last executing test programs:

54.847590514s ago: executing program 0 (id=2179):
r0 = socket(0x400000000010, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x0, 0x0, @void, @value}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x0, 0x0, @void, @value}, 0x10)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x36b)

54.682475067s ago: executing program 0 (id=2182):
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000280)=@ethtool_coalesce={0xf, 0x6f, 0x9, 0x784, 0x6, 0x429, 0x4, 0x8, 0x0, 0x5, 0x7fff, 0x80, 0x8, 0xfffffffd, 0xb8, 0x9, 0x8, 0x1, 0x6, 0x88, 0xfffffc84, 0x3, 0xffffffff}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
bpf$MAP_CREATE_CONST_STR(0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000050000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000009cab00"/28], 0x48) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000050000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000009cab00"/28], 0x48)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000001540)={0x0, 0xfffffffffffffda7, &(0x7f0000000100)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="1401000031000100000000000000000002"], 0x114}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
shutdown(r1, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r5) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r5)
ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2ada58c6", @ANYRES8=r0, @ANYBLOB="210900000000000000004400000008000300", @ANYRES32=r0, @ANYRES16=r4], 0x30}}, 0x0)

54.59801396s ago: executing program 0 (id=2185):
unshare(0x68040200)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x100000000000005, {0x0, 0x1, 0x3}}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', <r6=>0x0, 0x20, 0x40, 0x7, 0x1, {{0x12, 0x4, 0x1, 0xf, 0x48, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0xd6, 0x0, 0x9, [0x4, 0x7]}, @end, @timestamp_addr={0x44, 0xc, 0x57, 0x1, 0x8, [{@private=0xa010101, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @generic={0x94, 0x8, "86a4b2546e7a"}, @end, @noop]}}}}})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x44, 0x19, 0x200, 0x70bd2c, 0x25dfdbfd, {0xa, 0x14, 0x80, 0x9, 0x0, 0x2, 0xff, 0x9, 0x500}, [@RTA_MARK={0x8, 0x10, 0xdea}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_MULTIPATH={0xc, 0x9, {0x1035, 0x2, 0x40, r6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x0)

41.042720126s ago: executing program 0 (id=2185):
unshare(0x68040200)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x100000000000005, {0x0, 0x1, 0x3}}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', <r6=>0x0, 0x20, 0x40, 0x7, 0x1, {{0x12, 0x4, 0x1, 0xf, 0x48, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0xd6, 0x0, 0x9, [0x4, 0x7]}, @end, @timestamp_addr={0x44, 0xc, 0x57, 0x1, 0x8, [{@private=0xa010101, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @generic={0x94, 0x8, "86a4b2546e7a"}, @end, @noop]}}}}})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x44, 0x19, 0x200, 0x70bd2c, 0x25dfdbfd, {0xa, 0x14, 0x80, 0x9, 0x0, 0x2, 0xff, 0x9, 0x500}, [@RTA_MARK={0x8, 0x10, 0xdea}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_MULTIPATH={0xc, 0x9, {0x1035, 0x2, 0x40, r6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x0)

26.12323683s ago: executing program 0 (id=2185):
unshare(0x68040200)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x100000000000005, {0x0, 0x1, 0x3}}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', <r6=>0x0, 0x20, 0x40, 0x7, 0x1, {{0x12, 0x4, 0x1, 0xf, 0x48, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0xd6, 0x0, 0x9, [0x4, 0x7]}, @end, @timestamp_addr={0x44, 0xc, 0x57, 0x1, 0x8, [{@private=0xa010101, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @generic={0x94, 0x8, "86a4b2546e7a"}, @end, @noop]}}}}})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x44, 0x19, 0x200, 0x70bd2c, 0x25dfdbfd, {0xa, 0x14, 0x80, 0x9, 0x0, 0x2, 0xff, 0x9, 0x500}, [@RTA_MARK={0x8, 0x10, 0xdea}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_MULTIPATH={0xc, 0x9, {0x1035, 0x2, 0x40, r6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x0)

