 00007fe0b83b6038 R14: 00007fe0b83b5fa0 R15: 00007fffee52d888
[  896.009951][ T2317]  </TASK>
[  896.043099][    C0] vxcan0 (unregistered): j1939_tp_rxtimer: 0xffff88804f728400: abort rx timeout. Force session deactivation
[  896.553708][ T2342] netlink: 'syz.5.8464': attribute type 4 has an invalid length.
[  896.566291][ T2348] netlink: 'syz.4.8465': attribute type 21 has an invalid length.
[  896.578537][ T2351] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001
[  896.597262][ T2342] netlink: 17 bytes leftover after parsing attributes in process `syz.5.8464'.
[  896.616388][ T2351] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001
[  896.643139][ T2351] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001
[  896.850423][ T2348] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8465'.
[  896.958569][T18485] IPVS: stop unused estimator thread 0...
[  897.013149][ T2374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8468'.
[  897.024048][ T2361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8468'.
[  897.306120][ T2392] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8476'.
[  897.384838][ T2400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8478'.
[  897.474220][ T2405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8480'.
[  897.542981][ T2415] ip6erspan0: entered promiscuous mode
[  897.646187][ T2421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8484'.
[  898.041574][ T2466] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21
[  898.060771][ T2466] netlink: 'syz.0.8495': attribute type 10 has an invalid length.
[  898.073449][ T2465] netlink: 'syz.4.8496': attribute type 5 has an invalid length.
[  898.112762][ T2469] netlink: 'syz.3.8497': attribute type 75 has an invalid length.
[  898.113377][ T2466] dummy0: entered promiscuous mode
[  898.132346][ T2466] bridge0: port 2(dummy0) entered blocking state
[  898.148726][ T2469] netlink: 'syz.3.8497': attribute type 12 has an invalid length.
[  898.158324][ T2466] bridge0: port 2(dummy0) entered disabled state
[  898.180747][ T2466] dummy0: entered allmulticast mode
[  898.211378][ T2469] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  899.133719][ T2547] netlink: 'syz.0.8514': attribute type 1 has an invalid length.
[  899.173113][ T2547] netlink: 'syz.0.8514': attribute type 1 has an invalid length.
[  899.239004][ T2561] netlink: 'syz.3.8516': attribute type 11 has an invalid length.
[  899.429892][ T2580] xt_socket: unknown flags 0xd0
[  899.508138][ T2586] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  900.302487][ T2633] __nla_validate_parse: 6 callbacks suppressed
[  900.302506][ T2633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8530'.
[  900.328369][ T2635] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  900.334836][ T2635] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  900.366564][ T2642] netlink: 'syz.4.8532': attribute type 7 has an invalid length.
[  900.949299][ T2680] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  901.193301][ T2709] : renamed from hsr0 (while UP)
[  902.095476][ T2744] v: renamed from dummy0 (while UP)
[  902.416128][ T2770] netlink: 'syz.3.8560': attribute type 10 has an invalid length.
[  902.442073][ T2774] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8562'.
[  902.591411][ T2783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8564'.
[  902.715250][ T2793] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8569'.
[  902.878956][ T2800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  902.922812][ T2807] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8574'.
[  902.933308][ T2800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  902.960090][ T2814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8573'.
[  903.005619][ T2800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  903.041739][ T2800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  903.080373][ T2800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  903.116681][ T2800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  903.191176][ T2800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  903.228179][ T2800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  903.566393][ T2860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8584'.
[  903.595560][ T2856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8584'.
[  903.606791][ T2849] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  903.626956][ T2849] syzkaller0: entered promiscuous mode
[  903.645497][ T2849] syzkaller0: entered allmulticast mode
[  903.672521][ T2849] tipc: Resetting bearer <eth:syzkaller0>
[  903.701227][ T2844] tipc: Resetting bearer <eth:syzkaller0>
[  903.758215][ T2844] tipc: Disabling bearer <eth:syzkaller0>
[  903.819743][ T2873] syzkaller0: entered promiscuous mode
[  903.834527][ T2873] syzkaller0: entered allmulticast mode
[  903.854799][ T2864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8586'.
[  903.882495][ T2877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8590'.
[  905.748542][ T2893] veth0_to_bond: entered allmulticast mode
[  905.798942][ T8765] bond3: (slave veth0_to_bond): link status definitely down, disabling slave
[  905.826040][ T8765] bond3: now running without any active interface!
