last executing test programs:

7.527118908s ago: executing program 1 (id=3192):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000015c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4)
ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000000)) (async)
ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000000))
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="02010909070000002bbd5000fdffffff050007002aa000000a004e230000005efe800000000000000000000000000041d40d00000000000085cb72acec7f8258598c001c6bf5c7aefbaee63219c9146dbe254a5613a0ca432db030db7ddf33918062814caa3d333490417abc648f934ae225d4b22c07acc9a84e84e36efd6fc9cc26a85cc12446e66a2711d2feb86fd74528f171c01a77d19fab97891dd9cca1d86ec827319cc290df9d5413934e42e8adcfd4348de7ba2df7e1a16083d6098a7073e141ee57fd000000001f6fa75e9387b9e7bf76cedb897942edb74c086c"], 0x38}}, 0x24000802) (async)
sendmsg$key(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="02010909070000002bbd5000fdffffff050007002aa000000a004e230000005efe800000000000000000000000000041d40d00000000000085cb72acec7f8258598c001c6bf5c7aefbaee63219c9146dbe254a5613a0ca432db030db7ddf33918062814caa3d333490417abc648f934ae225d4b22c07acc9a84e84e36efd6fc9cc26a85cc12446e66a2711d2feb86fd74528f171c01a77d19fab97891dd9cca1d86ec827319cc290df9d5413934e42e8adcfd4348de7ba2df7e1a16083d6098a7073e141ee57fd000000001f6fa75e9387b9e7bf76cedb897942edb74c086c"], 0x38}}, 0x24000802)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)}, 0x20)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x15, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001280)='GPL\x00', 0xb, 0x2b, &(0x7f00000012c0)=""/43, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001340)={0x1, 0x9, 0xfffffffb, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001380)=[0x1, r0, r6], &(0x7f00000013c0)=[{0x2, 0x2, 0xc, 0xb}, {0x5, 0x1, 0x1, 0x9}, {0x5, 0x1, 0x7, 0x8}, {0x1, 0x1, 0x7}], 0x10, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{r7}, &(0x7f0000001180), &(0x7f0000001540)=r8}, 0x20)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r10, @ANYBLOB="eda20a00", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r10, @ANYBLOB="eda20a00", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
bind$alg(r11, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
accept4(r11, 0x0, 0x0, 0x0) (async)
r12 = accept4(r11, 0x0, 0x0, 0x0)
recvfrom$packet(r12, 0x0, 0x0, 0x40000000, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d00000000000500260000000000050025"], 0x64}}, 0x0)

7.156487159s ago: executing program 1 (id=3195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4002000", @ANYRES16=r1, @ANYBLOB="040025bd7000fcdbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b00f9ffffff0600110003000000080001007063690011000200303030303a30303a31302e300000000008000b00070000000600110002000000080001007063690011000200303030303a30303a31302e300000000008000b00ff0100000600110005000000080001007063690011000200303030303a30303a31302e300000000008000b0001fcffff0600110006000000"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4850)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x4, 0x1c}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

7.052075306s ago: executing program 1 (id=3196):
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000020000000000071124300000400009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0075f7990a00000000000000000000000000000084b7ced7094277a772afed4161df6b3652a9d6a8fcccfd20077b790f727d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))

5.538073648s ago: executing program 1 (id=3205):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close(0x3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000010101010000000000000000020000040c0019800800010008000000100001800c000280050001003a000000"], 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="00cf87dc6d8b947ab1a56284d0fc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x50)

5.078698877s ago: executing program 1 (id=3208):
r0 = socket(0x27, 0xa, 0xfffffffc)
write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00)

4.887962699s ago: executing program 1 (id=3211):
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
socket$inet6(0xa, 0x3, 0x2f)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r1 = socket(0xa, 0x3, 0x4)
read(r1, &(0x7f0000000000)=""/6, 0x6)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x1)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x40)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40040)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

3.247281754s ago: executing program 2 (id=3222):
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x8000)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680001002dbd7000fcdbdf25020002000000000014ff02000200000001000000020000000400000008000100010000000600070001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4004)

2.839985473s ago: executing program 2 (id=3227):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000000000000300000d"], &(0x7f0000000f40)=""/4085, 0x4a, 0xff5, 0x6, 0x32e}, 0x28)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
r2 = socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket(0x22, 0x2, 0x23)
bind$inet6(r5, 0x0, 0x0)
sendmsg$FOU_CMD_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x34}}, 0x48080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f00000000c0), 0x10) (async)
connect$can_bcm(r6, &(0x7f00000000c0), 0x10)
unshare(0x20000400) (async)
unshare(0x20000400)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
getsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002c00)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async)
sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002c00)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800)
sendmsg(r6, &(0x7f0000000300)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7fffffff}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)="b497f5952180643763c6aaed020e985d207f5954abcdf83cb102d2f7dc93c05ab1613c518cf4752fc61047541e6d6c28b5742a11f530bba4fbb391eac5bd245d60691491cd96f9abb0f9ff42e86e6cf3323e7c26c13b8efafb53c05985408ed18b248448b3f0938c4fae5497ef9b1977c07d6a2f9c5698ec31219b3ae90a618a4ae330f99c424c5d31d23966374bcf573a1d4a", 0x93}, {&(0x7f00000001c0)="e3f3b9fa92161333829c52204726a56e51303f590a3c26e42eb5f6723dc55475b3b33edf02ddb2b8be9299bd8201551b5e38715ca8fd2ecace3ab672aaa655e0d2184cdffc8af421b14accbf5de6e8e64d0f785757688235ea5544ab82dbd13649228ae0577b30de6eda3f", 0x6b}], 0x2, &(0x7f0000000580)=[{0xe8, 0x110, 0xb4d09bb, "a2c007506a2572bb068df4841e38fa18ba3f0161e5a38a5159825035c6d6621a3ac4112e1b1235e9848df6a62a9daf80c37ce16f972e82908ee66a3756204a694e62cd30b3d1c26b145e78358ddd876328033a1d11e2300943563671954361fc8ee200ece542daf973e2770dd81061c76175a63978c194fa836928ae50622c35f13e550a2949f0490b9fa1c1423e64675872c816b990afe962c37260668fa2fb4b86d666eb40c190bf4221bbb0d35da5fad50578cd1d6537ac8337ca7e5464faf457c49d05bff2f4fc3de4768b1f9f8c3c6f72a69c"}, {0x60, 0x0, 0x2, "6823598a271b327a34ef38916161f95262b7f75a7722b505fbfdccae397032a86cf9892da34fe56556d3c47f5061693a00a6b3cd6819757850490ea1bc8beb96bcff7e589bb7bec7b87473abfb85be"}, {0xe0, 0x84, 0x3, "2c4de4572079bc0e444c21d41fbb77e9239d34c3cb0bb740fe70e2326816976d58176d1093ad5de1b8d4d1325ac2e402001fe9f7cc46a49d4d1bd7761bac53224d924fe4368e848bd856a561dd747526e549264c0bb1cc41c7bed44fb5da42f08bf30e0eb5747ce08d1aae5610b5e36f42e8030031f1b42743fe766af33aee1627afdd3a327051c8d5972c9e64ff3f0072958d9855c93895f3919a11fb37922b5a3489b4cec63cea3c1bda559a55822617dea342cd22ac978ec8c8db585b8c8470161cc016576c8f27"}, {0x98, 0x10c, 0x9, "6ccb09ef2b6d4fa58bdcc0420d54018e4e8b17dbe5a6fb94a080665575da3e30530657aaf4a2e865a5ab30161e20f7a99551ca69cb9ed8ea03b69ac9dc455d2c523260c032ee3de2b3d753247cc7914f7f1d90e0590105c04d57dad29efa4d9b8c498dc61821b936b6d6e4143e855155b0cd2e61df625e49f2885195d8af44387a81e50e"}, {0x20, 0x103, 0x3, "50817d6d561a1aa494ee872178"}, {0xb8, 0x104, 0x3, "e4c837bf3941bf27c5795a994493ed430a44ea5cadce3462f89ebcb64a9438b33d7bd0a45ff9f9c3699a43defb82fe29d3499bc45aeb809dcbfcf5cbf2322e955d043294e5493fe5ea893e09d2701df81d652eb31c19eb4bc791d1cd9474fd66652c833a2b9098418b107a03c03003e48232ecab4bceb43e4b38781a6d2aa4175419a23028146621e49a6e00df56c0cd4e2d0f80d825650657b2580b8fa32c21c2f9500cb9"}, {0xd0, 0x108, 0xd, "1be131993caaf74047e2b1e95890860ccf6ed9c3d02b1cad9c092777e049c5967955ee759d9d88b1304cdb6f17f268931bf25ada0d1bc226939c58f43ef453952a8ee6f9074a28a042144c882496198a86c7569eb8e59e6fbc14bb49491e907ab5fb92821d44bf46af7026e0e9313b5ee1ba060900f081f44883f344cf201109e3ddae18d420df0c8fe74f8fc7c3c5e7a899509e9ddc0b91d90bab406f13bcaf0b5b434ac9b982cdee8a70fa869761f694cf22ee0a3013faa5cc03"}, {0x80, 0x3a, 0x7, "900ad618a9d0ccf9c6f7751d44e7e2ddfa0f72d5ed46e1a915e1332f6f3d86ab3a7e0087dc3b228ced4e96160967dc64aad61c73736e62fb33542d2f067b6c4ec470762d5f63a574063a0961a7bef1db4afef9cf966dc9c43d3782a16fef401846055addef107f22d4ecad"}], 0x4e8}, 0x1)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f64004fa81182e6eae27df59655f4acab134d99a8bb6b9f7d6a7f0a652b6c6cd366bb5562bef203e119f2a9120a5b524adb8ee0927a0c463d7f29c5d441bf9c29d3f1c6133f911765f2493ed24571da986ec6cd145eca1e3e5d46b458f55720ab8bfa49914be4e38fad34699c2c022421fe730f012", 0xba}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000c00)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192907f44d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426208000000000000009baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000640)="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", 0x13a}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) (async)
sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067977d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f64004fa81182e6eae27df59655f4acab134d99a8bb6b9f7d6a7f0a652b6c6cd366bb5562bef203e119f2a9120a5b524adb8ee0927a0c463d7f29c5d441bf9c29d3f1c6133f911765f2493ed24571da986ec6cd145eca1e3e5d46b458f55720ab8bfa49914be4e38fad34699c2c022421fe730f012", 0xba}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000c00)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192907f44d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426208000000000000009baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000640)="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", 0x13a}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)

2.833374994s ago: executing program 3 (id=3228):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0xfffffffd}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
splice(r2, 0x0, r3, &(0x7f00000002c0), 0x6, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'})

2.688076427s ago: executing program 2 (id=3230):
r0 = socket$inet6(0xa, 0x3, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/211, 0xd3}, 0xa}], 0x1, 0x2100, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000fddbdf2500000000", @ANYBLOB="81"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20004000)
listen(r0, 0x7)

2.467950421s ago: executing program 2 (id=3233):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r2, 0x28, 0x0, 0xfffffffffffffffc, &(0x7f0000000040))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
r3 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) (async)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)

2.361267186s ago: executing program 3 (id=3235):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6, 0x0, 0x18, 0x0, 0x0, 0x500}, 0x9c)
sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="4998128bde3d91a9cfec7998bb79def48fd40d2fddd7d4a21f2c4c784b45e0e2749e5a01782f987c29b02619c2492b1013dd8e58898e048df25bbdbdc1122873604d72061a2752788f32de5f134a4ad75adaf58c15c44d36865e68b27743312f", 0x60}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000180)="d994d3dd8244a15ee7ea5b6c01ffb48177038b73e07dcb3e2df2b986bb4c31601ed9c3805213f01070e5a91a0557e416c251969e02ccb7cfa8fab016f2a94a0396d1aeae0abcc341ee403b7aac8fe030ef19641b17d64a986f19482806be3b4f07cb0f1532ea5494f3d0100bcdb5968cec2e126384d8941fda52ea847eae63030f5f5cc4a210f9eedb77ee8f4efb0363bd7388a78f0a70509c9f0ca03aad031e1ecbd40a17fab7559460", 0xaa}], 0x3, 0x0, 0x0, 0xc1}, 0x800)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x118, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0xdc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfc800000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x4c0095920c3b540a}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfac}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x118}, 0x1, 0x0, 0x0, 0x24002090}, 0x80)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500000d00000004000000000000000010000000020000000d0000000500000008000000040000000c000000040000000000"], 0x0, 0x4e, 0x0, 0x1, 0x7}, 0x28)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4)
sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, 0x0, 0x200040d0}, 0x4004)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8000)

2.14978628s ago: executing program 3 (id=3238):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c00046252f59a0002000000ac14140f000000ffffffff000000000000000099a801007564703a73797a320000000000000000000000000000000000b38b2eac758dbd20b74b10da3cf81c193e84746e3a"], 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)={0x394, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e3a0e48db47103c26db63b6f6b3322da68ae372290396e5a0819"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "671364ee8003e2e4fe0a33a2fa782d0ab25dc8452f2f73f2e9cf3e2379"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x21c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xea, 0x3, "52d94b99b22725873906f36815ebf86b80c9ccad2bbdb08ccfc1034347eec2907860c9aaf19cb01f91d5bb68e285e49968f606cd4ae960fb97278963d0718370128b83b82bd2cf267ac95f0941abb7ea1336c7c5c1fda64739f20fa95dfcc209ebe40d77ea4e5d7aa072b7759c3ba653317a7b962de159446c769d13c9d41d2dd30874ee0920be41fba0508a261f258662dd88e9de908cfd8ac75923f818d11a0ce9472da47485d7d544bada2cb9f69cf9376cb73a8e6107a3386bd8732967ec9197a36173373697512bff3372a86d0d2fa10147c0e286e186795b231eeec24adea1bcc35dc2"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "2339ac89bc7ffb2c51678713c985bf357d361bee"}}, @TIPC_NLA_NODE_ID={0x7b, 0x3, "4ad31f05b10caa2d4788bd18d911cd2738bcb4475ad86c881ff4635bfc40af8af8009710b219edb5cc5d18237643adbe024ba2efb6177e6df9ff6aad695ccc276746d5e1cc4a5a80c8edbccfa02b4a292b6d8d43ccc272c8af9a9c5be578367262dff043dc8bc062514e0a7da6d7197462dc5ac90098cd"}, @TIPC_NLA_NODE_ID={0x60, 0x3, "3367c5d1fd60b4e52a9b27ca91abe29089e458705b71e10fd770facebd9a029794c1712a45a2dc56334ddc495d8a399f9b799092bf16df980fa78eabde9d00ac0a6578c837bf4f7858b71c5e955a1017afa6a2cb730567e2a9cbfe47"}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x1847c4458fb3c279}, 0x42)
bind$bt_l2cap(r3, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x95}, 0x0, 0x2}, 0xe)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x2}]}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000cc0)={0x210, 0x13, 0x100, 0x70bd28, 0x25dfdbfe, {0x2b, 0x2, 0x52, 0x0, {0x4e20, 0x4e21, [0x2, 0x4, 0x8, 0x4], [0x3590af08, 0x7fffffff, 0xfffffffa, 0x100], 0x0, [0x9, 0x2]}, 0x40, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x52, 0x1, "e4323685d0266027bd2effed5a613125689badb24e49d7b460b05f22cf64b28dc7c1833196825cff3edbfa6439ee00d9183d38c156d57488fd1519034934b31b3f62d9092774cbe2064ed2ee664a"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "d3836330d6f0a2431cfe2c8707302ddccf87da9aec04b45c9ec0e81b0667c202b8e5aaa8"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "bd02566724fca0dcf156926097d0038ffae5d77b063852d446d8f213c9687e2a31f32495ba34eae285a27688417cbad0424557cc721cc9e08fd8e47ec8c3f053b594a310d0e7ac73238f73092ba1b4d0e81031c5f701cb7dfcc0fdca4404fa08f611418b7735172c6080c4edeb40e566307b9a4e4de8f5d84308c820fd06cb77d5522054e896db3e6f3fc814faf6ec0dfb54cd512b35ef7d8fbdf3e59645c33c2e7b80e8639b6e1de902ff89dbcdaf123175008f701dcdf168d436b03ed9547dcb8b9a"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "4ca17178f65e13354ce9ce2c311f64d1fe4acb20cf4f1a30b4bfbd501bd0b514ed142e60fdb5fd0d03f702feea76d21e6e5b5e2efafe7b171b68e3b0208cf184452142dabbcfe25bccaae5130299a088fcbc0a29ce8f5207529cf4d99b9263ecf57f95df3d6ee50cdbbe23dc582ff4438ccc0acddf6cbe058ffb70"}]}, 0x210}, 0x1, 0x0, 0x0, 0x4881}, 0x4002000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.623871255s ago: executing program 0 (id=3240):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
r1 = socket$inet(0x2, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0xf4, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_VF_PORTS={0xd4, 0x18, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "28db3a45c31564a539f0d4859caecdac"}, @IFLA_PORT_PROFILE={0x8, 0x2, '{%{\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "58e8b1a42d12ad19e374fcd2f09381be"}, @IFLA_PORT_VF={0x8, 0x1, 0x200}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x9, 0x2, 'syz0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d57b03b820bb67e3e6adc4de591c227c"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4025eec9f92b7d827f91b7c64e035c2d"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "acc8cb23f88cf7acca3d74e143b78f32"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_PROFILE={0x9, 0x2, 'syz0\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8bf7e35d6bfaae555b5f86df1ee7a63a"}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0xf4, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_VF_PORTS={0xd4, 0x18, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "28db3a45c31564a539f0d4859caecdac"}, @IFLA_PORT_PROFILE={0x8, 0x2, '{%{\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "58e8b1a42d12ad19e374fcd2f09381be"}, @IFLA_PORT_VF={0x8, 0x1, 0x200}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x9, 0x2, 'syz0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d57b03b820bb67e3e6adc4de591c227c"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4025eec9f92b7d827f91b7c64e035c2d"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "acc8cb23f88cf7acca3d74e143b78f32"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_PROFILE={0x9, 0x2, 'syz0\x00'}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8bf7e35d6bfaae555b5f86df1ee7a63a"}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@delqdisc={0x34, 0x26, 0x1, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r7=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r8, 0x0, 0x20, &(0x7f00000003c0)="170000000000020000ffbe8c", 0xc) (async)
setsockopt$inet_buf(r8, 0x0, 0x20, &(0x7f00000003c0)="170000000000020000ffbe8c", 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0)

1.415639155s ago: executing program 3 (id=3242):
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="15cdf0000085890000000000000003000000", 0x12)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x1000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, &(0x7f0000000040))
r8 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x50, &(0x7f0000000040), 0x4)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x64, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '/.]-'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '\xd4\xb4\xc8\xf6'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '!'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '*'}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '/dev/net/tun\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xe1234f9ecd34dc68}, 0x14)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000000380)=ANY=[], 0x7)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/pid_for_children\x00')
sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000208000225bd7000fedbdf2508004400", @ANYRES64=r3, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x24044851)

1.344928991s ago: executing program 4 (id=3243):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f0000000000)=0x4000001, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x5c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffc00}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd91e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={r8, 0x7, 0x6, [0x400, 0x5, 0x5, 0xaf, 0x8, 0xf]}, 0x14)
r9 = accept(r6, &(0x7f00000003c0)=@ax25={{0x3, @default}, [@null, @null, @netrom, @remote, @null, @bcast, @rose, @rose]}, 0x0)
setsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000140), 0x4)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00')
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x9f, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0x8}, {0x6, 0x60, 0x6}]})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)