12.104171893s ago: executing program 0 (id=2185):
unshare(0x68040200)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x100000000000005, {0x0, 0x1, 0x3}}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', <r6=>0x0, 0x20, 0x40, 0x7, 0x1, {{0x12, 0x4, 0x1, 0xf, 0x48, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0xd6, 0x0, 0x9, [0x4, 0x7]}, @end, @timestamp_addr={0x44, 0xc, 0x57, 0x1, 0x8, [{@private=0xa010101, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xbd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @generic={0x94, 0x8, "86a4b2546e7a"}, @end, @noop]}}}}})
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x44, 0x19, 0x200, 0x70bd2c, 0x25dfdbfd, {0xa, 0x14, 0x80, 0x9, 0x0, 0x2, 0xff, 0x9, 0x500}, [@RTA_MARK={0x8, 0x10, 0xdea}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_MULTIPATH={0xc, 0x9, {0x1035, 0x2, 0x40, r6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8050}, 0x0)

5.29321306s ago: executing program 1 (id=2669):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000600), 0x4)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x12)
getpeername$l2tp(r2, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x0)
socketpair(0x1, 0x1, 0x3d5f, &(0x7f0000000140))
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x17, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)

4.346230635s ago: executing program 1 (id=2683):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x100000001}]}, 0x20}}, 0x0)
getpeername$packet(r0, 0x0, &(0x7f00000000c0))
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
socket$kcm(0x2, 0xa, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/101, 0x65}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2, &(0x7f0000000180)=""/9, 0x9}, 0x6}, {{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/246, 0xf6}, {&(0x7f0000000400)=""/9, 0x9}], 0x2, &(0x7f0000000480)=""/173, 0xad}, 0x697b18f2}], 0x2, 0x40002000, &(0x7f00000005c0)={0x77359400})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r3, 0x80047453, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet(0x2, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="40000000070605000000000000000000000000001f000100070000000900020073797a30000000000900820073797a30000000c0690000000000003200000000b71abd48c1e29ff8c388c20a177d9f02425aaa2e6727bda8f9fd71084bb324bb156b2a93249138c89f7780259d5737269f51711cba1db42696b372734a001ad92838a534803d3952f23f08671a8c235945a4bbfde09fb2f6835b7a338e34d4956e824e205ed6e550ede2687c50"], 0x40}}, 0x0)
socket$tipc(0x1e, 0x0, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r6 = socket(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000080)=0x8)
sendmmsg$inet_sctp(r6, &(0x7f00000019c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, r8}}], 0x30}], 0x1, 0x0)

4.012781238s ago: executing program 1 (id=2688):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r2, 0x8b20, &(0x7f0000000040)) (async)
ioctl(r2, 0x8b20, &(0x7f0000000040))
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x128}, 0x20000010)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1398, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

3.664886201s ago: executing program 1 (id=2692):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}]}, 0x58}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002a0009000000002c04001d80b0eeffca337e55c8d0a3e2246ab86bc087d33b8c0d2cd983ccbf93b62a55ff7b94ded1c7efbf29d0c2c20dd8bf629515edbe702db023aa4d8b14be8c3ef1bbfc701ee4160e769587d0e53d35d14dfe29fc8e09ec9090b79acf87f6a799ecc1007007fb5941d473002a91070b7839e14262e916480000000000000000"], 0x18}, 0x1, 0x3000000}, 0x0)