[  905.893379][ T2901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8597'.
[  905.975753][ T2901] bond10: entered promiscuous mode
[  905.993048][ T2901] bond10: entered allmulticast mode
[  905.993961][ T2916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8601'.
[  905.999558][ T2901] 8021q: adding VLAN 0 to HW filter on device bond10
[  906.018312][ T2916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8601'.
[  906.037257][ T2915] dummy0: left allmulticast mode
[  906.042936][ T2915] bridge0: port 2(dummy0) entered disabled state
[  906.071946][ T2915] bridge_slave_0: left allmulticast mode
[  906.079296][ T2915] bridge_slave_0: left promiscuous mode
[  906.085218][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.099668][ T2915] bond0: (slave bridge_slave_1): Releasing backup interface
[  906.125453][ T2915] bond0: (slave bond_slave_0): Releasing backup interface
[  906.151164][ T2915] bond0: (slave bond_slave_1): Releasing backup interface
[  906.216532][ T2915] team0: Port device team_slave_0 removed
[  906.233747][ T2915] team0: Port device team_slave_1 removed
[  906.253974][ T2922] net_ratelimit: 57 callbacks suppressed
[  906.253993][ T2922] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  906.272943][ T2915] team0: Port device geneve0 removed
[  906.286870][ T2918] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  906.332818][ T2925] team0: Mode changed to "activebackup"
[  906.626547][ T2949] netlink: 'syz.1.8610': attribute type 8 has an invalid length.
[  906.652665][ T2952] netem: incorrect gi model size
[  906.661859][ T2952] netem: change failed
[  906.764044][ T2960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8612'.
[  906.837163][ T2960] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8612'.
[  906.921272][ T2968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8615'.
[  907.413867][ T3000] syzkaller0: entered promiscuous mode
[  907.420799][ T3000] syzkaller0: entered allmulticast mode
[  907.429349][ T2998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  907.468081][ T3013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8626'.
[  907.497660][ T3013] openvswitch: netlink: Unknown nsh attribute 0
[  907.503984][ T3013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  907.529338][ T3011] tipc: Resetting bearer <eth:syzkaller0>
[  907.555048][ T3015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  907.664057][ T3011] tipc: Disabling bearer <eth:syzkaller0>
[  907.959356][ T3027] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.8632'.
[  907.993583][ T3027] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8632'.
[  908.025689][ T3027] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8632'.
[  908.409458][ T3076] netlink: 'syz.1.8644': attribute type 15 has an invalid length.
[  908.422548][ T3077] netlink: 'syz.4.8643': attribute type 11 has an invalid length.
[  908.670654][ T3090] netlink: 'syz.0.8647': attribute type 1 has an invalid length.
[  909.274760][ T3139] sctp: [Deprecated]: syz.0.8660 (pid 3139) Use of int in maxseg socket option.
[  909.274760][ T3139] Use struct sctp_assoc_value instead
[  909.614504][ T3158] syzkaller1: entered promiscuous mode
[  909.634974][ T3158] syzkaller1: entered allmulticast mode
[  909.699715][ T3158] syzkaller1: left promiscuous mode
[  909.726748][ T3158] syzkaller1: left allmulticast mode
[  910.044295][ T3178] netlink: 'syz.1.8674': attribute type 1 has an invalid length.
[  910.079678][ T3178] netlink: 'syz.1.8674': attribute type 3 has an invalid length.
[  910.278090][ T3193] netlink: 'syz.0.8679': attribute type 1 has an invalid length.
[  910.512761][ T3211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  910.548727][ T3213] unknown channel width for channel at 909000KHz?