1.21766421s ago: executing program 2 (id=3244):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getpeername$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000180)=0x6e)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xca)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="b2b7fea4be359840714baf75cf59d89821a3e11d27e4d58ae294118e55792b07e6287c309bbecc0416b06e6e6c1da0432a52c1e23738da9a5ddc3395", @ANYBLOB="441543382bee078c362f0945dccd1a06b9a0514c67ed3584e61148ab539fe28aa83c8299e8673735ac8550fc0241538206463acf93b42c7220040df1a748d3711e5a240e73cf7a920c7bca8c93f6e2c3f9b4fdc3de0f1e34bd90fcb3cc62d6cae941db96d9cc40a70f358c04633f46436b37b9bae4b891a3aaaa3055d157bbcbd3206550457701fc7db233ec68b3a8ff58c1b88595678ad87294a009946a92208f34f3c92f1206acac7a703adc3aec9eda04e78a34f82be08d5de132505ca54b6bce348171787d9d664e7c5c671983be5fb51d392be834cb941be94796400f0812b1f0", @ANYBLOB="04962d6e3e0db17107bed4b3a22dab0c5942626161b1810a882d755b679ae682b33ca178ef50fa96e3445f50dc96d979973b715c769759909c6d3793a08f", @ANYRES64=0x0], 0x50)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000004580)=ANY=[@ANYBLOB="4c25000036007bc32dbd7000fddbdf2503"], 0x254c}}, 0x4000)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000480)="330320000c00140000007ef500005f530c0900000000000000f786dd3baa4b1f0f858c4632f47042195e6b", 0x2b, 0x40008c1, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x9, 0x6, @broadcast}, 0x14)
ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r1})
socket(0x2, 0x80805, 0x0)

1.163980936s ago: executing program 0 (id=3245):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x1c, 0x3c, 0x301, 0x70fd24, 0xfffffffc, {0x8}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0)

1.090308231s ago: executing program 0 (id=3246):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async)
socketpair(0x8, 0x4, 0x7, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r6}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0)

915.15885ms ago: executing program 4 (id=3247):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
accept$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000810)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'veth0_to_team\x00'}}, 0x1e)
sendmsg$kcm(r2, &(0x7f0000002800)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x7a2a43e7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)="512904e035c8793ef33c696f28a41eeaf534cf00bb76c739b2502706d8e95814919dc037f83ae1b4e9be4d45e6c688b378e40d895246957ee5bc590f2bf31433bdaa8aaa39abb66c7c55f0c57d3b5c65f279da635346e56c8872b8b119e0a2d1ae7fdc717a8ec7eac84568be69472b4f98b676", 0x73}, {&(0x7f0000000400)="7d3cd40a318eea957c0fb70a172d2ae84bf4b3715cbaa7d6871192176a868f9c281bc142a0d49441622ece955c5e4d6908b61502843a4bec24823ea2560d4398dc2c08d3bad9e7a5c3fe1c61a07ceb56ebbe945356ae2eb54a8746b0bdd3ee42f198d4a6597048e5af9b8a2c254cb312", 0x70}, {&(0x7f0000000480)="dcfdb23d2d56f54a60", 0x9}, {&(0x7f00000004c0)="68f943b5289ec1fa982641af871faec6e0ba362f60d85a8334d0fc3c812f03f8bf128ecdb78578b037ec48f29fc08ca12c97bc7eb9e0bb76f096b1e456d4d015a056f8e54e5fc3a556ee0f76261aed92eef5087f83c62334e2643a374dd06ca11da51b744d7e8373a303a77322612cb6e28de5a701de7b685ccd63a183e912acee031df37e7cdbd71addae9e10a1bda49defe088bfdf664d1183551c9557744eba0289b450a8b2e1fafca7860df7a78b59504ed59eb73ee3d300c8214affdc907da8591d2553efd3b420589d73efb13b35f52b6127d2a29c9cdc4b7a80c7c8cc3c2e0948ca0df7febe0776", 0xeb}], 0x4, &(0x7f0000000600)=[{0xa8, 0x1, 0x40, "a2d96924e5db6f5e6202f9acf96b2a3bab966d3ab1dccb319f23392d58b22f337f6ff01dfc377496b988f08e9e0a43b3cb8cad9be0ea02803a8eec35517c57940878490dfcb7dfad0929ae9627a3d5c05b4d96e2dfde86a3d6c47967ddf7ecc19ddafd9020d42be3a6cf3ad9e879a356b5643b2e05351a5b9857ddbda728928df8dc42221ca27d1c3f36ce08b764c1705f0162bae14c"}, {0x1010, 0x6, 0x4, "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"}, {0x38, 0x1, 0x7fff, "8e07814a050b256b0b681503702dfae37b1fbda5bb0cacc144c9b62803fbc1861f"}, {0x80, 0x117, 0x7, "fcda5a548dcc32d849df827d09d311b4b606d6d9232ff0aef9ebec6b4e6c396ed4485e28f6482eaf490da6a747c5ee17941963e2a47e9a6fa7a98fd09b3c3863f05fbe08ef796abc2e83d75e9d47a1e78ddac08f6caffe747bf524663fcba778a8a63b4e828f4d663a82718e5769"}, {0x1010, 0x10e, 0x5, "b8b9311848e72621143f18cd7fa536f5f1fdda1036dc161918b7107787cc9eaaed14c235c3707e2ccc723aea50fcdd97884ce87c2ad3986ca5be820570188c458a10bdb83113d01f4457fd3ded7f0d10c7e18afb6ad35e1d6ab39cbeabcedfd3db1f0cfc215edcb1058d85095f708aafed15983f2ededa28e819599178835f4bd0c9000825562ac968aea8dc1f658466334fae3117e519478a23f8e9e34b3c9afc9aadedf553c674bd180db987e289922356a78d9bf90b98e39a109ff4360839fc15d17aac745ef959a3a42f542af447c6cc7318331ead6950bbdc0fb50b88bed203f2d9715b3ef8cc2eb1562325553a4ac462006b8964a0f16c0e0bc46b5fccd902fc94d59ff947c45f1469ac77588375c106496dbd940df318cd9344734cee4cb9ba58aaaff7b3394bf8c36496e1b099ee9ba27fe227597c51bd578feb226096129a0ebb9b03562fed130237d33b50ca2d5714c0999f9c56fd04e95bfd0b53c56102820ba9f09336b44ccdbe1a68a32262bf671a45b161cca340306f119b6a63a17bbd91453dea84301ea5e018b6b96110270a83028d732cda36a074571e0f9b65ccadc691071507b7efa78c891003f15eff7b35f8889d59a7c62e488e64d3982f7b1398040e0e091194f41b14f4adf409c293be752a86fd54642a4ee3ef3effa656a226178caa44aa1069dbe8e3d29d5480fbad8210f5ffa308d58514d44e263730b16ca5f739e94f950454f31ba9da80a94459c4b68d612742b9e846e6ff2c0591a185a621846cb120bd0cae307a72241857a04c96858dfadb6573630b5da6bd54db6e265acf00b79f3fe7dc515ce208a0f2772f458765224307a0042ef409fc46a0fbe6bab3db6eca838f92f2fd519f71385f21c2094b472cd49a5dc456b8e59783d899727ed3078d902c4ca923b74b1da6912ab1e2a907368ebd6d5e41ca1ec9581e5422d2ca291724208167e6f02560368125af72c9a3769b756c5cec23fe5a21da12aa8d2adeb0269fd23d51e9306ea9f2722df62763a20d777b5fc577f511e8eae93e9335a530848fd349228eadd76d87405e17cd3c94f3b41883e06c4a42754e73f7ce0d0d5d8fb80ea6f8a5cec4ccaa773ddbd3faef8a3b5c2c17bfabfa56b8b7bd0f30055697e4dc8dadcc9f1dc5bf330f714049c0d6c8956c027d64fd89b3de4563b33f51ff8ac89e552209bec064d2c74c3b0ec363ab46a92b5fdf9c7691707709e6798bf07ef887a3b60f45b45d8ff4aecba8020ff7db813fb60bf81ce856d4fc54430b906a7c0e5d4454871666fff3efcf905e1c7b4fad3f355259d9419481e1cfbc0a6e61f9bd286e223289f2bdf078cfcf1373222bd42d47f2a86bdf71b9e626167134b5de107f4ee26675678c7476306b0e1f383a3da0f364ee00ee2f5db227450882252e35c0d59e0094ea775c6a6d6b46a4dcaee2e4885b5b9eff8f5666cebde3217cc51b743f6cc6786ed6105075d43ba51e1ce23f2821e25cd1b98647ec68ee0b9f300a2120823fb9cbe33ebb64952fa47ad31b8d53234144dc4cdd541c50b39cbeac670a57fe60aa0cc4d44407bc14d6135f17c48c53bb2a655c0cb09cd1121757c6f083ab0924f63a47fed8302933743665f8b4a948b1ca5a7e146060ec650fbd2756f463ce6398697edb62f730a87ef476d9b41b9930f53dc1cff3a66ed046f9cdac8f47d644d108861be60313c4aa7290edc624b5c22e70ad71cbe79a53a306152826cdb92b078da27a042d52ea0b927a34c864e6663e0fd90b477dbefc3b6ce15df4ec110a7f2aa01106ba5ed4c5f0836fffdf9ff71ee90d492794859067264394d20ae991dcc4ae011f094458598ed9b13f739a8da08a18643b2e25fbda785c6ecb6f96cbd4cffeb0aeaa8f756687fef58117326a29a20a7773619519bf77c4f6aa3b2b90c9843b63aa90b14467b4418dd3549a74ae1e0492e152644bcce5ba58bd92501f65a2a337e0ab8c5b4e7483ddaf2fa65fddaef8572fdd86c01751c412c554c60d71fd6af054aa21c22ea42a2ad35860581777aee18fa1482f324792cbfcbeda5994c8040e0a016ad27b8ca2f80b6fe44cd542808f02608f0442a3fa34a4d66a6a1fbe645c3d74e9a94a7e8754df31c5d5135e619fcf4738e35587a0d8791decfdcc3e02c8dbd8dcdb788a1921934646eb4c13ab81e1c3c5cc36beadacde211129e9dcd98518f6a8f9b293fa71dcc5b355714e7d9428357a790d379e590022d910f42dff8f94a73d453314b5fd612f5e96b9032db1d8f4b2129b95bcbfcb2017c755a0fe75e5dfa73af56d59a97f0596ca8f59daa1326874d3c12dd0b6cc3f1a12e2852f5407b68d0a6ae8c7f980de75adf01f29ea24499998fa7e7ea5fe326f5f2ac0edb3bcc50d2b3beb6d5265e8960aeabddabe0ca45dbd81db0b3481d2b90b65db4bf3e84bb51e43925e56584f7904bff0d5b5aadc148229427d26a31493da861d4058c02b93033aa79caeddec8834c49ed2c5bc29daf96671d47cb7ae955d3e923ac39600efb7d7cb6155f3124de23a8d0df66f4aa922d44536a968698b17f3d32f9184f5876f3fc6ac74d194e44099974ea56db24a4bffc8bc203e95f0bae214c981c27a1f860c876b67bde688181fce38460d52a379b21472aae9733addc15a15346b36c878021e04bc9e6a1736b062e9250a6a700f6039022cb46897738e3e5bfaab76c0ce619bde0f2a66cdbb9dfae96b832db16883c656926917a9497defd0d795b3be001ff97300bc309c98013538611451dfcca3ffe1178d91795f8e2620854ebde9c572c268df881b46672a696d2d454d978203fdea1ce9a96fdfa76328b560373762f6ad202d56497370897f75703647ebaa54ffb96102a3faf9322e8e2670deeb089d919ba8d41806acd5ed74c965de2f22fe6a975e14cd6ce2aa3e9b18f7da1c25af763d42194db6605a746331f113f9ca1339fa504a3bfe04fefef38b19575b94ca871c9b52036b041944b399c9fb5e740eac5fe484aae355572297131fe92d1b03cc3506f02f5e87f16cdbf7f83003ff37afcbe3deb093011389e8021cb26323a25baadef167bd08c20cd3833026f0ce05fff4df310376c2e89c8a7d12c173e57d38c3b8c2c7ad634daba0a8cb48c65a95dcb83e20d4f8f23900ab1d40bc8cd539fda9611c245b08b969c852edc391aaf24279341fa32e29ec59bd74e4d358026bcbf76afa5e5760ffd04e4cfefad032e074521e5fc5a99e317632313544722695c1511f4a98aee4b60dec9bcbcd9c6ce3a8c51d7a8e246c8820e05d151afc72b55dc1efae8dd22cd37ff446f50b5c46672d9de156ac283d7e9bcd235c85173471afe7d83dd26fc2a2d1c4b0b5f450c2069e03d449e861aa9753074999b9b236406f0253f7d28c1ee26518075dc90c02603a759e707b47525a20fe60ed80a042c5e4249c77c2f02d99612e55b466fe63eb5e7ce974e222a01d8c8e95fe4fadfc557166b1c5b91c969120e397d0b53a25f9f0e2ad2cfda56fbd62df0cde94c1c9799a9857a9380aa8552225b588b1ccec0e3c2a5dc9b397ea46146473c9ae91f245d151a39bec5fcc24d5c441a2953cdbc8c15d6082a4a8d54fcfa8e300bdfaef2b54740e4ffc5daad469d747831410162677d8deb0c3f83d0ad7933b59b5920e2f4c884e39c1f54ed5f54e26abad9d00709f79aa991d6d7a8ffb35547e2c6e53f3875af32bca1db1bcf30b036a472f6c332a11ea7b37cca2f131f8348ea1fded53a247d8ec509537970b1d6c27c9dbb1a0d7ce162163b5365d7e7d0fe27aeebc799e7c8eec26dca1c6bd51f074e64ab47bc0356fd776c6ef2c8ded48ac10fbc8ea07facfede0e73be4d02557915cc4bba9b556eb5ca90e73b829340381fed03ef12ff6d3dc8b8497db9959d73de293f879447d77073d3a1e313d254268ecd46e48b91a1cc487bc5af61a97949aba7c97f139b082a712af4768ae53d702157ab9148c7a1f283007f580f077732cc61790cce49395e247ee96aa7f8718040fe94a14cfd8f5020cccb1a6d22a80ffea5f8550a980a7f267eae2a7936a32f903af08cb670a7309f07d6c4add48344e4e5f4ec746a6bab8d4684f28ee244148dd6ec52d854a5b83291b83afddccc3022b0ee09619c0c26610bd1d5778683287243c900e61c77ca4f49089b651c5731b3ec055ea167fd33b15635a3c93e0ae758b1bbb6363987241473969c0f03da33cfdd20267eddc44b74e8a7e8fec19bf104493052bac094dbee8c7f1d8d13091cc8e01317867ce664f24dddeb8daf94657dd2459dc9de0f539f86ad3806093d9a9664fbfcdc4a28fffe627d9e684af96e447b7d20858eb763cc3a940684b45248c3c3b74a9f739a71dcd9fc5585ffd5608ed8f912a643b3ccdedef43b9d0340fc9d0fcf8863e2ca1a89af613c50b46f42f90dca557a24c1c9451330fb86cd40cc835df77ca29c88c18b2c5cd3bf2c148f1493e8ba33c55f5b6167f3cb90036a85558f4943c0664fa1f7b66265a4219257995393d2d1e68f9835b5e9212a69e13df2525ad30870c619a116e1f85eca5439f8991b4dd4509ab9d58c6204e48974bf5a4f74fe6744d14aa0ee92a9ab825cc4439ea26a5aec6c8954c852289ac594188ecf533ddf9c22bb1741f257056e0130bba4a7acff5f6ba8d2cc5a49b09ca6d2da2929f19110cb76c00e796606ea940eaa52e3ac7c7938f6fe6220ba90cdc41f3a90260885f4447204b37616a9d4fc6235d7a2da4a0cb1632a1657b5eb2373a389be509d5a8db4379070c2181de139cfb9e3f44b1a15af12965f4ed2d5d9fe1aeab27cedf0825f42f43999cbd0b43d62242eff4044549f0bc1fa746beb266ed0f09d90a6f36d2383da5ac29bb40183ab73fa3086414fc6706eb2d0df985c3180fd91a8ae7aec55a616e3e06257dd898178e2df1153bfa1652177db9fdcd20f492ffd859fa83ffc18006a8ef0e7389df28646a25d430cfd13ec6919908667c27f7521a814065702cd95269dd9bf1dfe066c57c0394a575661f41fdd67635c9fc51cc1034904fc832cff18702377cb840f9495df502b2844efea569a8879e11e63dbca79628a30c4adefa65b1f7c3cbed8586ae2d0c91ac0330e83c10329a2e1b54248ff39472071b3b0f7f1d5558f98f185cf5c2a6b59e153ce4db8c8214b8bc034b5e0c09543159d8503eda72ddf38428657d3027ca7e61b7d88401e80230d0135db799eb3eec66be5be500a6bb096fda9f9a046fab739f252ce966faf050e20bb3372a4790b6a501fdfef2194079f2a9eb7e722c34ca59ab957ef673fa8aa0cef606f81addc712c817e5b8acbe15123dd08a7b965078b6d7ff4261ef451bdf381df9a62c392bee4ca5ececdb218bf5bd3190479fa85ef48838e47c833a05bf068b72ad8aa10610788e6182c21b796986e381ed7a99fb668b9611d54bcfc7ade4f198446a50c72e5ce8cf0361ac6b561f28e34c44ee6ca197641dee5e500554d97bb98c27cfbc5e77500dad6713ae3ad69f9e5ee98b2d944700b31b2720c62731aafc0fd4b36d0b15237a3bfa2b55a262318525d49ce4a040fa5be8e64e1ee72d2bc6058f6c129eadef3aee9e37c9532d8d8a5c39b7541e0724d743b2def5410bc0a870ad4befeda7324e6a450d8c4b814af8e8cca182df0af6ea2c50b921279ed0ba5d7a5228f99d44313b02b7d0ace3beeb0b3d64ce8432705ea36b13ac251c17dbf9b26888b65c8428fea1087fd31edc255dbb28a032da79b3e6719f3a9bced8bb78f56502c063c63e0af95cd21c4e337c87e885b75828"}, {0x80, 0x10b, 0x1, "795b7b6c33862049d4aef0124e176d753a2105f4ee81d869ddd463a93aa923b2b51b45f30042b8e03d316b19567e4e319d36dca0752683e23110ff07e6d42eaeb1bdfd86ce03eb97df60bf708fa0fec158016cb07ecc02da0c11935f0ac8adc9e0e7c29ba5ac53acb23ba46ddc59d397"}], 0x2200}, 0x20000840)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000028c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000002b80)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b40)={&(0x7f0000002900)={0x208, r5, 0x208, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xa, 0x5b, "6cee71cea12f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7f}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0xdf, 0x5b, "d3cce930327aaf94756564b3e70d0bf543a6a0286eaae1da5cf9f5d391943a8249cc10aaa37dd77cc5f2e5fc37f78b0309ef37adaf6a02f8e99f5c9a96e388d34ec7a918489498a44eba5e8d45b109d30a4f88875e5480812dae456231bb43570d9c35817e27b8940aa4b206151f276880a3549be79394976680370829bd151b6aabfcd51990e1a2694c62d29fb89a0f56029357764f4cbeb9fcd5a12cc11c042b9e219e3b548c32b8aa282b6b755321904d3b9761ce0c0fe5520786b57195f6908e9e47d2b1b75b23e255b68d476d27c9969413b0e031b031307b"}, @NL80211_ATTR_FRAME_MATCH={0xd6, 0x5b, "0e7051d8981a05bd8547122fb441abc43ad4ba5cf3871dbf69d530df5ffe5f69fb3334cbefceb11a07c98b1165b8ed8d3b549f8cb7a3ad357de537d1c33269b06c46d303e85dc74bfc3390a26950b277aeced00e6abce27621c5024a6b7412ec8ea690d5a5b26048cbaf6803f6200443c82224847c1ab8ed22694e9f94c8764844718e7c4cd558eb0b83a80c6c656709c2b77a747f69707547d61e206b9e759a1ed9303c5dba1879979136100f9144ca1c69fa5ce894cc3948ac22432e5899d1af03ff08f51b4e98c50e6800378acace0b85"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x208}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002dc0)=@bloom_filter={0x1e, 0x8, 0x7, 0x3, 0x2000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x7}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002ec0)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000002e40), &(0x7f0000002e80)='%ps    \x00'}, 0x20)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002f00)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002f80)={0xffffffffffffffff, 0x81, 0x37c521e2fe489b67}, 0xc)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002fc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003040)={0x0, 0x0, 0x18}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000030c0)={0x18, 0x2, &(0x7f0000002bc0)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}], &(0x7f0000002c00)='GPL\x00', 0x0, 0xc3, &(0x7f0000002c40)=""/195, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002d40)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000002d80)={0x5, 0x10, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003080)=[r7, r8, r9, r10, r11, 0x1, r12, r0]}, 0x94)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x28, 0x17, 0xa, 0x401, 0x0, 0x0, {0xe, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000004)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000032c0), r2)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0xb1707b7e1f60840}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x2c, r13, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x11}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x2404c000)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$fou(&(0x7f0000003400), r2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003500)={'sit0\x00', &(0x7f0000003440)={'sit0\x00', <r16=>0x0, 0xcf, 0x700, 0x100, 0x0, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x67, 0x0, 0x5, 0x2f, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x43, 0x3, [{0x1, 0x6, "2c109ee1"}, {0x7, 0x8, "36488abab4b4"}, {0x6, 0x11, "433e2b7df2f3eea324e14ffc3369a8"}, {0x1, 0x12, "ec7034d25b02e8fc916468aaf4a3693c"}, {0x7, 0x2}, {0x2, 0xa, "3cc800ef7cf91ac0"}]}, @end, @timestamp={0x44, 0x18, 0xcd, 0x0, 0xa, [0x6, 0x8, 0x0, 0x7, 0x7ca2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0x8, [{@private=0xa010101, 0x33d}]}, @noop, @generic={0x82, 0x3, "bc"}]}}}}})
sendmsg$FOU_CMD_DEL(r14, &(0x7f00000035c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x30, r15, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r16}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x50)
r17 = bpf$ITER_CREATE(0x21, &(0x7f0000003600), 0x8)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000036c0)={r17, &(0x7f0000003640)="40814cf2bd449f5235fea4a6d493b1d320784af147563d254919cc9e605faeb02c4e945f627d1551f1e6332bc6dbe15ede189e400e51f461c28a703c9c159b55e82d6f3618dff4116496d6a19406d4cca7b9137ffc96b4f793519f370fbb1743aca1c3ce133439cd43b15891c9b84a012ddc770a504a1dc2083544cd"}, 0x20)
setsockopt$MRT_ADD_VIF(r17, 0x0, 0xca, &(0x7f0000003700)={0x0, 0x4, 0x9, 0x534c, @vifc_lcl_ifindex=r16, @local}, 0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000037c0)={0x0, 0xa, 0x10, 0x2, 0x7}, &(0x7f0000003800)=0x18)