3.352236318s ago: executing program 1 (id=2696):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x144}, 0x1, 0x0, 0x0, 0x20000010}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x80000000, 0xfffffffffffffffe, 0x40})
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$rds(0x15, 0x5, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60120008003c3a00fe882000000000000000000000000001fe800000000000000000000000000000001100fe88000000000000000000000000000100000000000000000000000000000000fb36eeca6ead50b375a22a58"], 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000480)=0x14, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@gettclass={0x24, 0x2a, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xabb26086dcdc1a2c, 0xffff}, {0xc}, {0xffe0, 0x3}}, [""]}, 0x24}}, 0xc054)
bind$rds(r3, &(0x7f0000000840)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
r7 = socket$packet(0x11, 0x3, 0x300)
getpeername$packet(r7, 0x0, 0x0)
sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@mask_cswp={0x58, 0x114, 0x9, {{0x40, 0x2}, &(0x7f0000000140)=0x7, &(0x7f0000000180)=0x9, 0x5, 0x84, 0x100, 0x400000db, 0x21, 0x6}}], 0x58, 0x80}, 0x20000001)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r6, @ANYRES16=r10, @ANYRES16=0x0], 0x684}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000855)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r13, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r12, @ANYRES64=r13, @ANYRES8=r11, @ANYBLOB="bba8a55f2335024edb9ea81414a6968205edceaa9e6dbba902a144edc24da87e404cf1da0b07ade0bce98682656fd4e013adbc6926ac6b57c8a7d82ab9b082e7c55e765dedd5ea884ea73240445a9b", @ANYRES8=r5], 0x12c}}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000429bdbe6e06b652d6a77db1", @ANYRES8=r1, @ANYBLOB="0800b700340000000800b700600000000400b800"], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40040)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)

3.036327084s ago: executing program 1 (id=2699):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, <r1=>0x0})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c0000040000001400018006000600800a1f00080003"], 0x2c}}, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000380)={'gre0\x00'})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_eeprom={0xc, 0x7, 0x7f, 0x9a, "0f43aa7356afda3814ac3972155e8095de21bfbb75d948f41ae97a34aa5dcda294262be1172c0dadf0fce89c8aab413513ee73d8b641c3ed4ac906dcd974545cd6b56d3d4c0e039aa054476a4b105b5231b934b51373a77ecae7b5c46e2c4e9b17abf432e9ed116b6ffb8007d6fabc58c0fcc34839c011d239ab791cfb370159135e6560b820b56bb171aefee38b9f563a9d5fab82e40c827fb3"}})
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044881}, 0x20000040)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x0)
connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0xb0}}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r9, 0x0)
recvmmsg(r9, &(0x7f00000055c0), 0x400023c, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="ec36fecfa226063e841848775bfc16ab5d40db45299446ca3b6ff30734ea23dbd414e295ec1f", @ANYRES64, @ANYRES64=r8, @ANYRES64=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9f8}, [@generic={0x3, 0xb, 0x8, 0x9, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x3, 0x29, &(0x7f0000000440)=""/41, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x5, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000500)=[{0x5, 0x1, 0xc, 0x5}, {0x0, 0x5, 0x7, 0x5}, {0x1, 0x5, 0x5, 0xc}, {0x0, 0x5, 0xa}, {0x0, 0x3, 0xd}, {0x3, 0x5, 0x5, 0x8}, {0x3, 0x2, 0xb, 0x2}, {0x1, 0x1, 0x7, 0x6}, {0x4, 0x4, 0x5, 0xb}], 0x10, 0x2b3, @void, @value}, 0x94)

2.935590632s ago: executing program 4 (id=2701):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32)
ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0)

1.916391603s ago: executing program 4 (id=2705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x35)
bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x14)
bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r13 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48)
r14 = socket$netlink(0x10, 0x3, 0x4)
writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1000000000000305)

1.757185933s ago: executing program 3 (id=2706):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6}, @in6={0xa, 0x0, 0x0, @loopback}], 0x38) (async)
sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x4000000, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @empty, 0x400}, 0x1c) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\n\x00\x00\x00', @ANYBLOB="14000200000000000000000000000000000000011400060000000000ff7f000000000000000000"], 0x40}}, 0x0) (rerun: 32)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000001c0)={0xfffffffb, 0x1}) (rerun: 32)
r4 = socket$inet6(0xa, 0x40000080806, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10)
sendmsg$NBD_CMD_CONNECT(r5, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x18)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES16=r8, @ANYBLOB="01000000000000000000070000000a0004007770616e3300000008000100000000000800050002000000"], 0x30}}, 0x0) (async, rerun: 64)
sendmsg$NL802154_CMD_SET_PAN_ID(r7, 0x0, 0x20004048) (async, rerun: 64)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) (async, rerun: 64)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x2, 0x1, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x32) (async, rerun: 64)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000000000006001e"], 0x24}}, 0x0) (async)
sendmsg$IPSET_CMD_LIST(r10, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12, 0x0)