[  910.610507][ T3205] syz.3.8682: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  910.661520][ T3205] CPU: 0 UID: 0 PID: 3205 Comm: syz.3.8682 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) 
[  910.661547][ T3205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  910.661558][ T3205] Call Trace:
[  910.661565][ T3205]  <TASK>
[  910.661574][ T3205]  dump_stack_lvl+0x189/0x250
[  910.661604][ T3205]  ? __pfx_dump_stack_lvl+0x10/0x10
[  910.661626][ T3205]  ? __pfx__printk+0x10/0x10
[  910.661650][ T3205]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  910.661672][ T3205]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  910.661695][ T3205]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  910.661720][ T3205]  warn_alloc+0x214/0x310
[  910.661752][ T3205]  ? __pfx_warn_alloc+0x10/0x10
[  910.661787][ T3205]  ? __get_vm_area_node+0x28f/0x300
[  910.661809][ T3205]  ? nf_tables_newset+0x132b/0x2530
[  910.661837][ T3205]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  910.661885][ T3205]  ? alloc_pages_mpol+0x3cd/0x4a0
[  910.661910][ T3205]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  910.661939][ T3205]  ? rcu_is_watching+0x15/0xb0
[  910.661959][ T3205]  ? nf_tables_newset+0x132b/0x2530
[  910.661982][ T3205]  ? nf_tables_newset+0x132b/0x2530
[  910.662005][ T3205]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  910.662030][ T3205]  ? nf_tables_newset+0x132b/0x2530
[  910.662054][ T3205]  ? nft_table_lookup+0x211/0x230
[  910.662070][ T3205]  ? nft_set_lookup+0x128/0x150
[  910.662088][ T3205]  ? nft_hash_privsize+0x2f/0xf0
[  910.662122][ T3205]  nf_tables_newset+0x132b/0x2530
[  910.662161][ T3205]  ? __pfx_nf_tables_newset+0x10/0x10
[  910.662210][ T3205]  ? __nla_parse+0x40/0x60
[  910.662238][ T3205]  nfnetlink_rcv+0x1132/0x2520
[  910.662292][ T3205]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  910.662330][ T3205]  ? ref_tracker_free+0x63a/0x7d0
[  910.662380][ T3205]  ? __netlink_deliver_tap+0x807/0x850
[  910.662403][ T3205]  ? netlink_deliver_tap+0x2e/0x1b0
[  910.662444][ T3205]  netlink_unicast+0x82c/0x9e0
[  910.662474][ T3205]  ? __pfx_netlink_unicast+0x10/0x10
[  910.662497][ T3205]  ? netlink_sendmsg+0x642/0xb30
[  910.662517][ T3205]  ? skb_put+0x11b/0x210
[  910.662545][ T3205]  netlink_sendmsg+0x805/0xb30
[  910.662577][ T3205]  ? __pfx_netlink_sendmsg+0x10/0x10
[  910.662604][ T3205]  ? aa_sock_msg_perm+0xf1/0x1d0
[  910.662630][ T3205]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  910.662649][ T3205]  ? __pfx_netlink_sendmsg+0x10/0x10
[  910.662672][ T3205]  __sock_sendmsg+0x21c/0x270
[  910.662696][ T3205]  ____sys_sendmsg+0x505/0x830
[  910.662728][ T3205]  ? __pfx_____sys_sendmsg+0x10/0x10
[  910.662763][ T3205]  ? import_iovec+0x74/0xa0
[  910.662785][ T3205]  ___sys_sendmsg+0x21f/0x2a0
[  910.662812][ T3205]  ? __pfx____sys_sendmsg+0x10/0x10
[  910.662877][ T3205]  ? __fget_files+0x2a/0x420
[  910.662900][ T3205]  ? __fget_files+0x3a0/0x420
[  910.662934][ T3205]  __x64_sys_sendmsg+0x19b/0x260
[  910.662962][ T3205]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  910.662998][ T3205]  ? rcu_is_watching+0x15/0xb0
[  910.663022][ T3205]  ? do_syscall_64+0xbe/0x3b0
[  910.663050][ T3205]  do_syscall_64+0xfa/0x3b0
[  910.663070][ T3205]  ? lockdep_hardirqs_on+0x9c/0x150
[  910.663090][ T3205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  910.663117][ T3205]  ? clear_bhb_loop+0x60/0xb0
[  910.663139][ T3205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  910.663158][ T3205] RIP: 0033:0x7fccb298ebe9
[  910.663175][ T3205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  910.663190][ T3205] RSP: 002b:00007fccb0bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  910.663210][ T3205] RAX: ffffffffffffffda RBX: 00007fccb2bb6090 RCX: 00007fccb298ebe9
[  910.663223][ T3205] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  910.663234][ T3205] RBP: 00007fccb2a11e19 R08: 0000000000000000 R09: 0000000000000000
[  910.663245][ T3205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  910.663256][ T3205] R13: 00007fccb2bb6128 R14: 00007fccb2bb6090 R15: 00007ffcf8fce7e8
[  910.663287][ T3205]  </TASK>
[  910.663295][ T3205] Mem-Info:
[  911.082976][ T3205] active_anon:11040 inactive_anon:0 isolated_anon:0