855.67524ms ago: executing program 0 (id=3248):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00524c366eeba0d8e600000007020000f8ffff060000000000000000b70400000200000032000000a6000000850000001100000095000000000000002a85e377aa65375154a31feefd19bb4101cee453"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)

805.203309ms ago: executing program 4 (id=3249):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000006c0)=0x81, 0x4)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0)
sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000380)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)

571.186452ms ago: executing program 0 (id=3250):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100c3ffffff660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, 0xffffffffffffffff, 0x20, 0x0, @val=@tcx}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=r3], 0x1c}}, 0x800)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x8, 0x3, 0x0)
socket(0x8, 0x0, 0x8000)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
close(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff})
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="43ffffff1000010000000000000000180000000a5d0000001100010000004c4e417500000500000a"], 0x28}}, 0x20000000)

411.622113ms ago: executing program 4 (id=3251):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x7fff, 0x8})
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x58244000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x164, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46bce008}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa87b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33e552d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6400f780}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5cc1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x607995f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e59}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf23e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe3bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e44e39d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x788f5271}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x204337c5}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18ee69d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3699a799}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44cfb4bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b957307}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x801e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69987bc8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7670}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e42df31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x73a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21dbcd8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x585e5512}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11dc5fd9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x7)
syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000400))
r5 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r5, 0x0, 0x0, 0x80000)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@alg={0x100, 0x10, 0x300, 0x70bd2b, 0x25dfdbfd, {{'ecb-aes-ce\x00'}, '\x00', '\x00', 0x1200, 0x600}, [{0x8, 0x1, 0xa}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x99}, {0x8, 0x1, 0x400}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1f}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b52f8c91417f33d2632d8f4173"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "919ec6f9ae09cab686387a133a"}, @NL80211_KEY_SEQ={0xe, 0x4, "53aaaca741814fddfc48"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48054}, 0x40080)
accept4$alg(r5, 0x0, 0x0, 0x80000)
r7 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r7, 0x100000000)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000780)=<r8=>0x0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000007c0)=<r9=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000800)={"1f20fc50724a3ae858da96dd76d90520", r8, r9, {0xced, 0x3}, {0xffff, 0x4}, 0x5c, [0x0, 0xdde, 0x5, 0x18b0, 0xffffffffffff82c9, 0x8, 0x3, 0x8, 0x0, 0x3, 0x84, 0x4, 0x2, 0x1, 0x9, 0x7]})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=<r11=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000980)=<r12=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000009c0)=<r13=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=<r14=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=<r15=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=<r16=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r10, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x41)
tee(r6, r6, 0xfffffffffffffff3, 0x4)

400.50129ms ago: executing program 2 (id=3252):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, 0x0, 0x0, 0x40488c4, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x0)
r2 = accept$phonet_pipe(r1, &(0x7f0000000200), &(0x7f0000000280)=0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x9, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000580), 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r7, r8, 0x0, 0x20000000002)
r9 = socket$inet6(0xa, 0x80002, 0x0)
r10 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @empty}, {0x1, @random="8825f840d166"}, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}, 'lo\x00'})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'})
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)

301.637198ms ago: executing program 3 (id=3253):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c", 0x44}], 0x1}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x47, 0x0, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e008d2a"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0)
setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000040), 0x4)

203.714085ms ago: executing program 4 (id=3254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x355b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, "af9b58ed0d127db21e9614e813bd5003"}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x49b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000800}, 0x804)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r0)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000780)={0x0, 0xfffffffffffffecc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9def0000", @ANYRES16=r5, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000003c0)=0x44dd, 0x4)

169.919438ms ago: executing program 3 (id=3255):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xf0, 0xfffff818, 0x2, 0x2, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffff3, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000800000000a5c000000060a0b040000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x200008d0}, 0x44054)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x3e000000, @mcast1, 0x5}}, {{0xa, 0x4e21, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x108)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
accept4$inet6(r0, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80)

139.787476ms ago: executing program 4 (id=3256):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYRES16], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x16, 0x17, 0x8, 0xa, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bbe, 0x0, {0x6, 0x2b, 0x66, 0x81, 0x0, 0x3, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote}}]}, 0x50}}, 0xc082)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00', @ANYRES16, @ANYBLOB="010028bd7000fbd2df25090000002800018008000b00736970000c000700200000002c000000060002"], 0x3c}, 0x1, 0x0, 0x0, 0x4040880}, 0x48040)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x33}, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x4}, 0x2c)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb719)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x0, 0x81, 0x5}, {@remote, 0x4e24, 0x4, 0x1ce, 0x12d61, 0x12d58}}, 0x44)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

0s ago: executing program 0 (id=3257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xc, 0x8, 0x2}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)

kernel console output (not intermixed with test programs):