1.726208957s ago: executing program 4 (id=2708):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x6}]}) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd050000000000000000000000200000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x4008, 0x3, 0x2a0, 0x0, 0x32, 0x148, 0x130, 0x148, 0x208, 0x240, 0x240, 0x208, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x1, 0xc}}, @common=@icmp={{0x28}, {0x0, 'nd'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x44000) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) (async)
connect$tipc(r2, &(0x7f0000000000), 0x10) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000011080)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b}, 0x14}}, 0x0)

1.619206381s ago: executing program 2 (id=2709):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000006305000000000000", @ANYRES32=0x1, @ANYBLOB="070000000000000000000000000000000000000041d05a7249b5601b7343d2fae42ef83a0073f78a04771774b5e28ca772f609513dc42ca6d2dbf41b8b52ca9fe804a87dee505385e8081c9c6bc4252086225af2f720699650a687f1da7be02d21c5613796af68a404ca98ac8fbe0e66950a9daf65cb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4008, r0}, 0x18)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'})
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x43)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0)
sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f0000000340), 0x11000)
vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="8520000009000000852000000300000050a30c00fcffffff18630000080000000000000009000000cf550800100000001867000003000000000000009d0000008500000080000000082507000600000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000002785100000f8ffffffa71ac9e6490cffcb59e059c26411088e6b4dab93"], &(0x7f0000000180)='GPL\x00', 0xca49, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8010000000002100000000000000bb050005002b0000000a0000a874000000fc01000000020000000200000000000000000000000000000800197c"], 0xe0}}, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000340)=@ethtool_pauseparam={0x12, 0x1, 0x213ccac8, 0x8}})
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$802154_dgram(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000240)={&(0x7f00000001c0)="2441f846a946599940401f659e03925b9e5df868c2c52d4db90302a87f4062bb59c88210a581957827bbd1d6831bd7a033d18103589640c8b75659f6e1a9ad1c4ad88397d9648e3cfb67692f5bb39a182632922bc29c2697e0c2ed38e66574fa4d", 0x61}, 0x1, 0x0, 0x0, 0x1}, 0x8)
ioctl$NS_GET_PARENT(r2, 0xb702, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)

1.241276415s ago: executing program 4 (id=2710):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
splice(r1, &(0x7f0000000000)=0x6, r2, &(0x7f0000000140)=0x804001, 0x100000003, 0x2)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6c, &(0x7f0000000080)={r5, 0x0, 0x10}, &(0x7f00000000c0)=0x18)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20000400)
bpf$MAP_CREATE(0x15, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000023c0))

1.240995472s ago: executing program 3 (id=2711):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000000c0)=0xfffffc00, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4)

1.135529817s ago: executing program 3 (id=2712):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d07000000374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6bebf5088a2a12dd1a1b14d948aa911cf50968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3a51cc87e068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a881192292469d2d25115be3cfb8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c5a7bd32cb8d3ca303a671a9339e77a"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
connect$ax25(r1, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @bcast]}, 0x48)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/206, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @dev, @local}}}}, 0x0)
write$cgroup_int(r3, &(0x7f0000000100), 0x1001)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
setsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000000), 0x4)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)

1.017030548s ago: executing program 4 (id=2713):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000003100)=@id, 0x10)
sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c)
listen(r2, 0x100101)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000280)=ANY=[], 0x8)
accept4(r2, 0x0, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0)

865.23862ms ago: executing program 3 (id=2714):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), r0)
getsockopt$bt_hci(r1, 0x84, 0x76, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), r0) (async)
getsockopt$bt_hci(r1, 0x84, 0x76, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}}, 0x0) (async)

666.348961ms ago: executing program 3 (id=2715):
syz_emit_ethernet(0xfffffffffffffdbd, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) (async)
r0 = socket(0x28, 0xd, 0x7)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x40000)