[  911.082976][ T3205]  active_file:1705 inactive_file:40136 isolated_file:0
[  911.082976][ T3205]  unevictable:768 dirty:38 writeback:0
[  911.082976][ T3205]  slab_reclaimable:14027 slab_unreclaimable:168826
[  911.082976][ T3205]  mapped:36728 shmem:3869 pagetables:1150
[  911.082976][ T3205]  sec_pagetables:0 bounce:0
[  911.082976][ T3205]  kernel_misc_reclaimable:0
[  911.082976][ T3205]  free:1228473 free_pcp:12607 free_cma:0
[  911.132488][ T3205] Node 0 active_anon:45060kB inactive_anon:0kB active_file:6820kB inactive_file:160344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147612kB dirty:152kB writeback:0kB shmem:14640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16072kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  911.165175][ T3205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  911.212829][ T3205] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  911.254536][ T3205] lowmem_reserve[]: 0 2497 2499 2499 2499
[  911.260672][ T3205] Node 0 DMA32 free:1009292kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45608kB inactive_anon:0kB active_file:6820kB inactive_file:158784kB unevictable:1536kB writepending:152kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:29836kB local_pcp:15044kB free_cma:0kB
[  911.300875][ T3205] lowmem_reserve[]: 0 0 1 1 1
[  911.305766][ T3205] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  911.342834][ T3205] lowmem_reserve[]: 0 0 0 0 0
[  911.348482][ T3205] Node 1 Normal free:3887716kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20912kB local_pcp:10628kB free_cma:0kB
[  911.393744][ T3205] lowmem_reserve[]: 0 0 0 0 0
[  911.398660][ T3205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  911.419623][ T3205] Node 0 DMA32: 1*4kB (M) 21*8kB (E) 575*16kB (UME) 767*32kB (UME) 93*64kB (UM) 86*128kB (UME) 73*256kB (UM) 41*512kB (UM) 21*1024kB (UME) 6*2048kB (ME) 216*4096kB (UM) = 1009084kB
[  911.445428][ T3205] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  911.465522][ T3205] Node 1 Normal: 193*4kB (UE) 56*8kB (UME) 58*16kB (UME) 94*32kB (UME) 25*64kB (UME) 8*128kB (UME) 4*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3887716kB
[  911.492658][ T3205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  911.522713][ T3205] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  911.536363][ T3205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  911.560555][ T3205] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  911.572675][ T3205] 46057 total pagecache pages
[  911.580342][ T3205] 0 pages in swap cache
[  911.584658][ T3205] Free swap  = 124996kB
[  911.589894][ T3205] Total swap = 124996kB
[  911.594148][ T3205] 2097051 pages RAM
[  911.598657][ T3205] 0 pages HighMem/MovableOnly
[  911.603613][ T3205] 425645 pages reserved
[  911.607982][ T3205] 0 pages cma reserved
[  911.643085][ T3239] netlink: 'syz.0.8692': attribute type 4 has an invalid length.
[  911.672464][ T3239] netlink: 'syz.0.8692': attribute type 4 has an invalid length.
[  912.104133][ T3246] __nla_validate_parse: 11 callbacks suppressed
[  912.104151][ T3246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8695'.
[  912.166117][ T3251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8697'.
[  912.186338][ T3251] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8697'.
[  912.298745][ T3256] netlink: 'syz.3.8699': attribute type 1 has an invalid length.
[  912.443396][ T3256] netlink: 'syz.3.8699': attribute type 21 has an invalid length.
[  912.504717][ T3269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8699'.
[  912.636038][ T3258] 8021q: adding VLAN 0 to HW filter on device bond5
[  912.655958][ T3258] bond4: (slave bond5): making interface the new active one
[  912.677248][ T3258] bond4: (slave bond5): Enslaving as an active interface with an up link
[  912.691923][ T3256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8699'.
[  912.745946][ T3269] bond4: entered promiscuous mode
[  912.771594][ T3269] bond5: entered promiscuous mode
[  912.792357][ T3269] bond4: entered allmulticast mode
[  912.805829][ T3269] bond5: entered allmulticast mode
[  912.926469][ T3281] sctp: [Deprecated]: syz.1.8704 (pid 3281) Use of int in maxseg socket option.