24.906923][T12806] netlink: 'syz.1.1754': attribute type 3 has an invalid length.
[  424.932835][T12806] netlink: 'syz.1.1754': attribute type 1 has an invalid length.
[  425.022276][T12804] netlink: 'syz.2.1753': attribute type 12 has an invalid length.
[  425.084039][T12816] ip6t_srh: unknown srh match flags  4000
[  425.429583][T12832] netlink: 'syz.1.1762': attribute type 1 has an invalid length.
[  425.704559][T12845] nbd: must specify at least one socket
[  425.797684][T12843] openvswitch: netlink: Multiple metadata blocks provided
[  426.060171][T12860] wg1 speed is unknown, defaulting to 1000
[  426.136201][T12867] wg1 speed is unknown, defaulting to 1000
[  426.140197][T12856] __nla_validate_parse: 5 callbacks suppressed
[  426.140216][T12856] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1769'.
[  426.163177][T12856] netlink: 'syz.0.1769': attribute type 9 has an invalid length.
[  426.171139][T12856] netlink: 'syz.0.1769': attribute type 2 has an invalid length.
[  426.200476][T12856] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1769'.
[  426.789783][T12887] smc: net device hsr0 applied user defined pnetid SYZ2
[  426.826495][T12889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1778'.
[  427.084751][T12900] netlink: 'syz.0.1782': attribute type 2 has an invalid length.
[  427.127630][T12906] Cannot find map_set index 135 as target
[  427.139241][T12900] netlink: 'syz.0.1782': attribute type 1 has an invalid length.
[  427.181783][T12900] netlink: 'syz.0.1782': attribute type 2 has an invalid length.
[  427.234428][T12900] netlink: 'syz.0.1782': attribute type 2 has an invalid length.
[  427.263347][T12900] netlink: 'syz.0.1782': attribute type 1 has an invalid length.
[  427.308044][T12900] netlink: 'syz.0.1782': attribute type 2 has an invalid length.
[  427.327752][T12911] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1786'.
[  427.516127][T12922] netlink: 'syz.3.1790': attribute type 4 has an invalid length.
[  427.522339][T12924] netlink: 'syz.0.1789': attribute type 2 has an invalid length.
[  427.541450][T12922] netlink: 14345 bytes leftover after parsing attributes in process `syz.3.1790'.
[  427.550257][T12924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1789'.
[  427.595057][T12926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1789'.
[  427.737190][T12935] syzkaller0: entered promiscuous mode
[  427.761572][T12935] syzkaller0: entered allmulticast mode
[  428.104162][T12951] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1795'.
[  428.199407][T12958] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1799'.
[  428.375554][T12961] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1800'.
[  428.679438][T12972] atomic_op ffff88807d137998 conn xmit_atomic 0000000000000000
[  428.691444][T12971] syzkaller0: entered promiscuous mode
[  428.697131][T12971] syzkaller0: entered allmulticast mode
[  428.834935][T12972] syzkaller0: entered promiscuous mode
[  428.841078][T12972] syzkaller0: entered allmulticast mode
[  428.933856][T12978] xt_l2tp: v2 doesn't support IP mode
[  431.546779][T12996] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  431.812434][T13018] __nla_validate_parse: 1 callbacks suppressed
[  431.812454][T13018] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1812'.
[  431.820126][T13019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1814'.
[  431.925351][T13016] wg1 speed is unknown, defaulting to 1000
[  432.287752][T13032] geneve2: entered promiscuous mode
[  432.358933][T13032] geneve2: entered allmulticast mode
[  432.409692][T11755] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  432.452595][T11755] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  432.506913][T13029] wg1 speed is unknown, defaulting to 1000
[  432.518756][T11755] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  432.541492][T11755] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  432.943307][T13039] wg1 speed is unknown, defaulting to 1000
[  433.015287][T13057] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1821'.
[  433.041417][T13057] openvswitch: netlink: Flow key attr not present in new flow.
[  433.335448][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'.
[  433.667572][T13085] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1826'.
[  434.548994][T13118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1831'.
[  434.801140][T13121] x_tables: ip6_tables: mh match: only valid for protocol 135
[  435.079722][T13128] "”*Œ¹"ü
: renamed from vlan0
[  435.230161][T13130] syzkaller1: entered promiscuous mode
[  435.235887][T13130] syzkaller1: entered allmulticast mode
[  435.298678][T13136] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1838'.
[  435.372260][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1839'.
[  435.602561][T13150] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1842'.
[  435.632575][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1842'.
[  435.653828][T13157] validate_nla: 2 callbacks suppressed
[  435.653845][T13157] netlink: 'syz.2.1844': attribute type 5 has an invalid length.
[  435.691731][T13157] netlink: 'syz.2.1844': attribute type 6 has an invalid length.
[  435.735445][T13161] netlink: 'syz.4.1845': attribute type 1 has an invalid length.
[  435.779397][T13163] netlink: 'syz.0.1846': attribute type 16 has an invalid length.
[  435.789251][T13163] netlink: 'syz.0.1846': attribute type 17 has an invalid length.
[  435.816743][T13161] bond7: entered promiscuous mode
[  435.822468][T13161] bond7: entered allmulticast mode
[  435.828147][T13161] 8021q: adding VLAN 0 to HW filter on device bond7
[  435.836316][T13168] IPv6: NLM_F_REPLACE set, but no existing node found!
[  435.946506][T13174] netlink: 'syz.2.1848': attribute type 1 has an invalid length.
[  435.977792][T13165] erspan1: entered allmulticast mode
[  435.991939][T13165] bond7: (slave erspan1): making interface the new active one
[  435.999687][T13165] erspan1: entered promiscuous mode
[  436.010993][T13165] bond7: (slave erspan1): Enslaving as an active interface with an up link
[  436.093976][   T67] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  436.108695][   T67] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  436.128239][   T67] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  436.138790][   T67] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  436.256297][T13188] netlink: 'syz.3.1853': attribute type 13 has an invalid length.
[  436.476362][T13200] bridge10: entered promiscuous mode
[  436.482915][T13200] bridge10: entered allmulticast mode
[  436.492112][T13200] team0: Port device bridge10 added
[  436.499008][T13204] netlink: zone id is out of range
[  436.514617][T13204] netlink: zone id is out of range
[  436.724666][T13216] SET target dimension over the limit!
[  437.076833][T13243] __nla_validate_parse: 8 callbacks suppressed
[  437.076851][T13243] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.1871'.
[  437.215047][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1873'.
[  437.353400][T13257] netlink: 'syz.2.1875': attribute type 1 has an invalid length.
[  437.363627][T13255] wg1 speed is unknown, defaulting to 1000
[  437.451367][T13257] 8021q: adding VLAN 0 to HW filter on device bond4
[  437.505567][T13261] syz_tun: left promiscuous mode
[  437.530641][T13261] bond4: (slave syz_tun): Enslaving as an active interface with a down link
[  438.100338][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1882'.
[  438.644049][T13304] syzkaller0: entered promiscuous mode
[  438.681286][T13304] syzkaller0: entered allmulticast mode
[  439.203399][T13332] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1892'.
[  439.368217][T13336] wg1 speed is unknown, defaulting to 1000
[  440.135573][ T1302] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  440.146812][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.153450][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.211767][T13358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'.
[  440.810557][T13362] bridge_slave_1: mtu less than device minimum
[  440.913114][T13363] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1899'.
[  441.312594][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'.
[  441.467744][T13378] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1905'.
[  441.480146][T13381] netlink: 'syz.3.1907': attribute type 10 has an invalid length.
[  441.519674][T13381] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1907'.
[  441.581867][T13381] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.589093][T13381] bridge0: port 3(bond0) entered blocking state
[  441.611397][T13381] bridge0: port 3(bond0) entered disabled state
[  441.618816][T13381] bond0: entered allmulticast mode
[  441.662070][T13381] bond_slave_0: entered allmulticast mode
[  441.671307][T13381] bond_slave_1: entered allmulticast mode
[  441.895194][T13400] netlink: 'syz.0.1912': attribute type 23 has an invalid length.
[  441.929796][T13400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1912'.
[  442.804743][T13431] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1923'.
[  443.002790][T13436] netlink: 'syz.0.1925': attribute type 1 has an invalid length.
[  443.082981][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'.
[  443.121459][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'.
[  443.162699][T13442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1927'.
[  443.192295][T13442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1927'.
[  443.607547][T13460] wg1 speed is unknown, defaulting to 1000
[  443.746124][T13470] syzkaller0: entered promiscuous mode
[  443.761800][T13470] syzkaller0: entered allmulticast mode
[  443.807477][T13472] bond3: Removing last ns target with arp_interval on
[  443.916652][T13475] wg1 speed is unknown, defaulting to 1000
[  444.430346][T13476] wg1 speed is unknown, defaulting to 1000
[  444.873987][T13520] atomic_op ffff888027926198 conn xmit_atomic 0000000000000000
[  444.891395][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1946'.
[  445.075223][T13525] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1948'.
[  445.088009][T13525] openvswitch: netlink: Missing key (keys=40, expected=100)
[  445.188891][T13513] wg1 speed is unknown, defaulting to 1000
[  445.459499][T13537] netlink: 'syz.3.1952': attribute type 39 has an invalid length.
[  445.508466][T13539] netlink: 'syz.3.1952': attribute type 39 has an invalid length.
[  445.756800][T13541] netlink: 'syz.4.1953': attribute type 1 has an invalid length.
[  445.809315][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1953'.
[  445.825076][T13545] netlink: 'syz.3.1954': attribute type 10 has an invalid length.
[  445.876390][T13547] netlink: 'syz.3.1954': attribute type 10 has an invalid length.
[  445.997403][T13544] 8021q: adding VLAN 0 to HW filter on device bond8
[  446.238841][T13558] netlink: 'syz.0.1958': attribute type 10 has an invalid length.
[  446.326997][T13558] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  446.329233][T13560] netlink: 'syz.0.1958': attribute type 3 has an invalid length.
[  446.415186][T13559] team0: Port device bond0 added
[  446.422545][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'.
[  446.894865][T13573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1962'.
[  446.987866][T13576] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  447.486004][T13609] openvswitch: netlink: Message has -2 unknown bytes.
[  447.956042][T13643] smc: net device hsr0 applied user defined pnetid SYZ2
[  447.975440][T13643] smc: net device hsr0 erased user defined pnetid SYZ2
[  448.004733][T13643] smc: net device hsr0 applied user defined pnetid SYZ2
[  448.149274][T13658] validate_nla: 1 callbacks suppressed
[  448.149292][T13658] netlink: 'syz.4.1987': attribute type 1 has an invalid length.
[  448.167507][T13659] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  448.178374][T13652] wg1 speed is unknown, defaulting to 1000
[  448.345410][T13663] bond9: (slave bridge5): making interface the new active one
[  448.406276][T13663] bond9: (slave bridge5): Enslaving as an active interface with an up link
[  448.705723][T13682] __nla_validate_parse: 4 callbacks suppressed
[  448.705742][T13682] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1996'.
[  448.780689][T13671] team0 (unregistering): Port device team_slave_0 removed
[  448.790466][T13671] team0 (unregistering): Port device team_slave_1 removed
[  448.800729][T13671] team0 (unregistering): Port device bridge10 removed
[  449.091809][T13704] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1997'.
[  449.101014][T13699] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1997'.
[  449.192920][T13694] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.200437][T13694] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.527964][T13694] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.555144][T13694] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  449.828721][T13694] bridge2: left promiscuous mode
[  449.838434][T13694] bond0: left promiscuous mode
[  449.843651][T13694] bond_slave_0: left promiscuous mode
[  449.849267][T13694] dummy0: left promiscuous mode
[  449.854576][T13694] macvlan2: left promiscuous mode
[  449.866277][T13694] macsec0: left promiscuous mode
[  449.991898][T13694] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  449.999081][T13694] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  450.112463][T13707] bond7: Unable to set down delay as MII monitoring is disabled
[  450.122731][T13707] bond7 (unregistering): Released all slaves
[  450.167402][ T3445] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.176053][ T3445] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.184955][ T3445] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.193658][ T3445] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.204050][ T3445] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.213682][ T3445] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.229300][ T3445] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.240915][ T3445] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.254151][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'.
[  450.597016][T13728] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  450.653435][T13728] bond4 (unregistering): Released all slaves
[  450.718287][T13744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2008'.
[  450.755071][T13744] bond7: entered promiscuous mode
[  450.760666][T13744] 8021q: adding VLAN 0 to HW filter on device bond7
[  450.812208][T13744] 8021q: adding VLAN 0 to HW filter on device bond7
[  450.832804][T13744] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  450.882915][T13744] bond7: (slave wireguard0): Error -95 calling set_mac_address
[  451.146563][T13758] wg1 speed is unknown, defaulting to 1000
[  451.184355][T13755] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  451.207830][T13764] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2014'.
[  451.428368][T13762] wg1 speed is unknown, defaulting to 1000
[  451.566255][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'.
[  451.579771][T13777] chnl_net:caif_netlink_parms(): no params data found
[  451.754178][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'.
[  452.339878][T13807] No such timeout policy "syz1"
[  452.352333][T13807] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2021'.
[  452.743390][T13821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2023'.
[  452.780670][T13816] syzkaller0: entered promiscuous mode
[  452.788843][T13816] syzkaller0: entered allmulticast mode
[  452.877545][T13816] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  453.041800][T13830] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  453.558787][T13860] netlink: 'syz.0.2035': attribute type 10 has an invalid length.
[  453.570956][T13860] 8021q: adding VLAN 0 to HW filter on device team0
[  453.579835][T13860] bond0: (slave team0): Enslaving as an active interface with an up link
[  453.861601][T13871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.883752][T13871] syzkaller0: entered promiscuous mode
[  453.891595][T13871] syzkaller0: entered allmulticast mode
[  453.916751][T13871] tipc: Resetting bearer <eth:syzkaller0>
[  453.934574][T13870] tipc: Resetting bearer <eth:syzkaller0>
[  453.972692][T13870] tipc: Disabling bearer <eth:syzkaller0>
[  454.049971][T13878] wg1 speed is unknown, defaulting to 1000
[  454.196375][T13885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  454.231620][T13895] netlink: 'syz.1.2045': attribute type 1 has an invalid length.
[  455.182410][T13911] __nla_validate_parse: 2 callbacks suppressed
[  455.182429][T13911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2049'.
[  455.220655][T13912] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2051'.
[  455.243979][T13912] netlink: 'syz.2.2051': attribute type 5 has an invalid length.
[  455.399856][T13911] bond8: option ad_select: invalid value (24)
[  455.443462][T13911] bond8 (unregistering): Released all slaves
[  455.762851][T13941] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2057'.
[  455.878365][T13945] netlink: 'syz.4.2058': attribute type 1 has an invalid length.
[  455.938197][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2058'.
[  456.175427][T13968] wg1 speed is unknown, defaulting to 1000
[  456.756040][T14009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.916095][T14015] bond0: Device is already in use.
[  456.939029][T14013] netlink: 'syz.4.2077': attribute type 1 has an invalid length.
[  456.947346][T14013] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2077'.
[  457.296962][T14025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2080'.
[  457.762335][T14038] wg1 speed is unknown, defaulting to 1000
[  457.773922][T14042] netlink: 'syz.4.2086': attribute type 10 has an invalid length.
[  457.845073][T14042] 8021q: adding VLAN 0 to HW filter on device team0
[  457.896993][T14044] wg1 speed is unknown, defaulting to 1000
[  458.173519][T14057] bridge0: port 4(erspan0) entered blocking state
[  458.192806][T14057] bridge0: port 4(erspan0) entered disabled state
[  458.208261][T14057] erspan0: entered allmulticast mode
[  458.232205][T14057] erspan0: entered promiscuous mode
[  458.272309][T14061] netpci0: tun_chr_ioctl cmd 1074025678
[  458.291244][T14061] netpci0: group set to 0
[  458.893039][T14084] netlink: 'syz.4.2097': attribute type 1 has an invalid length.
[  458.937589][T14084] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2097'.
[  458.979769][T14084] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2097'.
[  459.017281][T14084] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2097'.
[  459.494575][T14090] wg1 speed is unknown, defaulting to 1000
[  459.565222][T14095] netlink: 'syz.0.2100': attribute type 2 has an invalid length.
[  459.576158][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'.
[  459.981807][T14096] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland
[  460.272988][T14124] FAULT_INJECTION: forcing a failure.
[  460.272988][T14124] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  460.301471][T14124] CPU: 1 UID: 0 PID: 14124 Comm: syz.0.2108 Not tainted syzkaller #0 PREEMPT(full) 
[  460.301496][T14124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  460.301514][T14124] Call Trace:
[  460.301521][T14124]  <TASK>
[  460.301529][T14124]  dump_stack_lvl+0xe8/0x150
[  460.301557][T14124]  should_fail_ex+0x414/0x560
[  460.301584][T14124]  _copy_from_user+0x2d/0xb0
[  460.301602][T14124]  ___sys_sendmsg+0x158/0x2a0
[  460.301622][T14124]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.301643][T14124]  ? kstrtouint+0x6e/0xe0
[  460.301681][T14124]  ? __fget_files+0x2a/0x420
[  460.301698][T14124]  ? __fget_files+0x3a0/0x420
[  460.301722][T14124]  __sys_sendmmsg+0x227/0x430
[  460.301746][T14124]  ? __pfx___sys_sendmmsg+0x10/0x10
[  460.301761][T14124]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  460.301799][T14124]  ? ksys_write+0x22a/0x250
[  460.301814][T14124]  ? __pfx_ksys_write+0x10/0x10
[  460.301831][T14124]  __x64_sys_sendmmsg+0xa0/0xc0
[  460.301850][T14124]  do_syscall_64+0xec/0xf80
[  460.301866][T14124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.301879][T14124]  ? trace_irq_disable+0x37/0x100
[  460.301897][T14124]  ? clear_bhb_loop+0x60/0xb0
[  460.301913][T14124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.301929][T14124] RIP: 0033:0x7ff82e98f749
[  460.301945][T14124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  460.301960][T14124] RSP: 002b:00007ff82f8a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  460.301980][T14124] RAX: ffffffffffffffda RBX: 00007ff82ebe5fa0 RCX: 00007ff82e98f749
[  460.301990][T14124] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003
[  460.301999][T14124] RBP: 00007ff82f8a8090 R08: 0000000000000000 R09: 0000000000000000
[  460.302008][T14124] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001
[  460.302016][T14124] R13: 00007ff82ebe6038 R14: 00007ff82ebe5fa0 R15: 00007ffccde0c308
[  460.302044][T14124]  </TASK>
[  460.548183][T14126] __nla_validate_parse: 2 callbacks suppressed
[  460.548204][T14126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2109'.
[  460.572038][T14126] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2109'.
[  460.992853][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'.
[  461.205624][T14152] netlink: 'syz.2.2116': attribute type 4 has an invalid length.
[  461.240254][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'.
[  461.247169][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2118'.
[  461.272182][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2117'.
[  461.443433][T14161] FAULT_INJECTION: forcing a failure.
[  461.443433][T14161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  461.493282][T14161] CPU: 0 UID: 0 PID: 14161 Comm: syz.3.2120 Not tainted syzkaller #0 PREEMPT(full) 
[  461.493312][T14161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  461.493322][T14161] Call Trace:
[  461.493330][T14161]  <TASK>
[  461.493338][T14161]  dump_stack_lvl+0xe8/0x150
[  461.493366][T14161]  should_fail_ex+0x414/0x560
[  461.493397][T14161]  _copy_from_iter+0x3b0/0x1630
[  461.493417][T14161]  ? process_measurement+0x730/0x1a70
[  461.493443][T14161]  ? __pfx__copy_from_iter+0x10/0x10
[  461.493462][T14161]  ? process_measurement+0x12e0/0x1a70
[  461.493479][T14161]  ? aa_label_sk_perm+0x4c4/0x610
[  461.493508][T14161]  ping_v4_sendmsg+0x227/0x16d0
[  461.493539][T14161]  ? __pfx_ping_v4_sendmsg+0x10/0x10
[  461.493572][T14161]  ? aa_sk_perm+0x15f/0x920
[  461.493599][T14161]  ? __lock_acquire+0x6b6/0x2cf0
[  461.493625][T14161]  ? sock_rps_record_flow+0x19/0x410
[  461.493657][T14161]  ? inet_sendmsg+0x2f4/0x370
[  461.493679][T14161]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  461.493700][T14161]  __sock_sendmsg+0x19c/0x270
[  461.493728][T14161]  ____sys_sendmsg+0x52d/0x820
[  461.493755][T14161]  ? __pfx_____sys_sendmsg+0x10/0x10
[  461.493783][T14161]  ? import_iovec+0x74/0xa0
[  461.493806][T14161]  ___sys_sendmsg+0x21f/0x2a0
[  461.493830][T14161]  ? __pfx____sys_sendmsg+0x10/0x10
[  461.493855][T14161]  ? kstrtouint+0x6e/0xe0
[  461.493936][T14161]  ? __fget_files+0x2a/0x420
[  461.493955][T14161]  ? __fget_files+0x3a0/0x420
[  461.493983][T14161]  __sys_sendmmsg+0x227/0x430
[  461.494009][T14161]  ? __pfx___sys_sendmmsg+0x10/0x10
[  461.494038][T14161]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  461.494085][T14161]  ? ksys_write+0x22a/0x250
[  461.494104][T14161]  ? __pfx_ksys_write+0x10/0x10
[  461.494127][T14161]  __x64_sys_sendmmsg+0xa0/0xc0
[  461.494149][T14161]  do_syscall_64+0xec/0xf80
[  461.494169][T14161]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.494186][T14161]  ? trace_irq_disable+0x37/0x100
[  461.494206][T14161]  ? clear_bhb_loop+0x60/0xb0
[  461.494226][T14161]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.494243][T14161] RIP: 0033:0x7f94e5f8f749
[  461.494259][T14161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.494274][T14161] RSP: 002b:00007f94e6e50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  461.494293][T14161] RAX: ffffffffffffffda RBX: 00007f94e61e5fa0 RCX: 00007f94e5f8f749
[  461.494306][T14161] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003