622.934728ms ago: executing program 2 (id=2716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000180)=@ipmr_newroute={0x24, 0x18, 0x200, 0x70bd2c, 0x25dfdbfb, {0x80, 0x10, 0x14, 0x8, 0x0, 0x4, 0xc8, 0xb}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}]}, 0x24}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000180)=@ipmr_newroute={0x24, 0x18, 0x200, 0x70bd2c, 0x25dfdbfb, {0x80, 0x10, 0x14, 0x8, 0x0, 0x4, 0xc8, 0xb}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}]}, 0x24}}, 0x0)

505.01943ms ago: executing program 3 (id=2717):
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000003c0)={0x0, 0x4})
bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r2}, 0x8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x4c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400d}, 0x404c000)
unshare(0x24020400)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r6, 0x0, 0x7, &(0x7f0000000240)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r8)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r8, r8}, 0x10)
listen(r1, 0x80080400)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r11, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001e40)={0x1c8, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x1c8}}, 0x0)
connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10)
getsockopt$inet_int(r9, 0x10d, 0xef, &(0x7f0000000000), &(0x7f0000000080)=0x4)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

504.664621ms ago: executing program 2 (id=2718):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x8, 0x6, 0x860, 0x670, 0xf8, 0xf8, 0x370, 0x670, 0x790, 0x790, 0x790, 0x790, 0x790, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x180, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8c0)

407.282376ms ago: executing program 2 (id=2719):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) (async)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x164}, {&(0x7f0000000bc0)="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", 0x290}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000004ac0)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca84d360a7a793cdcadfecfd6cc1b312460a54c1e4a6782ec9ce0e299ff2ed8296555289fb6af4b576408a34f8a2779d3dc1a749536a4ecb64522ec725c57dfd9fbc2159c1dfbb40086b331b383029fe0a22ed74e0245909880964443718d1b44d9fbda51ee4f67cd8582f47b155098c408578012cf1abfa162f64da31fd16df164e470b7065861267d5823923fdfabda2d844de999c20806e01edd5e011504278a8f31fa751a757f060d3dcd62fec5f4fda9a4454d754b75ae16ee431d2d7edfda0a869e0a44df651e0ed900cd498509e391c4ba7857d273ed5464c212da7e1d5b6c7a69192a814b447ab60c8258da76cc140a4a532a318d90679c535afd8b43954df5ce90d30be713f5195a8dd4437f6204bb5683efadbf02f96fa0a4bb2b22f4cc0ded53bd8d9d693430dea403f3dc4cfa8f925afc8ae91271a009b5ffeab64ed38ba09bfac86304adf17f069e8cf87d32c7f22267327b3300009debe2f20b59f9a394b6d2fed63fa770ad081bddb65484cf4fa7360987202558ff09ba4a8e783cdedb31141fe23236edace46f2f1c5e931fb31acce60ee84a0987a70c0be8a44cc7c21626db60ce04c85c8c7f5d59d819b5e2c1effcce4b777b6c5e5c19c5e51956f3bf946393dc7c8dcb4bd007c30304c5fb1e6e7c98f0bfc02e51143ef069aca54606567391200e694facbf777fb4eee9f0092030fd5beefe08b830526912cc47bec29d3c29d3ca4b45799889e8c6248bc9d87462f2bcd0ae8b117273b48dd3b14d12c2cc34bf630b04832f157f5205abefca3dcd5e8b03887c5e6b6ef2164cfd803835f95e3e6cee5d5100e07b94c3770af57a59d95133f0b5b42fcb2535b34d427b5f33d079f2d6dca92d0752b09607ee0c39bf8bc722316fcbd035431b8d1485fef29d6d9fd364d316838e16a8ecc215701dda55152ea939f4b4391aee643f2daececd6cc21a0d9c8a36ecbe178b9ada17b6bf5bf7024849e9a7c43755a26ba42239ad82514ff280bcf720121d752c261e6f45c69a2a1f9dacb9c16cb773cbdc537f84e9f11441f00dfcee6c74a7963f180e6d63a00d5c6a64a0d7020ef6d96f1a8e9f470a99bc51078e355002c70185341e02da40b21d5872e87863e35cc2860ea7d9810195d16bd4967c5746528e2994f546a98914251deef14c70dbdc7ec51a4b7911d931000ac528e23b06109740aa79c389c5dac0394aec5475c98a9207ddf1616dde7a8e7e8a07af2d39f109d122290e46c9d9a37b87d44ffc2ece736bab99d718cff800d563cfbc724d9", 0x3d2}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="bd4e54d45303", @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @broadcast, @dev, @local, @multicast2}}}}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000089000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x37)