[  912.926469][ T3281] Use struct sctp_assoc_value instead
[  913.401624][ T3311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8712'.
[  913.472102][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.576811][ T3311] bridge_slave_1 (unregistering): left allmulticast mode
[  913.587153][ T3311] bridge_slave_1 (unregistering): left promiscuous mode
[  913.595669][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.635222][ T3326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8717'.
[  913.644779][ T3326] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  913.668749][ T3326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8717'.
[  914.195215][ T3363] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8727'.
[  914.254414][ T3363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8727'.
[  914.974821][ T3424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  915.071034][ T3433] bond2: entered promiscuous mode
[  915.076228][ T3433] bond2: entered allmulticast mode
[  915.082335][ T3433] 8021q: adding VLAN 0 to HW filter on device bond2
[  915.315478][ T3449] netlink: 'syz.1.8751': attribute type 1 has an invalid length.
[  916.010443][ T3480] openvswitch: netlink: IP tunnel dst address not specified
[  916.207567][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  916.368606][ T3500] veth0_to_bond: entered allmulticast mode
[  916.578581][ T3513] bridge_slave_1 (unregistering): left allmulticast mode
[  916.585828][ T3513] bridge_slave_1 (unregistering): left promiscuous mode
[  916.594099][ T3513] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.026502][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  917.120127][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  917.166515][ T3540] __nla_validate_parse: 15 callbacks suppressed
[  917.166533][ T3540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8779'.
[  917.195330][ T3540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8779'.
[  917.319807][ T3550] netlink: 'syz.0.8782': attribute type 1 has an invalid length.
[  917.412156][ T3560] netlink: 'syz.3.8785': attribute type 10 has an invalid length.
[  918.063520][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8799'.
[  918.087314][ T3604] openvswitch: netlink: nsh attr 8196 is out of range max 3
[  918.099909][ T3604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  918.117469][ T3604] tc_dump_action: action bad kind
[  918.374058][ T3626] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8806'.
[  918.704591][ T3646] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.8812'.
[  919.032174][ T3661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8816'.
[  919.210190][ T3671] netlink: 'syz.3.8818': attribute type 11 has an invalid length.
[  919.224311][ T3671] netlink: 'syz.3.8818': attribute type 11 has an invalid length.
[  919.251188][ T3671] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8818'.
[  919.532111][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8823'.
[  919.590616][ T3693] team0: Device gre2 is up. Set it down before adding it as a team port
[  919.609388][T25221] skbuff: skb_under_panic: text:ffffffff8a109c27 len:1121455804 put:1121455668 head:ffff88804954f000 data:ffff8880067ce28c tail:0x148 end:0x6c0 dev:team0
[  919.609721][ T3703] netlink: 'syz.4.8821': attribute type 4 has an invalid length.
[  919.636168][T25221] ------------[ cut here ]------------
[  919.642821][T25221] kernel BUG at net/core/skbuff.c:211!
[  919.676769][T25221] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  919.683056][T25221] CPU: 1 UID: 0 PID: 25221 Comm: kworker/1:11 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) 
[  919.687017][ T3704] netlink: 'syz.4.8821': attribute type 4 has an invalid length.