[  461.494317][T14161] RBP: 00007f94e6e50090 R08: 0000000000000000 R09: 0000000000000000
[  461.494328][T14161] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001
[  461.494338][T14161] R13: 00007f94e61e6038 R14: 00007f94e61e5fa0 R15: 00007ffd804158d8
[  461.494368][T14161]  </TASK>
[  461.524547][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2121'.
[  461.939120][T14163] 8021q: adding VLAN 0 to HW filter on device bond8
[  462.266313][T14202] ieee802154 phy0 wpan0: encryption failed: -22
[  462.303481][T14206] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2127'.
[  462.373323][T14208] netlink: 'syz.0.2130': attribute type 1 has an invalid length.
[  462.403310][T14212] siw: device registration error -23
[  462.414408][T14208] bond9: entered promiscuous mode
[  462.423111][T14208] 8021q: adding VLAN 0 to HW filter on device bond9
[  462.492746][T14209] bond9: (slave veth9): making interface the new active one
[  462.505592][T14209] veth9: entered promiscuous mode
[  462.521105][T14209] bond9: (slave veth9): Enslaving as an active interface with an up link
[  462.597658][T14216] bond9: (slave veth11): Enslaving as a backup interface with an up link
[  462.754548][T14229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  462.767113][T14237] netlink: 'syz.1.2136': attribute type 11 has an invalid length.
[  462.903130][T14247] wg1 speed is unknown, defaulting to 1000
[  463.255857][T14271] netlink: 'syz.0.2143': attribute type 7 has an invalid length.
[  463.275044][T14271] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2143'.
[  463.304672][T14272] bond0: (slave erspan0): Error: Device type is different from other slaves
[  463.360869][T14275] netem: unknown loss type 6144
[  463.370177][T14275] netem: change failed
[  463.407533][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'.
[  463.858596][T14310] netlink: 'syz.1.2156': attribute type 1 has an invalid length.
[  463.891635][T14310] netlink: 'syz.1.2156': attribute type 2 has an invalid length.
[  463.914677][T14312] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  463.916697][T14305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  463.954637][T14310] netlink: 'syz.1.2156': attribute type 1 has an invalid length.
[  463.997660][T14310] netlink: 'syz.1.2156': attribute type 3 has an invalid length.
[  464.051934][T14322] ieee802154 phy0 wpan0: encryption failed: -22
[  464.075235][T14321] ieee802154 phy0 wpan0: encryption failed: -22
[  464.116859][T14322] ieee802154 phy0 wpan0: encryption failed: -22
[  464.124680][T14321] ieee802154 phy0 wpan0: encryption failed: -22
[  464.183366][T14317] can: request_module (can-proto-0) failed.
[  464.365462][T14335] wg1 speed is unknown, defaulting to 1000
[  465.375195][T14375] tipc: Resetting bearer <eth:hsr0>
[  465.457849][T11755] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.479904][T11755] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.490762][T14387] netlink: 'syz.3.2176': attribute type 1 has an invalid length.
[  465.506705][T11755] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.517981][T11755] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.596454][T14396] __nla_validate_parse: 4 callbacks suppressed
[  465.596471][T14396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'.
[  465.619223][T14387] bond4: entered promiscuous mode
[  465.624670][T14387] bond4: entered allmulticast mode
[  465.630339][T14387] 8021q: adding VLAN 0 to HW filter on device bond4
[  465.730110][T14400] syzkaller0: entered promiscuous mode
[  465.736815][T14400] syzkaller0: entered allmulticast mode
[  465.777853][T14403] netlink: 'syz.2.2181': attribute type 13 has an invalid length.
[  465.955833][T14409] veth10: entered allmulticast mode
[  465.973091][T14413] netlink: 'syz.4.2183': attribute type 41 has an invalid length.
[  466.068636][T14414] vlan2: entered allmulticast mode
[  466.146374][T14421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  466.216384][T14430] syzkaller1: entered promiscuous mode
[  466.229849][T14430] syzkaller1: entered allmulticast mode
[  466.324796][T14437] netlink: 'syz.0.2188': attribute type 12 has an invalid length.
[  466.354807][T14437] netlink: 'syz.0.2188': attribute type 4 has an invalid length.
[  466.430627][T14439] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2190'.
[  466.473320][T14442] bond10 (unregistering): Released all slaves
[  466.547360][T14439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  466.571337][T14446] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2192'.
[  466.765457][T14456] wg1 speed is unknown, defaulting to 1000
[  466.811561][T14461] block nbd1: server does not support multiple connections per device.
[  466.832132][T14461] block nbd1: shutting down sockets
[  466.981019][T14468] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  467.381147][T14491] netlink: 'syz.1.2204': attribute type 4 has an invalid length.
[  467.389778][T14491] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2204'.
[  467.439890][T14495] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  467.492832][T14498] ip6tnl3: entered allmulticast mode
[  467.498463][T14496] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  467.506201][T14496] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  467.587259][   T30] audit: type=1800 audit(1768635997.599:8): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2208" name="memory.events" dev="tmpfs" ino=2425 res=0 errno=0
[  467.619644][   T30] audit: type=1804 audit(1768635997.599:9): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2208" name="/newroot/469/memory.events" dev="tmpfs" ino=2425 res=1 errno=0
[  467.650222][T14463] wg1 speed is unknown, defaulting to 1000
[  467.775422][T14512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.836272][T14512] syzkaller0: entered promiscuous mode
[  467.879951][T14512] syzkaller0: entered allmulticast mode
[  467.889567][T14520] netlink: 'syz.2.2214': attribute type 2 has an invalid length.
[  467.921790][T14518] netlink: 'syz.2.2214': attribute type 2 has an invalid length.
[  467.990484][T14512] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2212'.
[  468.075382][T14515] tipc: Resetting bearer <eth:syzkaller0>
[  468.157043][T14527] wg1 speed is unknown, defaulting to 1000
[  468.163956][T14509] tipc: Resetting bearer <eth:syzkaller0>
[  468.190775][T14509] tipc: Disabling bearer <eth:syzkaller0>
[  469.125393][T14550] 8021q: adding VLAN 0 to HW filter on device bond10
[  469.480944][T14557] wg1 speed is unknown, defaulting to 1000
[  469.721150][T14567] wg1 speed is unknown, defaulting to 1000
[  469.900264][T14576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'.
[  469.912686][T14576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'.
[  470.133570][T14580] bond0: (slave rose0): Releasing backup interface
[  471.300647][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2239'.
[  471.376841][T14635] m1Ie5n: entered promiscuous mode
[  471.410574][T14639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  471.438384][T14639] syzkaller0: entered promiscuous mode
[  471.444268][T14639] syzkaller0: entered allmulticast mode
[  471.683437][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'.
[  471.776199][T14666] veth1_to_hsr: entered promiscuous mode
[  471.809387][T14666] macvtap1: entered promiscuous mode
[  471.819209][T14666] macvtap1: entered allmulticast mode
[  471.827349][T14666] veth1_to_hsr: entered allmulticast mode
[  471.870091][T14678] validate_nla: 1 callbacks suppressed
[  471.870108][T14678] netlink: 'syz.2.2254': attribute type 1 has an invalid length.
[  471.971047][T14678] 8021q: adding VLAN 0 to HW filter on device bond5
[  472.086183][T14691] netlink: 'syz.4.2256': attribute type 5 has an invalid length.
[  472.137720][T14695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.258752][T14683] 8021q: adding VLAN 0 to HW filter on device bond5
[  472.270544][T14683] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  472.288673][T14683] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  472.328419][T14685] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  472.337636][T14685] bond5: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  472.378124][T14690] syzkaller0: tun_chr_ioctl cmd 2148553947
[  472.394104][T14639] tipc: Resetting bearer <eth:syzkaller0>
[  472.446090][T14639] tipc: Disabling bearer <eth:syzkaller0>
[  472.473308][T14693] wg1 speed is unknown, defaulting to 1000
[  473.188479][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2261'.
[  473.239442][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2261'.
[  473.348894][T14718] netlink: 'syz.2.2261': attribute type 6 has an invalid length.
[  473.713229][T14731] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2265'.
[  474.039981][T14735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2266'.
[  474.057344][T14735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2266'.
[  474.082832][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2266'.
[  474.182343][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2265'.
[  474.438937][T14743] wg1 speed is unknown, defaulting to 1000
[  474.533278][T14752] netlink: 'syz.4.2269': attribute type 10 has an invalid length.
[  474.806318][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'.
[  474.875788][T14764] openvswitch: netlink: IP tunnel dst address not specified
[  475.040978][T14780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  475.078883][T14778] netlink: 'syz.4.2279': attribute type 1 has an invalid length.
[  475.211579][T14784] 8021q: adding VLAN 0 to HW filter on device bond11
[  475.222899][T14784] bond10: (slave bond11): making interface the new active one
[  475.232783][T14784] bond10: (slave bond11): Enslaving as an active interface with an up link
[  475.272515][T14778] 8021q: adding VLAN 0 to HW filter on device bond10
[  475.305881][T14787] bond0: (slave wlan1): Releasing backup interface
[  475.313232][T14787] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  476.948560][T14803] __nla_validate_parse: 4 callbacks suppressed
[  476.948579][T14803] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.2286'.
[  477.016967][T14803] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.2286'.
[  477.192303][T14822] netlink: 'syz.4.2290': attribute type 1 has an invalid length.
[  477.222100][T14823] netlink: 'syz.4.2290': attribute type 1 has an invalid length.
[  477.319688][T14822] 8021q: adding VLAN 0 to HW filter on device bond12
[  477.413950][T14843] bond0: (slave team0): Releasing backup interface
[  477.539329][T14843] bond9: (slave veth9): Releasing backup interface
[  477.553011][T14843] bond9: (slave veth9): the permanent HWaddr of slave - aa:0a:c7:1a:2f:15 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  477.570420][T14843] veth9: left promiscuous mode
[  477.623070][T14843] bond9: (slave veth11): making interface the new active one
[  477.628678][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'.
[  477.637535][T14843] veth11: entered promiscuous mode
[  477.660639][T14858] No such timeout policy "syz0"
[  477.675369][T14843] bond9: (slave veth11): Releasing backup interface
[  477.684673][T14843] veth11: left promiscuous mode
[  477.828986][T14866] wg1 speed is unknown, defaulting to 1000
[  477.871656][T14870] sctp: [Deprecated]: syz.4.2302 (pid 14870) Use of int in maxseg socket option.
[  477.871656][T14870] Use struct sctp_assoc_value instead
[  477.918859][T14872] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) !
[  478.483371][T14909] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  478.511801][T14909] bond0: (slave lo): Enslaving as an active interface with an up link
[  478.600021][T14916] netlink: 'syz.1.2311': attribute type 1 has an invalid length.
[  478.723694][T14928] netlink: 'syz.4.2310': attribute type 13 has an invalid length.
[  478.934404][ T8221] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  479.148780][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2317'.
[  479.181565][  T979] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  479.224889][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'.
[  479.234678][T14947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2319'.
[  479.369962][T14955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2320'.
[  479.620827][T14961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2322'.
[  479.791503][T14975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.800064][T14973] syzkaller0: entered promiscuous mode
[  479.822010][T14973] syzkaller0: entered allmulticast mode
[  479.904611][T14977] tipc: Resetting bearer <eth:syzkaller0>
[  479.983913][T14977] tipc: Disabling bearer <eth:syzkaller0>
[  480.003993][T14985] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2327'.
[  480.281121][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'.
[  480.669275][T15024] wg1 speed is unknown, defaulting to 1000
[  480.740222][T15029] syzkaller1: entered promiscuous mode
[  480.748856][T15029] syzkaller1: entered allmulticast mode
[  480.927241][T15033] netlink: 'syz.4.2340': attribute type 16 has an invalid length.
[  481.395267][T15046] tipc: Enabling of bearer <“dp:s> rejected, media not registered
[  481.501012][T15061] wg1 speed is unknown, defaulting to 1000
[  482.000979][T15085] __nla_validate_parse: 2 callbacks suppressed
[  482.000996][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'.
[  482.079384][T15094] netlink: 'syz.1.2356': attribute type 1 has an invalid length.
[  482.131974][T15095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2356'.
[  482.253015][T15092] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  482.261212][T15092] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  482.296912][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2356'.
[  482.365810][T15104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'.
[  482.459749][T15110] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2359'.
[  482.471813][T15110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2359'.
[  482.483353][T15095] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  482.545419][T15095] bond10 (unregistering): Released all slaves
[  482.658141][T15106] erspan1: entered allmulticast mode
[  483.576810][T15133] wg1 speed is unknown, defaulting to 1000
[  483.628575][T15121] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2360'.
[  483.990024][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2367'.
[  484.174829][T15159] syzkaller0: entered promiscuous mode
[  484.221396][T15159] syzkaller0: entered allmulticast mode
[  484.506670][T15173] netlink: 'syz.2.2364': attribute type 2 has an invalid length.
[  484.590585][T15179] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2372'.
[  484.619899][T15170] wg1 speed is unknown, defaulting to 1000
[  484.832571][T15187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'.
[  485.321062][T15174] wg1 speed is unknown, defaulting to 1000
[  485.491753][T15210] sctp: [Deprecated]: syz.4.2378 (pid 15210) Use of int in max_burst socket option.
[  485.491753][T15210] Use struct sctp_assoc_value instead
[  485.986022][T15231] netlink: 'syz.3.2385': attribute type 1 has an invalid length.
[  486.097299][T15231] 8021q: adding VLAN 0 to HW filter on device bond5
[  486.179229][T15237] ip6erspan0: entered promiscuous mode
[  486.198927][T15243] xt_check_target: 55 callbacks suppressed
[  486.198954][T15243] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  486.253217][T15237] bond5: (slave ip6erspan0): making interface the new active one
[  486.300128][T15237] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[  486.742318][T15263] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0
[  486.861923][T15258] wg1 speed is unknown, defaulting to 1000
[  486.958392][T15274] netlink: 'syz.0.2397': attribute type 3 has an invalid length.
[  487.092275][T15278] __nla_validate_parse: 4 callbacks suppressed
[  487.092293][T15278] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2399'.
[  487.229988][T15280] wg1 speed is unknown, defaulting to 1000
[  487.599366][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'.
[  487.609015][T15291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.126992][T15303] wg1 speed is unknown, defaulting to 1000
[  488.349581][T15309] netlink: 'syz.4.2407': attribute type 1 has an invalid length.
[  488.494003][T15309] 8021q: adding VLAN 0 to HW filter on device bond13
[  488.506995][T15308] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  488.814716][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2409'.
[  489.002241][T15333] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2412'.
[  489.367371][T15353] sctp: [Deprecated]: syz.1.2416 (pid 15353) Use of int in maxseg socket option.
[  489.367371][T15353] Use struct sctp_assoc_value instead
[  489.431535][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'.
[  489.439817][T15352] wg1 speed is unknown, defaulting to 1000
[  489.460027][T15350] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  489.583071][T15361] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2419'.
[  489.636166][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'.
[  489.713614][T15335] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  489.736848][T15335] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  489.815677][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2418'.
[  490.313057][T15391] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2425'.
[  490.413995][T15395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2427'.
[  490.793195][T15405] netlink: get zone limit has 8 unknown bytes
[  490.810730][T15405] netlink: get zone limit has 8 unknown bytes
[  490.822847][T15405] netlink: get zone limit has 8 unknown bytes
[  490.842307][T15405] netlink: get zone limit has 8 unknown bytes
[  490.862134][T15405] netlink: get zone limit has 8 unknown bytes
[  490.897109][T15405] netlink: get zone limit has 8 unknown bytes
[  490.914224][T15405] netlink: get zone limit has 8 unknown bytes
[  490.932087][T15405] netlink: get zone limit has 8 unknown bytes
[  491.514025][T15435] wg1 speed is unknown, defaulting to 1000
[  492.334948][T15459] __nla_validate_parse: 3 callbacks suppressed
[  492.334966][T15459] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2445'.
[  492.488611][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'.
[  492.528133][T15464] smc: removing ib device !yz!
[  492.617094][T15471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'.
[  492.783332][T15471] vlan0: entered promiscuous mode
[  492.799769][T15471] macvtap0: entered promiscuous mode
[  493.095767][T15475] syzkaller0: entered promiscuous mode
[  493.102364][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2450'.
[  493.125383][T15475] syzkaller0: entered allmulticast mode
[  493.214742][T15484] vlan0: entered promiscuous mode
[  493.219921][T15484] syz_tun: entered promiscuous mode
[  494.402582][T15496] xt_TPROXY: Can be used only with -p tcp or -p udp
[  494.600603][T15489] wg1: entered promiscuous mode
[  494.606048][T15489] wg1: entered allmulticast mode
[  495.305174][T15513] xt_TCPMSS: Only works on TCP SYN packets
[  495.389940][T15516] netlink: 'syz.1.2458': attribute type 13 has an invalid length.
[  496.946712][   T10] wg1 speed is unknown, defaulting to 1000
[  496.954029][   T10] syz0: Port: 1 Link ACTIVE
[  496.958616][T15513] syz_tun: entered promiscuous mode
[  496.976444][T15513] syz_tun: left promiscuous mode
[  497.008455][T15516] 0ªî{X¹¦: refused to change device tx_queue_len
[  497.032031][T15516] net_ratelimit: 25 callbacks suppressed
[  497.032050][T15516] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  497.109839][T15528] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2463'.
[  497.338692][T15540] netlink: 'syz.1.2466': attribute type 11 has an invalid length.
[  497.356243][T15540] netlink: 'syz.1.2466': attribute type 8 has an invalid length.
[  497.457942][T15543] wg1 speed is unknown, defaulting to 1000
[  497.526325][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'.
[  497.543306][T15553] wg1 speed is unknown, defaulting to 1000
[  497.611542][T15554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2470'.
[  497.894118][T15565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'.
[  497.918477][T15565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2471'.
[  498.376999][T15586] netlink: 'syz.1.2477': attribute type 10 has an invalid length.
[  498.422709][T15586] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2477'.
[  498.566330][T15583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2477'.
[  498.579336][T15596] netlink: 'syz.0.2479': attribute type 1 has an invalid length.
[  498.606866][T15583] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2477'.
[  498.638625][T15596] bond11: entered promiscuous mode
[  498.650315][T15596] bond11: entered allmulticast mode
[  498.656758][T15596] 8021q: adding VLAN 0 to HW filter on device bond11
[  498.694103][T15586] bond0: entered promiscuous mode
[  498.699466][T15586] bond_slave_0: entered promiscuous mode
[  498.729995][T15586] bond_slave_1: entered promiscuous mode
[  498.738585][T15586] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.747144][T15586] bridge0: port 3(bond0) entered blocking state
[  498.776376][T15586] bridge0: port 3(bond0) entered disabled state
[  498.791858][T15586] bond0: entered allmulticast mode
[  498.797416][T15586] bond_slave_0: entered allmulticast mode
[  498.803532][T15586] bond_slave_1: entered allmulticast mode
[  499.168492][T15609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2481'.
[  499.187438][T15609] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2481'.
[  499.268963][T15606] wg1 speed is unknown, defaulting to 1000
[  499.383424][T15620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2483'.
[  499.536232][T15607] wg1 speed is unknown, defaulting to 1000
[  499.679211][T15621] wg1 speed is unknown, defaulting to 1000
[  499.757898][T15619] wg1 speed is unknown, defaulting to 1000
[  500.055200][T15641] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000
[  500.465436][T15662] netlink: 'syz.1.2491': attribute type 11 has an invalid length.
[  500.481823][T15662] netlink: 'syz.1.2491': attribute type 11 has an invalid length.
[  500.716075][T15658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  500.880416][T15666] Bluetooth: MGMT ver 1.23
[  500.914702][T15669] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  500.916286][T15666] geneve3: entered promiscuous mode
[  500.934736][T11754] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.964573][T11754] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.992480][T11754] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.019398][T11754] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.212439][T15689] netlink: 'syz.4.2498': attribute type 1 has an invalid length.
[  501.229921][T15691] ip6gre0: entered promiscuous mode
[  501.528107][T15711] wg1 speed is unknown, defaulting to 1000
[  501.565148][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.839747][T15726] bond0: Device is already in use.
[  501.849151][T15726] veth0: entered promiscuous mode
[  501.863378][T15725] veth0: left promiscuous mode
[  501.863582][T15718] wg1 speed is unknown, defaulting to 1000
[  502.088690][T15742] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR
[  502.904554][T15796] __nla_validate_parse: 9 callbacks suppressed
[  502.904573][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'.
[  503.609477][T15841] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  503.789589][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2538'.
[  503.876176][T15851] netlink: 'syz.0.2540': attribute type 10 has an invalid length.
[  503.890968][T15851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2540'.
[  503.941562][T15851] team0: Failed to send options change via netlink (err -105)
[  503.959470][T15851] team0: Port device geneve0 added
[  504.141877][T15866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2544'.
[  504.222249][T15868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2543'.
[  504.326228][T15873] bridge_slave_0: entered promiscuous mode
[  504.388952][T15875] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  504.883877][T15890] netlink: 996 bytes leftover after parsing attributes in process `syz.0.2549'.
[  505.122682][T15894] syzkaller1: entered promiscuous mode