172.845077ms ago: executing program 2 (id=2720):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a", 0x2f}], 0x1)
unshare(0x22020400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0)
setsockopt(r3, 0x0, 0x29, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, r5, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xbc, 0x1c}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x40810)

33.295602ms ago: executing program 4 (id=2721):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="210000b7362b0900000008240000000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50)
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

0s ago: executing program 2 (id=2722):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = openat$cgroup_int(r3, 0x0, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYRESOCT], 0x31)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r2, 0x400000001ffffffd)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r6 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_SAVE(r6, 0x0, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6)
sendmmsg$inet6(r5, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6)
sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x1, &(0x7f0000000000), 0x0, 0x2000}, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4)

kernel console output (not intermixed with test programs):

ookies.
[  200.157354][ T8924] netlink: 'syz.1.1045': attribute type 3 has an invalid length.
[  200.462556][ T8948] netlink: 'syz.4.1052': attribute type 1 has an invalid length.
[  200.995112][ T8937] infiniband syz1: set active
[  201.012156][ T8937] infiniband syz1: added team_slave_0
[  201.038566][ T8937] syz1: rxe_create_cq: returned err = -12
[  201.069524][ T8937] infiniband syz1: Couldn't create ib_mad CQ
[  201.092275][ T8937] infiniband syz1: Couldn't open port 1
[  201.216207][ T8937] RDS/IB: syz1: added
[  201.244013][ T8937] smc: adding ib device syz1 with port count 1
[  201.267838][ T8991] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  201.280098][ T8937] smc:    ib device syz1 port 1 has pnetid 
[  201.314148][ T8991] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  201.503981][ T8997] netlink: 'syz.0.1065': attribute type 14 has an invalid length.
[  201.691610][ T5241] Bluetooth: hci2: command tx timeout
[  204.394750][ T9008] __nla_validate_parse: 7 callbacks suppressed
[  204.394768][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'.
[  204.441389][ T9008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1069'.
[  204.460646][ T9013] netlink: 'syz.1.1072': attribute type 29 has an invalid length.
[  204.482369][ T9013] netlink: 'syz.1.1072': attribute type 29 has an invalid length.
[  204.516364][ T9013] netlink: 'syz.1.1072': attribute type 29 has an invalid length.
[  204.551128][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'.
[  204.563400][ T9018] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1073'.
[  204.643941][ T9018] sch_tbf: burst 5729 is lower than device lo mtu (65550) !
[  204.728825][ T9022] netlink: 'syz.1.1072': attribute type 29 has an invalid length.
[  205.258686][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'.
[  205.391092][ T9028] netlink: 'syz.0.1075': attribute type 4 has an invalid length.
[  205.442357][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1077'.
[  205.491113][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'.
[  205.520726][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'.
[  205.587124][ T9039] openvswitch: netlink: Missing key (keys=100000040, expected=2000)
[  205.666906][ T9040] can: request_module (can-proto-0) failed.
[  205.907759][ T9054] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1082'.
[  206.050848][ T9061] syzkaller0: create flow: hash 633358039 index 1
[  206.141185][ T9054] syzkaller0: entered promiscuous mode
[  206.146717][ T9054] syzkaller0: entered allmulticast mode
[  206.169116][   T62] syzkaller0: tun_net_xmit 48
[  206.358670][ T9067] nbd: must specify an index to disconnect
[  206.446751][ T9054] syzkaller0: delete flow: hash 633358039 index 1
[  206.564991][ T9074] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001
[  208.210685][ T9077] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1088'.