[  919.694939][T25221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  919.694955][T25221] Workqueue: mld mld_ifc_work
[  919.694980][T25221] RIP: 0010:skb_panic+0x157/0x160
[  919.695005][T25221] Code: c7 c0 d8 93 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 0d f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90
[  919.695021][T25221] RSP: 0018:ffffc9000453f458 EFLAGS: 00010282
[  919.695035][T25221] RAX: 0000000000000097 RBX: dffffc0000000000 RCX: f95468dddf10d700
[  919.695046][T25221] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  919.695056][T25221] RBP: 00000000000006c0 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6
[  919.695068][T25221] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: ffff8880243bc150
[  919.695080][T25221] R13: ffff88804954f000 R14: ffff8880067ce28c R15: 0000000000000148
[  919.788157][T25221] FS:  0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000
[  919.797067][T25221] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  919.803629][T25221] CR2: 0000555568def808 CR3: 000000006ad90000 CR4: 00000000003526f0
[  919.811583][T25221] Call Trace:
[  919.814863][T25221]  <TASK>
[  919.817800][T25221]  ? ipgre_header+0x67/0x290
[  919.822397][T25221]  ? ipgre_header+0x67/0x290
[  919.826981][T25221]  skb_push+0xc3/0xe0
[  919.830950][T25221]  ipgre_header+0x67/0x290
[  919.835346][T25221]  ? __pfx_ipgre_header+0x10/0x10
[  919.840350][T25221]  neigh_connected_output+0x286/0x460
[  919.845709][T25221]  ip6_finish_output2+0x11fe/0x16a0
[  919.850914][T25221]  ? ip6_finish_output2+0x701/0x16a0
[  919.856187][T25221]  ? ip6_mtu+0x7d/0x3f0
[  919.860323][T25221]  ? __pfx_ip6_finish_output2+0x10/0x10
[  919.865852][T25221]  ? ip6_mtu+0x7d/0x3f0
[  919.870004][T25221]  ? ip6_mtu+0x321/0x3f0
[  919.874252][T25221]  ? ip6_finish_output+0x2ef/0x4e0
[  919.879346][T25221]  NF_HOOK+0x9e/0x380
[  919.883311][T25221]  ? NF_HOOK+0x101/0x380
[  919.887534][T25221]  ? __pfx_NF_HOOK+0x10/0x10
[  919.892105][T25221]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  919.897945][T25221]  ? do_raw_spin_unlock+0x122/0x240
[  919.903149][T25221]  ? icmp6_dst_alloc+0x3a5/0x420
[  919.908074][T25221]  ? icmp6_dst_alloc+0x3a5/0x420
[  919.913000][T25221]  mld_sendpack+0x800/0xd80
[  919.917496][T25221]  ? mld_sendpack+0x1de/0xd80
[  919.922167][T25221]  ? __pfx_mld_sendpack+0x10/0x10
[  919.927271][T25221]  mld_ifc_work+0x83e/0xd60
[  919.931769][T25221]  ? process_scheduled_works+0x9ef/0x17b0
[  919.937473][T25221]  process_scheduled_works+0xade/0x17b0
[  919.943021][T25221]  ? __pfx_process_scheduled_works+0x10/0x10
[  919.948989][T25221]  worker_thread+0x8a0/0xda0
[  919.953578][T25221]  kthread+0x70e/0x8a0
[  919.957628][T25221]  ? __pfx_worker_thread+0x10/0x10
[  919.962743][T25221]  ? __pfx_kthread+0x10/0x10
[  919.967334][T25221]  ? _raw_spin_unlock_irq+0x23/0x50
[  919.972529][T25221]  ? lockdep_hardirqs_on+0x9c/0x150
[  919.977727][T25221]  ? __pfx_kthread+0x10/0x10
[  919.982343][T25221]  ret_from_fork+0x3fc/0x770
[  919.986923][T25221]  ? __pfx_ret_from_fork+0x10/0x10
[  919.992017][T25221]  ? __switch_to_asm+0x39/0x70
[  919.996777][T25221]  ? __switch_to_asm+0x33/0x70
[  920.001522][T25221]  ? __pfx_kthread+0x10/0x10
[  920.006096][T25221]  ret_from_fork_asm+0x1a/0x30
[  920.010843][T25221]  </TASK>
[  920.013848][T25221] Modules linked in:
[  920.019496][T25221] ---[ end trace 0000000000000000 ]---
[  920.025400][T25221] RIP: 0010:skb_panic+0x157/0x160
[  920.030943][T25221] Code: c7 c0 d8 93 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 0d f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90
[  920.052083][T25221] RSP: 0018:ffffc9000453f458 EFLAGS: 00010282
[  920.058490][T25221] RAX: 0000000000000097 RBX: dffffc0000000000 RCX: f95468dddf10d700
[  920.066488][T25221] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  920.074783][T25221] RBP: 00000000000006c0 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6
[  920.083147][T25221] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: ffff8880243bc150
[  920.091783][T25221] R13: ffff88804954f000 R14: ffff8880067ce28c R15: 0000000000000148
[  920.100048][T25221] FS:  0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000
[  920.109224][T25221] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  920.115791][T25221] CR2: 0000555568def808 CR3: 00000000458f2000 CR4: 00000000003526f0
[  920.123785][T25221] Kernel panic - not syncing: Fatal exception
[  920.130083][T25221] Kernel Offset: disabled
[  920.134477][T25221] Rebooting in 86400 seconds..