[  505.128232][T15894] syzkaller1: entered allmulticast mode
[  505.233285][T15898] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  505.895877][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2555'.
[  506.058548][T15909] netlink: 'syz.0.2557': attribute type 1 has an invalid length.
[  506.105010][T15909] 8021q: adding VLAN 0 to HW filter on device bond12
[  506.129164][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2557'.
[  506.167907][T15909] 8021q: adding VLAN 0 to HW filter on device bond12
[  506.189704][T15909] bond12: (slave wlan0): making interface the new active one
[  506.213414][T15909] bond12: (slave wlan0): Enslaving as an active interface with an up link
[  506.341729][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2560'.
[  506.371262][T15920] openvswitch: netlink: Flow key attr not present in new flow.
[  506.761618][T15931] vlan0: entered promiscuous mode
[  506.767009][T15931] geneve1: entered promiscuous mode
[  506.773023][T15931] vlan0: entered allmulticast mode
[  506.779059][T15931] geneve1: entered allmulticast mode
[  506.804888][T15931] netlink: 'syz.1.2562': attribute type 13 has an invalid length.
[  506.842931][T15931] lo: entered promiscuous mode
[  506.854893][T15931] lo: entered allmulticast mode
[  506.876392][T15931] tunl0: entered promiscuous mode
[  506.888437][T15931] tunl0: entered allmulticast mode
[  506.901726][T15931] gre0: entered promiscuous mode
[  506.914640][T15931] gre0: entered allmulticast mode
[  506.947130][T15931] 0ªî{X¹¦: entered promiscuous mode
[  507.046295][T15931] erspan0: entered promiscuous mode
[  507.147658][T15931] erspan0: entered allmulticast mode
[  507.219266][T15931] ip_vti0: entered promiscuous mode
[  507.224765][T15931] ip_vti0: entered allmulticast mode
[  507.230700][T15931] ip6_vti0: entered promiscuous mode
[  507.236550][T15931] ip6_vti0: entered allmulticast mode
[  507.243411][T15931] sit0: entered allmulticast mode
[  507.249122][T15931] ip6tnl0: entered promiscuous mode
[  507.254725][T15931] ip6tnl0: entered allmulticast mode
[  507.260522][T15931] ip6gre0: entered promiscuous mode
[  507.266689][T15931] ip6gre0: entered allmulticast mode
[  507.272536][T15931] syz_tun: entered promiscuous mode
[  507.277902][T15931] syz_tun: entered allmulticast mode
[  507.357324][T15931] ip6gretap0: entered promiscuous mode
[  507.363316][T15931] ip6gretap0: entered allmulticast mode
[  507.425358][T15931] bridge0: entered promiscuous mode
[  507.430775][T15931] bridge0: entered allmulticast mode
[  507.439521][T15931] team0: entered promiscuous mode
[  507.445396][T15931] team_slave_0: entered promiscuous mode
[  507.451712][T15931] team_slave_1: entered promiscuous mode
[  507.458057][T15931] team0: entered allmulticast mode
[  507.463870][T15931] team_slave_0: entered allmulticast mode
[  507.470063][T15931] team_slave_1: entered allmulticast mode
[  507.476870][T15931] nlmon0: entered promiscuous mode
[  507.482253][T15931] nlmon0: entered allmulticast mode
[  507.488130][T15931] caif0: entered promiscuous mode
[  507.493413][T15931] caif0: entered allmulticast mode
[  507.499256][T15931] batadv0: entered promiscuous mode
[  507.505208][T15931] batadv0: entered allmulticast mode
[  507.511479][T15931] vxcan0: entered promiscuous mode
[  507.516879][T15931] vxcan0: entered allmulticast mode
[  507.523634][T15931] vxcan1: entered promiscuous mode
[  507.529266][T15931] vxcan1: entered allmulticast mode
[  507.536050][T15931] veth0: entered promiscuous mode
[  507.541592][T15931] veth0: entered allmulticast mode
[  507.547497][T15931] veth1: entered promiscuous mode
[  507.552934][T15931] veth1: entered allmulticast mode
[  507.559803][T15931] wg2: entered promiscuous mode
[  507.566037][T15931] wg2: entered allmulticast mode
[  507.572164][T15931] veth0_to_bridge: entered promiscuous mode
[  507.578905][T15931] veth0_to_bridge: entered allmulticast mode
[  507.587061][T15931] veth1_to_bridge: entered promiscuous mode
[  507.593464][T15931] veth1_to_bridge: entered allmulticast mode
[  507.601531][T15931] veth0_to_bond: entered promiscuous mode
[  507.607530][T15931] veth0_to_bond: entered allmulticast mode
[  507.622377][T15931] veth1_to_bond: entered promiscuous mode
[  507.628582][T15931] veth1_to_bond: entered allmulticast mode
[  507.649623][T15931] veth0_to_team: entered promiscuous mode
[  507.655940][T15931] veth0_to_team: entered allmulticast mode
[  507.672038][T15931] veth1_to_team: entered promiscuous mode
[  507.675346][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'.
[  507.677974][T15931] veth1_to_team: entered allmulticast mode
[  507.698576][T15931] veth0_to_batadv: entered promiscuous mode
[  507.705041][T15931] veth0_to_batadv: entered allmulticast mode
[  507.712242][T15931] batadv_slave_0: entered promiscuous mode
[  507.718158][T15931] batadv_slave_0: entered allmulticast mode
[  507.724684][T15931] xfrm0: entered promiscuous mode
[  507.729737][T15931] xfrm0: entered allmulticast mode
[  507.735743][T15931] veth0_to_hsr: entered promiscuous mode
[  507.741491][T15931] veth0_to_hsr: entered allmulticast mode
[  507.747727][T15931] hsr_slave_0: entered allmulticast mode
[  507.754157][T15931] veth1_to_hsr: entered promiscuous mode
[  507.759893][T15931] veth1_to_hsr: entered allmulticast mode
[  507.766136][T15931] hsr_slave_1: entered allmulticast mode
[  507.775084][T15931] hsr0: entered promiscuous mode
[  507.780330][T15931] hsr0: entered allmulticast mode
[  507.785786][T15931] veth1_virt_wifi: entered promiscuous mode
[  507.791814][T15931] veth1_virt_wifi: entered allmulticast mode
[  507.798308][T15931] veth0_virt_wifi: entered promiscuous mode
[  507.804401][T15931] veth0_virt_wifi: entered allmulticast mode
[  507.810984][T15931] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  507.818474][T15931] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  507.827125][T15931] veth1_macvtap: entered allmulticast mode
[  507.833742][T15931] veth0_macvtap: entered allmulticast mode
[  507.840461][T15931] macvtap0: entered allmulticast mode
[  507.846396][T15931] geneve0: entered promiscuous mode
[  507.851859][T15931] geneve0: entered allmulticast mode
[  507.858225][T15931] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  507.921256][T15931] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  507.928838][T15931] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  507.989034][T15931] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  507.998100][T15931] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  508.059468][T15931] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[  508.067004][T15931] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  508.128299][T15931] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  508.136114][T15931] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  508.143741][T15931] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  508.150891][T15931] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  508.158782][T15931] macvlan2: entered promiscuous mode
[  508.164195][T15931] macvlan2: entered allmulticast mode
[  508.169931][T15931] ip6tnl1: entered promiscuous mode
[  508.183942][T15931] ip6tnl1: entered allmulticast mode
[  508.190034][T15931] æÿîÿ: entered allmulticast mode
[  508.196052][T15931] bridge1: entered promiscuous mode
[  508.201546][T15931] bridge1: entered allmulticast mode
[  508.207215][T15931] gre1: entered promiscuous mode
[  508.212348][T15931] gre1: entered allmulticast mode
[  508.217901][T15931] bond1: entered promiscuous mode
[  508.224320][T15931] bond2: entered promiscuous mode
[  508.229479][T15931] bond1: entered allmulticast mode
[  508.234692][T15931] bond2: entered allmulticast mode
[  508.240781][T15931] gretap1: entered promiscuous mode
[  508.246035][T15931] gretap1: entered allmulticast mode
[  508.299222][T15931] vxlan0: entered promiscuous mode
[  508.305070][T15931] vxlan0: entered allmulticast mode
[  508.310648][T15931] veth2: entered promiscuous mode
[  508.315936][T15931] veth2: entered allmulticast mode
[  508.321576][T15931] veth3: entered promiscuous mode
[  508.341247][T15931] veth3: entered allmulticast mode
[  508.346949][T15931] gre2: entered promiscuous mode
[  508.355718][T15931] gre2: entered allmulticast mode
[  508.363510][T15931] bond3: entered promiscuous mode
[  508.368817][T15931] bond3: entered allmulticast mode
[  508.375269][T15931] ip6gretap0.0: entered promiscuous mode
[  508.384348][T15931] ip6gretap0.0: entered allmulticast mode
[  508.391084][T15931] bridge3: entered promiscuous mode
[  508.396605][T15931] bridge3: entered allmulticast mode
[  508.402902][T15931] @: entered promiscuous mode
[  508.407723][T15931] @: entered allmulticast mode
[  508.413330][T15931] bond4: entered allmulticast mode
[  508.418777][T15931] bridge4: entered promiscuous mode
[  508.424261][T15931] bridge4: entered allmulticast mode
[  508.429842][T15931] bond5: entered promiscuous mode
[  508.435820][T15931] bond5: entered allmulticast mode
[  508.441519][T15931] sit1: entered promiscuous mode
[  508.446562][T15931] sit1: entered allmulticast mode
[  508.452120][T15931] vti0: entered promiscuous mode
[  508.457146][T15931] vti0: entered allmulticast mode
[  508.463044][T15931] ip6gretap1: entered promiscuous mode
[  508.468597][T15931] ip6gretap1: entered allmulticast mode
[  508.532089][T15931] bridge5: entered allmulticast mode
[  508.537814][T15931] vlan2: entered promiscuous mode
[  508.543290][T15931] vlan2: entered allmulticast mode
[  508.548816][T15931] gretap0: entered promiscuous mode
[  508.555013][T15931] gretap0: entered allmulticast mode
[  508.560680][T15931] : entered allmulticast mode
[  508.566304][T15931] bond6: entered allmulticast mode
[  508.573376][T15931] mac80211_hwsim hwsim11 nicvf0: entered promiscuous mode
[  508.590011][T15931] mac80211_hwsim hwsim11 nicvf0: entered allmulticast mode
[  508.597842][T15931] sit2: entered promiscuous mode
[  508.604492][T15931] sit2: entered allmulticast mode
[  508.610049][T15931] ip6tnl2: entered promiscuous mode
[  508.615723][T15931] ip6tnl2: entered allmulticast mode
[  508.621573][T15931] sit3: entered promiscuous mode
[  508.626549][T15931] sit3: entered allmulticast mode
[  508.632404][T15931] gre3: entered promiscuous mode
[  508.637361][T15931] gre3: entered allmulticast mode
[  508.642904][T15931] gretap2: entered allmulticast mode
[  508.648722][T15931] macsec0: entered promiscuous mode
[  508.654140][T15931] macsec0: entered allmulticast mode
[  508.659719][T15931] ip6gretap2: entered promiscuous mode
[  508.665416][T15931] ip6gretap2: entered allmulticast mode
[  508.671448][T15931] bond7: entered allmulticast mode
[  508.676845][T15931] ip6tnl3: entered promiscuous mode
[  508.682938][T15931] m1Ie5n: entered allmulticast mode
[  508.688756][T15931] bond8: entered promiscuous mode
[  508.693920][T15931] bond8: entered allmulticast mode
[  508.699336][T15931] bond9: entered promiscuous mode
[  508.704606][T15931] bond9: entered allmulticast mode
[  508.739342][T15958] bond14: option all_slaves_active: invalid value (13)
[  508.750203][T15958] bond14 (unregistering): Released all slaves
[  508.816626][T15988] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2571'.
[  508.981906][T15998] netlink: 'syz.4.2573': attribute type 1 has an invalid length.
[  509.038282][T15998] 8021q: adding VLAN 0 to HW filter on device bond14
[  509.064105][T16002] vlan0: entered promiscuous mode
[  509.069267][T16002] bond14: entered promiscuous mode
[  509.074679][T16002] vlan0: entered allmulticast mode
[  509.079796][T16002] bond14: entered allmulticast mode
[  510.912644][T15998] bond14: (slave gretap3): making interface the new active one
[  510.920381][T15998] gretap3: entered promiscuous mode
[  510.927573][T15998] gretap3: entered allmulticast mode
[  510.935866][T15998] bond14: (slave gretap3): Enslaving as an active interface with an up link
[  510.961389][T16012] netlink: 'syz.2.2576': attribute type 29 has an invalid length.
[  511.121265][T16026] rdma_rxe: rxe_newlink: failed to add xfrm0
[  511.140955][T16025] netlink: zone id is out of range
[  511.151270][T16025] netlink: zone id is out of range
[  511.156947][T16025] netlink: set zone limit has 8 unknown bytes
[  511.228330][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2583'.
[  511.395658][T16050] syzkaller0: entered promiscuous mode
[  511.402289][T16050] syzkaller0: entered allmulticast mode
[  511.941857][T16025] netlink: 'syz.1.2579': attribute type 1 has an invalid length.
[  511.959983][T16025] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2579'.
[  511.982347][T16025] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[  512.277512][T16082] lo: left promiscuous mode
[  512.293008][T16082] lo: left allmulticast mode
[  512.305586][T16082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  512.324988][T16084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2599'.
[  512.570256][T16104] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  512.589240][T16110] pim6reg0: tun_chr_ioctl cmd 1074025675
[  512.604209][T16110] pim6reg0: persist disabled
[  512.706305][T16118] 8021q: adding VLAN 0 to HW filter on device bond11
[  512.914827][T16126] bond11: (slave ip6gretap3): making interface the new active one
[  512.925537][T16126] bond11: (slave ip6gretap3): Enslaving as an active interface with an up link
[  513.029948][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'.
[  513.149045][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'.
[  513.246393][T16139] netlink: 'syz.0.2609': attribute type 4 has an invalid length.
[  513.387449][T16146] netlink: 'syz.0.2611': attribute type 1 has an invalid length.
[  513.420895][T16146] bond13: entered promiscuous mode
[  513.426977][T16149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2612'.
[  513.451731][T16146] 8021q: adding VLAN 0 to HW filter on device bond13
[  513.465807][T16149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2612'.
[  513.477840][T16149] netlink: 584 bytes leftover after parsing attributes in process `syz.2.2612'.
[  513.502501][T16151] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  513.576789][T16146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2611'.
[  513.813122][T16168] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20004
[  513.830993][T16162] wg1 speed is unknown, defaulting to 1000
[  513.939576][T16176] __nla_validate_parse: 1 callbacks suppressed
[  513.939593][T16176] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2621'.
[  514.077697][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2625'.
[  514.107870][T16187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2625'.
[  514.265275][T16197] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2628'.
[  514.310775][T16200] ip6gre0: left promiscuous mode
[  514.320904][T16200] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  514.387758][T16162] netlink: 'syz.0.2618': attribute type 1 has an invalid length.
[  514.395935][T16162] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2618'.
[  514.402494][T16206] netlink: 'syz.4.2632': attribute type 1 has an invalid length.
[  514.457866][T16206] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2632'.
[  514.559548][T16213] netlink: 'syz.2.2633': attribute type 3 has an invalid length.
[  514.591389][T16213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2633'.
[  514.790188][T16228] x_tables: duplicate underflow at hook 2
[  514.995765][T16233] erspan0: entered promiscuous mode
[  515.276335][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2642'.
[  515.503257][T16263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2643'.
[  515.572897][T16265] tipc: Resetting bearer <eth:syzkaller0>
[  515.618155][T16268] wg1 speed is unknown, defaulting to 1000
[  515.830330][T16279] netlink: 'syz.0.2646': attribute type 1 has an invalid length.
[  515.838432][T16279] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2646'.
[  515.892496][T16284] netlink: 'syz.3.2648': attribute type 4 has an invalid length.
[  515.945783][T16284] netlink: 'syz.3.2648': attribute type 8 has an invalid length.
[  515.978380][T16284] netlink: 'syz.3.2648': attribute type 1 has an invalid length.
[  516.004249][T16284] NCSI netlink: No device for ifindex 0
[  516.048020][T16284] NCSI netlink: No device for ifindex 0
[  516.204304][T16298] block nbd1: server does not support multiple connections per device.
[  516.326100][T16298] block nbd1: shutting down sockets
[  516.436983][T16297] block nbd1: server does not support multiple connections per device.
[  516.456622][T16297] block nbd1: shutting down sockets
[  516.472003][T16284] NCSI netlink: No device for ifindex 0
[  516.482461][T16284] NCSI netlink: No device for ifindex 0
[  516.500776][T16284] NCSI netlink: No device for ifindex 0
[  516.507693][T16284] NCSI netlink: No device for ifindex 0
[  516.529468][T16284] NCSI netlink: No device for ifindex 0
[  516.535980][T16284] NCSI netlink: No device for ifindex 0
[  516.545071][T16284] NCSI netlink: No device for ifindex 0
[  516.551118][T16284] NCSI netlink: No device for ifindex 0
[  516.557503][T16284] NCSI netlink: No device for ifindex 0
[  516.564118][T16284] NCSI netlink: No device for ifindex 0
[  516.570064][T16284] NCSI netlink: No device for ifindex 0
[  516.584020][T16284] NCSI netlink: No device for ifindex 0
[  516.608503][T16284] NCSI netlink: No device for ifindex 0
[  516.619037][T16284] NCSI netlink: No device for ifindex 0
[  516.625353][T16284] NCSI netlink: No device for ifindex 0
[  516.631310][T16284] NCSI netlink: No device for ifindex 0
[  516.637140][T16284] NCSI netlink: No device for ifindex 0
[  516.643307][T16284] NCSI netlink: No device for ifindex 0
[  516.649149][T16284] NCSI netlink: No device for ifindex 0
[  516.655743][T16284] NCSI netlink: No device for ifindex 0
[  516.661713][T16284] NCSI netlink: No device for ifindex 0
[  516.697838][T16284] NCSI netlink: No device for ifindex 0
[  516.800682][T16334] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  516.853725][T16338] wg1 speed is unknown, defaulting to 1000
[  517.232745][T16360] wg1 speed is unknown, defaulting to 1000
[  517.387872][T16366] wg1 speed is unknown, defaulting to 1000
[  517.389441][T16370] v: renamed from dummy0
[  517.949678][T16389] validate_nla: 70 callbacks suppressed
[  517.949698][T16389] netlink: 'syz.2.2673': attribute type 1 has an invalid length.
[  518.310133][T16410] netlink: 'syz.3.2678': attribute type 1 has an invalid length.
[  518.323233][T16414] netlink: 'syz.3.2678': attribute type 27 has an invalid length.
[  518.590977][T16425] netlink: 'syz.1.2680': attribute type 1 has an invalid length.
[  518.753790][T16417] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  518.789744][T16432] netlink: 'syz.1.2681': attribute type 4 has an invalid length.
[  518.791844][T16417] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  518.831484][T16417] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  519.218628][T16450] bridge0: entered allmulticast mode
[  519.434241][T16467] __nla_validate_parse: 33 callbacks suppressed
[  519.434258][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'.
[  519.543163][T16466] netlink: 'syz.1.2689': attribute type 11 has an invalid length.
[  519.595545][T16471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2689'.
[  519.631049][T16469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2687'.
[  519.643139][T16466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2689'.
[  520.263538][T16514] netlink: 'syz.2.2696': attribute type 10 has an invalid length.
[  520.273467][T16514] 8021q: adding VLAN 0 to HW filter on device team0
[  520.307931][T16514] bond0: (slave team0): Enslaving as an active interface with an up link
[  520.410086][T16522] netlink: 'syz.3.2699': attribute type 23 has an invalid length.
[  520.518941][T16525] bridge7: entered promiscuous mode
[  520.524999][T16529] netlink: 'syz.2.2701': attribute type 1 has an invalid length.
[  520.542483][T16525] bridge7: entered allmulticast mode
[  520.576529][T16525] team0: Port device bridge7 added
[  520.597329][T16527] bridge8: entered promiscuous mode
[  520.623287][T16527] bridge8: entered allmulticast mode
[  520.641460][T16527] team0: Port device bridge8 added
[  520.650036][T16531] bridge0: port 4(team0) entered blocking state
[  520.662056][T16531] bridge0: port 4(team0) entered disabled state
[  520.772152][T16537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2702'.
[  520.928021][T16540] wg1 speed is unknown, defaulting to 1000
[  521.000087][T16556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2708'.
[  521.084255][T16552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.331395][T16556] wg1 speed is unknown, defaulting to 1000
[  521.349304][T16570] netlink: 'syz.3.2710': attribute type 13 has an invalid length.
[  521.382331][T16572] netlink: 'syz.4.2711': attribute type 6 has an invalid length.
[  521.452658][T16578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2713'.
[  521.546704][T16579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  521.568166][T16569] delete_channel: no stack
[  521.708343][T16585] wg1 speed is unknown, defaulting to 1000
[  521.810051][T16596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2716'.
[  521.826778][T16595] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2717'.
[  522.237561][T16616] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2723'.
[  522.784075][T16660] Cannot find add_set index 3 as target
[  523.506994][T16676] delete_channel: no stack
[  524.125171][T16705] bond12 (unregistering): Released all slaves
[  524.320245][T16710] netlink: set zone limit has 4 unknown bytes
[  524.389634][T16724] validate_nla: 2 callbacks suppressed
[  524.389653][T16724] netlink: 'syz.2.2749': attribute type 1 has an invalid length.
[  524.463253][T16726] syzkaller0: entered promiscuous mode
[  524.469007][T16726] syzkaller0: entered allmulticast mode
[  524.534956][T16726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  524.546593][T16725] tipc: Resetting bearer <eth:syzkaller0>
[  524.594217][T16725] tipc: Disabling bearer <eth:syzkaller0>
[  525.336842][T16776] IPVS: set_ctl: invalid protocol: 47 172.20.20.21:0
[  525.869744][T16809] __nla_validate_parse: 3 callbacks suppressed
[  525.869763][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2777'.
[  525.886570][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2777'.
[  525.900710][T16809] netlink: 'syz.4.2777': attribute type 3 has an invalid length.
[  526.028789][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2781'.
[  526.144976][T16817] 8021q: adding VLAN 0 to HW filter on device bond6
[  526.163578][T16821] bond0: left allmulticast mode
[  526.171304][T16821] bond_slave_0: left allmulticast mode
[  526.209380][T16821] bond_slave_1: left allmulticast mode
[  526.216783][T16821] bridge0: port 3(bond0) entered disabled state
[  526.236980][T16821] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.250093][T16821] bond6: (slave bond0): Enslaving as an active interface with an up link
[  526.427826][T16817] bond6 (unregistering): (slave bond0): Releasing backup interface
[  526.439722][T16817] bond6 (unregistering): Released all slaves
[  526.501412][T16832] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  526.510333][T16832] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  526.579782][T16827] wg1 speed is unknown, defaulting to 1000
[  526.888466][T16853] wg1 speed is unknown, defaulting to 1000
[  526.895451][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'.
[  526.931483][T16856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2790'.
[  526.952330][T16858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2790'.
[  526.961454][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2790'.
[  526.961487][T16856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2790'.
[  527.034509][T16858] bond15: entered promiscuous mode
[  527.040267][T16858] 8021q: adding VLAN 0 to HW filter on device bond15
[  527.189746][T16858] bond15 (unregistering): Released all slaves
[  527.565349][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'.
[  527.582945][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'.
[  527.885543][T16899] netlink: 'syz.4.2801': attribute type 1 has an invalid length.
[  528.032371][T16916] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  528.085493][T16898] netlink: 'syz.4.2801': attribute type 1 has an invalid length.
[  528.275609][T16929] netlink: 'syz.2.2808': attribute type 89 has an invalid length.
[  528.680861][T16958] netlink: 'syz.4.2813': attribute type 13 has an invalid length.
[  528.878249][T16960] wg1 speed is unknown, defaulting to 1000
[  528.895141][T16970] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  529.037367][T16973] bond15: option xmit_hash_policy: invalid value (10)
[  529.047939][T16973] bond15 (unregistering): Released all slaves
[  529.535129][T16997] bridge0: port 3(bond0) entered disabled state
[  529.566631][T16997] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.595193][T16997] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.754404][T17014] netlink: 'syz.2.2827': attribute type 23 has an invalid length.
[  530.188044][T17056] ip6gre1: entered promiscuous mode
[  530.204674][T17056] ip6gre1: entered allmulticast mode
[  530.213547][ T9936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  530.221838][ T9936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  530.241393][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  530.256265][T17062] openvswitch: netlink: Multiple metadata blocks provided
[  530.287395][T17066] tc_dump_action: action bad kind
[  530.461521][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  530.525649][T17084] batadv1: entered promiscuous mode
[  530.591642][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  530.766675][T17100] batman_adv: batadv0: Adding interface: vlan1
[  530.779001][T17100] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.823594][T17100] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active
[  530.825026][T17105] netlink: 'syz.4.2853': attribute type 1 has an invalid length.
[  530.926484][T17105] bond15: entered promiscuous mode
[  530.944843][T17105] bond15: entered allmulticast mode
[  530.962817][T17105] 8021q: adding VLAN 0 to HW filter on device bond15
[  530.998113][T17108] macvlan6: entered promiscuous mode
[  531.012144][T17108] macvlan6: entered allmulticast mode
[  531.025451][T17108] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  531.325460][T17133] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  531.362887][T17138] __nla_validate_parse: 129 callbacks suppressed
[  531.362906][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2863'.
[  531.411967][T17139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.422235][T17139] syzkaller0: entered promiscuous mode
[  531.440833][T17139] syzkaller0: entered allmulticast mode
[  531.487390][T17139] tipc: Resetting bearer <eth:syzkaller0>
[  531.503552][T17137] tipc: Resetting bearer <eth:syzkaller0>
[  531.529727][T17137] tipc: Disabling bearer <eth:syzkaller0>
[  531.961103][T17178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2873'.
[  532.022592][T17182] syzkaller0: entered promiscuous mode
[  532.029073][T17182] syzkaller0: entered allmulticast mode
[  532.037583][T11754] 0: reclassify loop, rule prio 0, protocol 700
[  532.124037][T17181] netlink: 'syz.3.2875': attribute type 11 has an invalid length.
[  532.215243][T17186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2876'.
[  532.237921][T17166] tipc: Trying to set illegal importance in message
[  532.639594][T17165] lec:lec_atm_close: lec0: Shut down!
[  532.979564][T17246] netlink: 'syz.0.2889': attribute type 1 has an invalid length.
[  533.027622][T17246] bond14: entered promiscuous mode
[  533.068398][T17246] 8021q: adding VLAN 0 to HW filter on device bond14
[  533.173541][T17261] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  533.266250][T17261] vlan3: entered promiscuous mode
[  533.292025][T17261] vlan3: entered allmulticast mode
[  533.580250][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'.
[  533.599760][T17280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2896'.
[  534.291371][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  534.325252][T17323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'.
[  534.422764][T17329] netlink: 'syz.1.2912': attribute type 10 has an invalid length.
[  534.430631][T17329] team0: left promiscuous mode
[  534.438499][T17328] netlink: 'syz.1.2912': attribute type 10 has an invalid length.
[  534.447748][T17329] team0: left allmulticast mode
[  534.453712][T17328] netlink: 'syz.1.2912': attribute type 13 has an invalid length.
[  534.572281][T17328] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  534.580296][T17328] syzkaller0: entered promiscuous mode
[  534.585889][T17328] syzkaller0: entered allmulticast mode
[  534.592155][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  534.905945][T17358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.316212][T17375] wg1 speed is unknown, defaulting to 1000
[  535.340215][T17372] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  535.487107][ T5845] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  535.936057][T17390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2930'.
[  536.059965][T17398] netlink: 996 bytes leftover after parsing attributes in process `syz.0.2931'.
[  536.362387][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  536.372270][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  536.380543][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  536.391321][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  536.398982][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  536.452859][ T5875] bond4: (slave syz_tun): Releasing active interface
[  536.479714][T17401] wg1 speed is unknown, defaulting to 1000
[  536.778767][T17401] chnl_net:caif_netlink_parms(): no params data found
[  536.981422][T17401] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.988701][T17401] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.001786][T17401] bridge_slave_0: entered allmulticast mode
[  537.008748][T17401] bridge_slave_0: entered promiscuous mode
[  537.018507][T17401] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.040217][T17401] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.052564][T17401] bridge_slave_1: entered allmulticast mode
[  537.060667][T17401] bridge_slave_1: entered promiscuous mode
[  537.175420][T17401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.207233][T17401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.298535][T17401] team0: Port device team_slave_0 added
[  537.310937][ T6094] bridge_slave_1: left allmulticast mode
[  537.326116][ T6094] bridge_slave_1: left promiscuous mode
[  537.334308][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.355551][ T6094] bridge_slave_0: left allmulticast mode
[  537.363393][ T6094] bridge_slave_0: left promiscuous mode
[  537.369360][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.679745][T17449] netlink: 'syz.1.2941': attribute type 4 has an invalid length.
[  538.335168][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  538.346010][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.357151][ T6094] bond0 (unregistering): (slave v): Releasing backup interface
[  538.369564][ T6094] bond0 (unregistering): (slave team0): Releasing backup interface
[  538.383144][ T6094] bond0 (unregistering): Released all slaves
[  538.442147][ T5827] Bluetooth: hci5: command tx timeout
[  538.509275][ T6094] bond1 (unregistering): Released all slaves
[  538.636533][ T6094] team0: Port device bond2 removed
[  538.643009][ T6094] bond2 (unregistering): Released all slaves
[  538.769514][ T6094] bond3 (unregistering): Released all slaves
[  538.888990][ T6094] bond4 (unregistering): Released all slaves
[  539.018960][ T6094] bond5 (unregistering): Released all slaves
[  539.032087][T17401] team0: Port device team_slave_1 added
[  539.038002][T17445] netlink: 'syz.1.2941': attribute type 3 has an invalid length.
[  539.046566][T17445] netlink: 'syz.1.2941': attribute type 3 has an invalid length.
[  539.059740][T17452] pim6reg1: entered promiscuous mode
[  539.065409][T17452] pim6reg1: entered allmulticast mode
[  539.307444][ T6094] : left promiscuous mode
[  539.315850][T17474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'.
[  539.432463][ T6094] tipc: Disabling bearer <eth:syzkaller0>
[  539.480572][ T6094] tipc: Left network mode
[  539.481492][T17401] batman_adv: batadv0: Adding interface: batadv_slave_0
[  539.511879][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.566465][T17401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  539.613649][ T6094] IPVS: stopping backup sync thread 15263 ...
[  539.643848][T17401] batman_adv: batadv0: Adding interface: batadv_slave_1
[  539.661647][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  539.713412][T17401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  539.780455][T17492] wg1 speed is unknown, defaulting to 1000
[  540.024360][T17401] hsr_slave_0: entered promiscuous mode
[  540.035980][T17401] hsr_slave_1: entered promiscuous mode
[  540.057027][T17506] sctp: [Deprecated]: syz.4.2955 (pid 17506) Use of int in max_burst socket option deprecated.
[  540.057027][T17506] Use struct sctp_assoc_value instead
[  540.291318][T17513] macsec1: entered promiscuous mode
[  540.297043][T17513] macsec1: entered allmulticast mode
[  540.313027][T17513] veth1_macvtap: entered allmulticast mode
[  540.322302][T17513] veth1_macvtap: left allmulticast mode
[  540.452989][ T1139] bond12: (slave wlan0): link status definitely down, disabling slave
[  540.465789][ T1139] bond12: now running without any active interface!
[  540.523892][ T5827] Bluetooth: hci5: command tx timeout
[  540.573682][ T6094] hsr_slave_0: left promiscuous mode
[  540.585170][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.597470][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.819761][T17533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2962'.
[  541.040628][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'.
[  541.232308][T17545] xt_hashlimit: max too large, truncated to 1048576
[  541.245673][ T6094] smc: removing net device hsr0 with user defined pnetid SYZ2
[  541.506149][ T6094] team0 (unregistering): Port device team_slave_1 removed
[  541.558038][ T6094] team0 (unregistering): Port device team_slave_0 removed
[  542.389385][T17571] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6
[  542.521766][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  542.604784][ T5827] Bluetooth: hci5: command tx timeout
[  542.667825][ T6094] IPVS: stop unused estimator thread 0...
[  542.743769][T17581] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2974'.
[  542.970080][T17592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2977'.
[  543.069694][T17401] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  543.106542][T17401] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  543.142665][T17401] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  543.159645][T17401] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  543.280134][T17603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2982'.
[  543.446945][T17401] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.517215][T17401] 8021q: adding VLAN 0 to HW filter on device team0
[  543.552482][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.559707][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.632922][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.640227][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.718968][T17626] x_tables: duplicate underflow at hook 1
[  543.914593][T17643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2991'.
[  543.930513][T17643] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2991'.
[  544.006913][T17643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2991'.
[  544.033984][T17644] syzkaller0: entered promiscuous mode
[  544.081199][T17644] syzkaller0: entered allmulticast mode
[  544.089167][ T7851] syzkaller0: tun_net_xmit 48
[  544.111874][T17637] syzkaller0: tun_chr_ioctl cmd 2147767520
[  544.274971][T17657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2993'.
[  544.345716][T17657] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  544.684491][ T5827] Bluetooth: hci5: command tx timeout
[  545.455085][T17710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'.
[  545.464381][T17710] openvswitch: netlink: Flow actions attr not present in new flow.
[  546.545367][T17674] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2997'.
[  546.581109][T17401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.742334][T17401] veth0_vlan: entered promiscuous mode
[  546.759466][T17723] netlink: 'syz.3.3005': attribute type 13 has an invalid length.
[  546.773429][T17401] veth1_vlan: entered promiscuous mode
[  546.903362][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3008'.
[  546.913614][T17401] veth0_macvtap: entered promiscuous mode
[  546.924588][T17401] veth1_macvtap: entered promiscuous mode
[  546.945668][T17401] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.034267][T17736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3010'.
[  547.061673][T17401] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.098869][T11750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.142837][T11750] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.163406][T11750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  547.181512][T11750] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  547.245929][T17717] netlink: 'syz.1.3004': attribute type 32 has an invalid length.
[  547.258241][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'.
[  547.313248][T17717] bond12: Setting coupled_control to off (0)
[  547.472108][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3004'.
[  547.525981][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.538716][T17717] netlink: 'syz.1.3004': attribute type 4 has an invalid length.
[  547.547101][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.573312][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'.
[  547.630671][T17717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3004'.
[  547.658959][ T9936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.753047][ T9936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.838408][T17762] wg1 speed is unknown, defaulting to 1000
[  548.347681][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'.
[  548.711565][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  548.722680][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  548.731477][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  548.742061][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  548.753550][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  548.801809][T17782] wg1 speed is unknown, defaulting to 1000
[  549.036165][T17796] ip6tnl0: Caught tx_queue_len zero misconfig
[  549.055660][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3023'.
[  549.306940][T17782] chnl_net:caif_netlink_parms(): no params data found
[  549.514267][ T7851] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.537502][ T7851] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 59676 - 0
[  549.562777][ T7851] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  549.679106][ T7851] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.692194][ T7851] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 59676 - 0
[  549.703780][ T7851] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  549.755934][T17782] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.766903][T17782] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.787138][T17782] bridge_slave_0: entered allmulticast mode
[  549.795439][T17782] bridge_slave_0: entered promiscuous mode
[  549.818390][ T7851] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.830615][ T7851] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 59676 - 0
[  549.844903][ T7851] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  549.859903][T17782] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.870747][T17782] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.880426][T17782] bridge_slave_1: entered allmulticast mode
[  549.893102][T17782] bridge_slave_1: entered promiscuous mode
[  549.909737][ T7851] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.922866][ T7851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 59676 - 0
[  549.935248][ T7851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  549.975989][T17853] xt_CT: No such helper "syz0"
[  550.786020][T17782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.819832][T17782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.841741][ T5827] Bluetooth: hci1: command tx timeout
[  550.890665][T17874] __nla_validate_parse: 4 callbacks suppressed
[  550.890684][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'.
[  550.978508][T17782] team0: Port device team_slave_0 added
[  550.987495][T17874] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3043'.
[  551.020462][T17782] team0: Port device team_slave_1 added
[  551.126667][T17885] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3047'.
[  551.238160][T17782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.238467][T17888] netlink: 'syz.1.3048': attribute type 5 has an invalid length.
[  551.252292][T17782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  551.288739][T17782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.395567][T17888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3048'.
[  551.484745][T17902] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3051'.
[  551.728465][ T7851] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  551.740281][ T7851] ip6gretap1 (unregistering): left allmulticast mode
[  552.003722][ T7851] bond7 (unregistering): (slave erspan1): Releasing active interface
[  552.014956][ T7851] erspan1 (unregistering): left promiscuous mode
[  552.059669][ T7851] bond4 (unregistering): (slave gretap2): Releasing active interface
[  552.082025][ T7851] bond14 (unregistering): (slave gretap3): Releasing active interface
[  552.090643][ T7851] gretap3 (unregistering): left promiscuous mode
[  552.097150][ T7851] gretap3 (unregistering): left allmulticast mode
[  552.263252][ T7851] bond5 (unregistering): (slave bridge3): Releasing active interface
[  552.341528][ T7851] bond9 (unregistering): (slave bridge5): Releasing active interface
[  552.548899][ T7851] team0: Port device bond0 removed
[  552.559845][ T7851] bond0 (unregistering): Released all slaves
[  552.677793][ T7851] bond1 (unregistering): left allmulticast mode
[  552.684791][ T7851] bond1 (unregistering): left promiscuous mode
[  552.702702][ T7851] team0: Port device macvlan2 removed
[  552.713265][ T7851] bond1 (unregistering): Released all slaves
[  552.866132][ T7851] bond2 (unregistering): Released all slaves
[  552.935699][ T5827] Bluetooth: hci1: command tx timeout
[  553.023544][ T7851] bond3 (unregistering): Released all slaves
[  553.141918][ T7851] bond4 (unregistering): Released all slaves
[  553.154389][ T7851] bond5 (unregistering): Released all slaves
[  553.271673][ T7851] bond6 (unregistering): (slave veth5): Releasing active interface
[  553.281268][ T7851] bond6 (unregistering): Released all slaves
[  553.407149][ T7851] bond7 (unregistering): Released all slaves
[  553.517287][ T7851] bond8 (unregistering): Released all slaves
[  553.529479][ T7851] bond9 (unregistering): Released all slaves
[  553.666308][ T7851] bond10 (unregistering): (slave bond11): Releasing backup interface
[  553.677722][ T7851] bond10 (unregistering): Released all slaves
[  553.801459][ T7851] bond11 (unregistering): Released all slaves
[  553.915416][ T7851] bond12 (unregistering): Released all slaves
[  554.047426][ T7851] bond13 (unregistering): Released all slaves
[  554.175988][ T7851] bond14 (unregistering): Released all slaves
[  554.297776][ T7851] bond15 (unregistering): Released all slaves
[  554.310858][T17782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  554.318646][T17782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.345761][T17782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.578103][ T7851] : left promiscuous mode
[  554.598868][T17950] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  554.639541][T17782] hsr_slave_0: entered promiscuous mode
[  554.647792][T17782] hsr_slave_1: entered promiscuous mode
[  554.663167][T17782] debugfs: 'hsr0' already exists in 'hsr'
[  554.679601][T17782] Cannot create hsr debugfs directory
[  554.691432][ T7851] : left promiscuous mode
[  554.785268][T17961] netlink: 'syz.1.3069': attribute type 5 has an invalid length.
[  554.915123][T17955] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  554.922979][ T7851] tipc: Disabling bearer <udp:syz2>
[  554.955220][ T7851] tipc: Left network mode
[  555.001569][ T5827] Bluetooth: hci1: command tx timeout
[  555.027064][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3070'.
[  555.077607][T17963] lo speed is unknown, defaulting to 1000
[  555.119886][T17963] lo speed is unknown, defaulting to 1000
[  555.184495][T17963] lo speed is unknown, defaulting to 1000
[  555.224253][T17963] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  555.371530][T17963] lo speed is unknown, defaulting to 1000
[  555.427242][T17982] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3074'.
[  555.437143][T17963] lo speed is unknown, defaulting to 1000
[  555.471229][T17963] lo speed is unknown, defaulting to 1000
[  555.494580][T17963] lo speed is unknown, defaulting to 1000
[  555.517942][T17988] sctp: [Deprecated]: syz.3.3076 (pid 17988) Use of int in max_burst socket option.
[  555.517942][T17988] Use struct sctp_assoc_value instead
[  555.540556][T17963] lo speed is unknown, defaulting to 1000
[  555.568085][T17963] lo speed is unknown, defaulting to 1000
[  555.645984][ T7851] veth1_to_hsr: left allmulticast mode
[  555.651896][ T7851] veth1_to_hsr: left promiscuous mode
[  555.658071][ T7851] veth1_macvtap: left promiscuous mode
[  555.674769][ T7851] veth0_macvtap: left promiscuous mode
[  555.684995][ T7851] veth1_vlan: left promiscuous mode
[  555.690517][ T7851] veth0_vlan: left promiscuous mode
[  555.763429][T18001] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3080'.
[  555.835383][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'.
[  556.170590][T18009] rdma_rxe: rxe_newlink: failed to add batadv0
[  556.988913][T17999] wg1 speed is unknown, defaulting to 1000
[  557.046058][T17999] lo speed is unknown, defaulting to 1000
[  557.063675][T18021] wg1 speed is unknown, defaulting to 1000
[  557.074011][T18021] lo speed is unknown, defaulting to 1000
[  557.082722][ T5827] Bluetooth: hci1: command tx timeout
[  557.108814][T18025] netlink: 'syz.2.3090': attribute type 61 has an invalid length.
[  557.265219][T18027] netlink: 63 bytes leftover after parsing attributes in process `syz.0.3091'.
[  557.302787][T18027] netlink: 'syz.0.3091': attribute type 2 has an invalid length.
[  557.358185][T18027] hmac(sha224): entered promiscuous mode
[  557.428139][T18030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3092'.
[  557.638594][ T7851] IPVS: stop unused estimator thread 0...
[  557.664721][T17782] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  557.702594][T17782] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  557.736852][T17782] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  557.761452][T17782] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  558.022256][T18063] netlink: 'syz.1.3100': attribute type 10 has an invalid length.
[  558.057203][T18063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3100'.
[  558.097737][T18063] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  558.275855][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3102'.
[  558.310560][T18069] siw: device registration error -23
[  558.354511][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3102'.
[  558.363699][ T6095] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  558.384766][ T6095] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  558.402036][ T6095] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  558.452969][ T6095] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  558.525527][T17782] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.577014][T17782] 8021q: adding VLAN 0 to HW filter on device team0
[  558.610031][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.617336][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  558.662489][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state
[  558.669770][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  558.784960][T18088] tap0: tun_chr_ioctl cmd 1074025675
[  558.791201][T18088] tap0: persist enabled
[  558.803890][T18088] tap0: tun_chr_ioctl cmd 1074025675
[  558.809316][T18088] tap0: persist disabled
[  558.823399][   T30] audit: type=1804 audit(1768636088.829:10): pid=18090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3107" name="memory.events" dev="tmpfs" ino=3345 res=1 errno=0
[  558.887444][   T30] audit: type=1800 audit(1768636088.829:11): pid=18090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3107" name="memory.events" dev="tmpfs" ino=3345 res=0 errno=0
[  559.162046][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  559.251055][T17782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.762245][T18142] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3119'.
[  559.794251][T17782] veth0_vlan: entered promiscuous mode
[  559.849981][T17782] veth1_vlan: entered promiscuous mode
[  559.927193][T17782] veth0_macvtap: entered promiscuous mode
[  559.963909][T17782] veth1_macvtap: entered promiscuous mode
[  560.043431][T17782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  560.071544][T17782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  560.107578][T11750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.134844][T11750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.178784][ T9936] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.196885][ T9936] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.348265][T11750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.401247][T11750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.410750][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'.
[  560.547141][T18155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3122'.
[  560.572756][ T6094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.599045][ T6094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.852402][T18159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3017'.
[  561.183844][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'.
[  561.237417][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  561.253471][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  561.264264][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  561.273188][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  561.288779][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  561.337380][T18166] wg1 speed is unknown, defaulting to 1000
[  561.352899][T18166] lo speed is unknown, defaulting to 1000
[  561.594142][T18183] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  561.758137][T18166] chnl_net:caif_netlink_parms(): no params data found
[  562.838948][ T6095] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  562.879332][T18197] netlink: 'syz.1.3131': attribute type 6 has an invalid length.
[  562.941612][T18195] __nla_validate_parse: 3 callbacks suppressed
[  562.941629][T18195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  562.961403][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3130'.
[  563.007231][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.125241][ T6095] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  563.194685][T18210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3132'.
[  563.212856][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3134'.
[  563.230013][T18208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'.
[  563.248951][ T6095] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  563.321418][ T5827] Bluetooth: hci3: command tx timeout
[  563.355638][T18210] wg1 speed is unknown, defaulting to 1000
[  563.363441][T18210] lo speed is unknown, defaulting to 1000
[  563.388106][T18166] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.406936][T18166] bridge0: port 1(bridge_slave_0) entered disabled state
[  563.424416][T18166] bridge_slave_0: entered allmulticast mode
[  563.435133][T18214] netlink: set zone limit has 4 unknown bytes
[  563.445543][T18166] bridge_slave_0: entered promiscuous mode
[  563.506367][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3136'.
[  563.540793][ T6095] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  563.572367][T18166] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.579820][T18166] bridge0: port 2(bridge_slave_1) entered disabled state
[  563.601643][T18166] bridge_slave_1: entered allmulticast mode
[  563.621776][T18166] bridge_slave_1: entered promiscuous mode
[  563.714496][T18166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  563.752094][T18166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  563.893390][T18166] team0: Port device team_slave_0 added
[  563.923347][T18166] team0: Port device team_slave_1 added
[  564.143139][T18246] netlink: 'syz.4.3142': attribute type 3 has an invalid length.
[  564.150987][T18246] netlink: 'syz.4.3142': attribute type 1 has an invalid length.
[  564.159380][T18246] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3142'.
[  564.173949][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3142'.
[  564.200109][T18240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3142'.
[  564.209999][T18166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.217303][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  564.244214][T18166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  564.274822][T18166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  564.295141][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  564.342127][T18166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  564.366853][ T6095] erspan0: left allmulticast mode
[  564.372469][ T6095] erspan0: left promiscuous mode
[  564.377721][ T6095] bridge0: port 4(erspan0) entered disabled state
[  564.426033][ T6095] bridge_slave_1: left allmulticast mode
[  564.434662][ T6095] bridge_slave_1: left promiscuous mode
[  564.440677][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.459396][T18256] netlink: 'syz.4.3145': attribute type 1 has an invalid length.
[  564.470758][ T6095] bridge_slave_0: left promiscuous mode
[  564.481552][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.662358][ T6095] bond5 (unregistering): (slave ip6erspan0): Releasing active interface
[  564.899745][ T6095] bond1 (unregistering): (slave gretap1): Releasing active interface
[  564.911098][ T6095] gretap1 (unregistering): left allmulticast mode
[  564.939700][ T6095] batman_adv: batadv0: Removing interface: gretap2
[  565.016632][T18281] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3153'.
[  565.038615][ T6095] dvmrp0 (unregistering): left allmulticast mode
[  565.263734][ T6095] bond2 (unregistering): (slave bridge3): Releasing active interface
[  565.401857][ T5827] Bluetooth: hci3: command tx timeout
[  565.872457][ T6095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  565.882883][ T6095] bond_slave_0: left promiscuous mode
[  565.890014][ T6095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  565.900190][ T6095] bond_slave_1: left promiscuous mode
[  565.906176][ T6095] bond0 (unregistering): Released all slaves
[  565.919196][ T6095] bond1 (unregistering): Released all slaves
[  565.934401][ T6095] bond2 (unregistering): Released all slaves
[  565.946924][ T6095] bond3 (unregistering): Released all slaves
[  566.088499][ T6095] bond4 (unregistering): Released all slaves
[  566.222993][ T6095] bond5 (unregistering): Released all slaves
[  566.490070][T18281] bond0 (unregistering): (slave lo): Releasing backup interface
[  566.499777][T18281] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  566.513977][T18281] bond0 (unregistering): Released all slaves
[  566.535584][T18288] macvlan2: entered promiscuous mode
[  566.541049][T18288] macvlan2: entered allmulticast mode
[  566.584335][ T6095] tipc: Left network mode
[  566.610864][T17749] lo speed is unknown, defaulting to 1000
[  566.617235][T17749] syz2: Port: 1 Link DOWN
[  566.624260][ T5845] lo speed is unknown, defaulting to 1000
[  566.751735][T18166] hsr_slave_0: entered promiscuous mode
[  566.768838][T18166] hsr_slave_1: entered promiscuous mode
[  566.782290][T18166] debugfs: 'hsr0' already exists in 'hsr'
[  566.798442][T18166] Cannot create hsr debugfs directory
[  567.000033][T18307] netlink: 'syz.0.3160': attribute type 1 has an invalid length.
[  567.172035][T18324] Bluetooth: MGMT ver 1.23
[  567.400833][T18334] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  567.481425][ T5827] Bluetooth: hci3: command tx timeout
[  567.570498][T18334] delete_channel: no stack
[  567.624264][T18346] netlink: 'syz.0.3171': attribute type 10 has an invalid length.
[  567.758201][T18351] macvlan3: entered promiscuous mode
[  567.763691][T18351] macvlan3: entered allmulticast mode
[  567.799653][T18344] netlink: 'syz.1.3170': attribute type 10 has an invalid length.
[  567.906345][ T6095] hsr_slave_0: left promiscuous mode
[  567.922095][ T6095] hsr_slave_1: left promiscuous mode
[  567.942324][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0
[  567.952067][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1
[  568.319634][T18377] __nla_validate_parse: 8 callbacks suppressed
[  568.319652][T18377] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3179'.
[  568.456699][ T6095] smc: removing net device hsr0 with user defined pnetid SYZ2
[  569.286912][T18377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  569.303941][T18377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  569.315208][T18377] bond0 (unregistering): Released all slaves
[  569.349601][T18391] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3182'.
[  569.379515][T18388] wg1 speed is unknown, defaulting to 1000
[  569.459695][T18388] lo speed is unknown, defaulting to 1000
[  569.571716][ T5827] Bluetooth: hci3: command tx timeout
[  569.704957][T18166] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  569.728773][ T6095] IPVS: stop unused estimator thread 0...
[  569.739523][T18407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3187'.
[  569.753274][T18166] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  569.785292][T18166] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  569.830311][T18166] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  569.901560][T18415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3188'.
[  569.942436][T18415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3188'.
[  570.127155][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'.
[  570.135390][T18166] 8021q: adding VLAN 0 to HW filter on device bond0
[  570.156720][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'.
[  570.184596][T18166] 8021q: adding VLAN 0 to HW filter on device team0
[  570.234915][T18428] macvtap0: entered promiscuous mode
[  570.297770][T18429] macvtap1: entered promiscuous mode
[  570.342355][ T4582] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.349627][ T4582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  570.400074][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state
[  570.407349][ T7851] bridge0: port 2(bridge_slave_1) entered forwarding state
[  570.668581][T18447] wg1 speed is unknown, defaulting to 1000
[  570.717010][T18447] lo speed is unknown, defaulting to 1000
[  571.112934][T18463] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3198'.
[  571.386216][T18166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  571.662205][T18166] veth0_vlan: entered promiscuous mode
[  571.690620][T18166] veth1_vlan: entered promiscuous mode
[  571.932644][T18166] veth0_macvtap: entered promiscuous mode
[  571.959328][T18166] veth1_macvtap: entered promiscuous mode
[  572.052383][T18479] wg1 speed is unknown, defaulting to 1000
[  572.086086][T18166] batman_adv: batadv0: Interface activated: batadv_slave_0
[  572.127111][T18479] lo speed is unknown, defaulting to 1000
[  572.253209][T18166] batman_adv: batadv0: Interface activated: batadv_slave_1
[  572.364980][ T6095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  572.386343][ T6095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  572.455638][ T6095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.515724][ T6095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.748587][ T6094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.779164][ T6094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  572.950377][ T1309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  572.984170][ T1309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  573.009703][T18514] wg1 speed is unknown, defaulting to 1000
[  573.056587][T18514] lo speed is unknown, defaulting to 1000
[  573.182896][T18526] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3214'.
[  573.380168][T18522] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  573.406699][T18522] bond5: left promiscuous mode
[  573.413806][T18522] bridge5: left promiscuous mode
[  573.419739][T18522] geneve2: left promiscuous mode
[  573.435466][T18522] geneve2: left allmulticast mode
[  573.463232][T18522] bond9: left promiscuous mode
[  573.490384][T18522] bond11: left promiscuous mode
[  573.510351][T18522] bond11: left allmulticast mode
[  573.601811][T18522] geneve3: left promiscuous mode
[  573.614440][T18522] bond13: left promiscuous mode
[  573.622671][T18522] bond14: left promiscuous mode
[  573.664253][T18537] netlink: 548 bytes leftover after parsing attributes in process `syz.4.3215'.
[  573.679000][T18528] syzkaller1: entered promiscuous mode
[  573.688690][T18528] syzkaller1: entered allmulticast mode
[  573.698335][T18534] netlink: 'syz.4.3215': attribute type 29 has an invalid length.
[  573.706964][ T3468] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.779565][ T3468] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.805580][T18541] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3216'.
[  573.979517][ T3468] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  574.039262][ T3468] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  574.104485][T18548] netlink: 'syz.0.3219': attribute type 4 has an invalid length.
[  574.112770][T18548] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3219'.
[  574.231099][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  574.242130][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  574.242319][T18553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3220'.
[  574.261393][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  574.271816][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  574.280489][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  574.427596][T18550] wg1 speed is unknown, defaulting to 1000
[  574.479441][T18550] lo speed is unknown, defaulting to 1000
[  574.505440][T18559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'.
[  574.541652][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3222'.
[  574.571735][T18563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3222'.
[  574.606378][T18561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3224'.
[  574.626397][T11750] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  574.650065][T11750] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  574.700991][T11750] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  574.718170][T11750] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  574.837038][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'.
[  574.868550][T18580] delete_channel: no stack
[  574.978816][T18550] chnl_net:caif_netlink_parms(): no params data found
[  575.011295][T18592] x_tables: duplicate underflow at hook 1
[  575.022714][T18579] bond1: option ad_actor_sys_prio: invalid value (0)
[  575.029591][T18579] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[  575.041659][T18579] bond1 (unregistering): Released all slaves
[  575.504056][T18617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3238'.
[  575.531297][T18611] wg1 speed is unknown, defaulting to 1000
[  575.538965][T18611] lo speed is unknown, defaulting to 1000
[  575.612370][T18550] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.629777][T18550] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.651373][T18550] bridge_slave_0: entered allmulticast mode
[  575.659171][T18550] bridge_slave_0: entered promiscuous mode
[  575.676275][T18550] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.692644][T18550] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.700243][T18550] bridge_slave_1: entered allmulticast mode
[  575.718747][T18550] bridge_slave_1: entered promiscuous mode
[  576.145533][T18631] netlink: 'syz.0.3240': attribute type 4 has an invalid length.
[  576.159592][T18550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  576.177690][T18550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  576.198958][T18633] netlink: 'syz.0.3240': attribute type 4 has an invalid length.
[  576.265051][   T10] lo speed is unknown, defaulting to 1000
[  576.275991][   T10] syz2: Port: 1 Link ACTIVE
[  576.361984][ T5827] Bluetooth: hci4: command tx timeout
[  576.399997][T18639] bridge1: entered promiscuous mode
[  576.406571][T18639] bridge1: entered allmulticast mode
[  576.419830][T18639] team0: Port device bridge1 added
[  576.430448][T18550] team0: Port device team_slave_0 added
[  576.497704][T18550] team0: Port device team_slave_1 added
[  576.824573][T18550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  576.860728][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.924359][T18550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  577.050494][T18550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  577.076329][T18550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  577.136619][T18550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  577.185768][T18663] wg1 speed is unknown, defaulting to 1000
[  577.223064][T18663] lo speed is unknown, defaulting to 1000
[  577.405058][T18550] hsr_slave_0: entered promiscuous mode
[  577.424017][T18550] hsr_slave_1: entered promiscuous mode
[  577.433882][T18550] debugfs: 'hsr0' already exists in 'hsr'
[  577.439740][T18550] Cannot create hsr debugfs directory
[  577.557608][T18674] 8021q: adding VLAN 0 to HW filter on device bond0
[  577.570497][T18674] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  577.585118][T18674] bond0: (slave gre0): Error -95 calling set_mac_address
[  577.590279][T18676] ------------[ cut here ]------------
[  577.598471][T18676] kernel BUG at net/core/skbuff.c:2285!
[  577.607269][T18676] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  577.613650][T18676] CPU: 1 UID: 0 PID: 18676 Comm: syz.3.3255 Not tainted syzkaller #0 PREEMPT(full) 
[  577.623043][T18676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  577.633603][T18676] RIP: 0010:pskb_expand_head+0x1114/0x1160
[  577.639469][T18676] Code: c9 f3 ff ff 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 0f 8c 24 f4 ff ff 48 8b 3c 24 e8 a7 ed f5 f8 e9 16 f4 ff ff e8 dd ca 8f f8 90 <0f> 0b e8 d5 ca 8f f8 90 0f 0b 48 8b 0c 24 80 e1 07 80 c1 03 38 c1
[  577.659184][T18676] RSP: 0018:ffffc900050f7188 EFLAGS: 00010283
[  577.665305][T18676] RAX: ffffffff89312dd3 RBX: ffff888078a52c80 RCX: 0000000000080000
[  577.673325][T18676] RDX: ffffc9000f8f3000 RSI: 00000000000002db RDI: 00000000000002dc
[  577.681339][T18676] RBP: 00000000932edc40 R08: 0000000000000000 R09: 000000000000009c
[  577.689432][T18676] R10: dffffc0000000000 R11: ffffffff89eacb10 R12: 00000000932edac0
[  577.699491][T18676] R13: ffff888078a52c80 R14: 0000000000000820 R15: dffffc0000000000
[  577.709047][T18676] FS:  00007f303d6f96c0(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000
[  577.719447][T18676] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  577.726300][T18676] CR2: 000000110c2755b9 CR3: 00000000758c6000 CR4: 00000000003526f0
[  577.734430][T18676] Call Trace:
[  577.737980][T18676]  <TASK>
[  577.741037][T18676]  ? neigh_connected_output+0x1ea/0x460
[  577.746718][T18676]  ? neigh_connected_output+0x1ea/0x460
[  577.752741][T18676]  ipgre_header+0xd5/0x350
[  577.757353][T18676]  ? __pfx_ipgre_header+0x10/0x10
[  577.762537][T18676]  neigh_connected_output+0x286/0x460
[  577.768174][T18676]  ip_finish_output2+0xbb6/0x1000
[  577.773550][T18676]  ? skb_gso_validate_network_len+0x12f/0x2a0
[  577.779971][T18676]  ? ip_finish_output2+0x3d0/0x1000
[  577.785445][T18676]  ? ip_finish_output+0x1aa/0x3f0
[  577.790792][T18676]  ip_send_skb+0x74/0x100
[  577.791604][ T6040] IPVS: starting estimator thread 0...
[  577.795327][T18676]  udp_send_skb+0xb04/0x1510
[  577.795384][T18676]  udp_sendmsg+0x1a71/0x2350
[  577.795414][T18676]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  577.816023][T18676]  ? __pfx_udp_sendmsg+0x10/0x10
[  577.820977][T18676]  ? __lock_acquire+0x6b6/0x2cf0
[  577.826006][T18676]  ? pick_next_task_fair+0x1ef2/0x2130
[  577.831565][T18676]  ? finish_task_switch+0x162/0x940
[  577.836855][T18676]  ? lock_acquire+0x107/0x340
[  577.841531][T18676]  udpv6_sendmsg+0xc1c/0x2510
[  577.846206][T18676]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  577.851671][T18676]  ? trace_sched_exit_tp+0x36/0xf0
[  577.856806][T18676]  ? __schedule+0x14b1/0x4fd0
[  577.861930][T18676]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  577.867292][T18676]  ? aa_file_perm+0x139/0x1530
[  577.872154][T18676]  ? aa_sk_perm+0x7ee/0x920
[  577.876824][T18676]  ? inet_send_prepare+0x5c/0x270
[  577.881954][T18676]  ? inet6_sendmsg+0xe4/0x120
[  577.887077][T18676]  __sock_sendmsg+0xe5/0x270
[  577.891279][T18689] IPVS: using max 43 ests per chain, 103200 per kthread
[  577.891690][T18676]  sock_write_iter+0x279/0x360
[  577.891722][T18676]  ? __pfx_sock_write_iter+0x10/0x10
[  577.908752][T18676]  ? bpf_lsm_file_permission+0x9/0x20
[  577.914219][T18676]  ? security_file_permission+0x75/0x290
[  577.919858][T18676]  vfs_write+0x5c9/0xb30
[  577.924119][T18676]  ? __pfx_sock_write_iter+0x10/0x10
[  577.929414][T18676]  ? __pfx_vfs_write+0x10/0x10
[  577.934191][T18676]  ? __fget_files+0x2a/0x420
[  577.938779][T18676]  ksys_write+0x145/0x250
[  577.943106][T18676]  ? __pfx_ksys_write+0x10/0x10
[  577.947968][T18676]  do_syscall_64+0xec/0xf80
[  577.952569][T18676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.958632][T18676]  ? clear_bhb_loop+0x60/0xb0
[  577.963355][T18676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.969269][T18676] RIP: 0033:0x7f303c78f749
[  577.973694][T18676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  577.993308][T18676] RSP: 002b:00007f303d6f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  578.001731][T18676] RAX: ffffffffffffffda RBX: 00007f303c9e5fa0 RCX: 00007f303c78f749
[  578.009696][T18676] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000004
[  578.017937][T18676] RBP: 00007f303c813f91 R08: 0000000000000000 R09: 0000000000000000
[  578.026072][T18676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  578.034054][T18676] R13: 00007f303c9e6038 R14: 00007f303c9e5fa0 R15: 00007ffdcaa9c308
[  578.042111][T18676]  </TASK>
[  578.045134][T18676] Modules linked in:
[  578.050885][T18676] ---[ end trace 0000000000000000 ]---
[  578.058522][T18676] RIP: 0010:pskb_expand_head+0x1114/0x1160
[  578.065359][T18676] Code: c9 f3 ff ff 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 0f 8c 24 f4 ff ff 48 8b 3c 24 e8 a7 ed f5 f8 e9 16 f4 ff ff e8 dd ca 8f f8 90 <0f> 0b e8 d5 ca 8f f8 90 0f 0b 48 8b 0c 24 80 e1 07 80 c1 03 38 c1
[  578.085743][T18676] RSP: 0018:ffffc900050f7188 EFLAGS: 00010283
[  578.092012][T18676] RAX: ffffffff89312dd3 RBX: ffff888078a52c80 RCX: 0000000000080000
[  578.100161][T18676] RDX: ffffc9000f8f3000 RSI: 00000000000002db RDI: 00000000000002dc
[  578.108417][T18676] RBP: 00000000932edc40 R08: 0000000000000000 R09: 000000000000009c
[  578.116503][T18676] R10: dffffc0000000000 R11: ffffffff89eacb10 R12: 00000000932edac0
[  578.124594][T18676] R13: ffff888078a52c80 R14: 0000000000000820 R15: dffffc0000000000
[  578.132633][T18676] FS:  00007f303d6f96c0(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000
[  578.141850][T18676] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  578.148429][T18676] CR2: 000000110c2755b9 CR3: 00000000758c6000 CR4: 00000000003526f0
[  578.156561][T18676] Kernel panic - not syncing: Fatal exception
[  578.163151][T18676] Kernel Offset: disabled
[  578.167566][T18676] Rebooting in 86400 seconds..