[  208.235442][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.243196][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.541719][ T9092] batadv0: entered promiscuous mode
[  208.645612][ T9098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.608676][ T9140] __nla_validate_parse: 7 callbacks suppressed
[  209.608696][ T9140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1113'.
[  209.770522][ T9146] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1117'.
[  209.798256][ T9146] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1117'.
[  209.812849][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'.
[  210.155473][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'.
[  210.211545][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'.
[  210.255905][ T9176] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1125'.
[  210.609353][ T9196] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1132'.
[  210.631598][ T9196] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  210.647315][ T9199] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1133'.
[  210.668656][ T9199] 1·: renamed from 
c0· (while UP)
[  210.689584][ T9199] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  210.768415][ T9204] xt_connbytes: Forcing CT accounting to be enabled
[  210.777318][ T9204] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  210.932488][ T9211] xt_TCPMSS: Only works on TCP SYN packets
[  210.976519][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1139'.
[  210.987582][ T9211] netlink: 'syz.4.1139': attribute type 7 has an invalid length.
[  210.995642][ T9211] netlink: 'syz.4.1139': attribute type 8 has an invalid length.
[  211.007548][ T9211] bridge0: entered promiscuous mode
[  211.014789][ T9211] batadv_slave_1: entered promiscuous mode
[  211.023424][ T9211] gretap0: entered promiscuous mode
[  211.030101][ T9211] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  211.179619][ T9224] sch_tbf: burst 34 is lower than device lo mtu (65550) !
[  211.278335][ T9228] netlink: 'syz.4.1144': attribute type 1 has an invalid length.
[  212.046031][ T9273] IPVS: length: 51 != 8
[  212.046506][ T9279] vlan0: entered promiscuous mode
[  212.129734][ T9282] hsr0: VLAN not yet supported
[  212.149193][ T9279] team0: Port device vlan0 added
[  212.349418][ T9296] FAULT_INJECTION: forcing a failure.
[  212.349418][ T9296] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  212.375274][ T9296] CPU: 1 UID: 0 PID: 9296 Comm: syz.2.1162 Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  212.385663][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  212.395744][ T9296] Call Trace:
[  212.399053][ T9296]  <TASK>
[  212.402010][ T9296]  dump_stack_lvl+0x241/0x360
[  212.406728][ T9296]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.411958][ T9296]  ? __pfx__printk+0x10/0x10
[  212.416593][ T9296]  should_fail_ex+0x3b0/0x4e0
[  212.421298][ T9296]  _copy_from_user+0x2f/0xe0
[  212.425922][ T9296]  move_addr_to_kernel+0x82/0x150
[  212.430975][ T9296]  __sys_sendto+0x2a3/0x4f0
[  212.435571][ T9296]  ? __pfx___sys_sendto+0x10/0x10
[  212.440651][ T9296]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  212.446663][ T9296]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  212.453029][ T9296]  __x64_sys_sendto+0xde/0x100
[  212.457844][ T9296]  do_syscall_64+0xf3/0x230
[  212.462410][ T9296]  ? clear_bhb_loop+0x35/0x90
[  212.467124][ T9296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.473054][ T9296] RIP: 0033:0x7f7323d7def9
[  212.477513][ T9296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.497161][ T9296] RSP: 002b:00007f7324c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  212.505621][ T9296] RAX: ffffffffffffffda RBX: 00007f7323f35f80 RCX: 00007f7323d7def9
[  212.513647][ T9296] RDX: 000000000000008e RSI: 0000000020000180 RDI: 0000000000000004
[  212.521642][ T9296] RBP: 00007f7324c29090 R08: 0000000020000380 R09: 0000000000000010
[  212.529632][ T9296] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001
[  212.537630][ T9296] R13: 0000000000000000 R14: 00007f7323f35f80 R15: 00007fff8bff2578
[  212.545644][ T9296]  </TASK>
[  212.754082][ T9317] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  212.762866][ T9313] ieee802154 phy0 wpan0: encryption failed: -22
[  212.794466][ T9317] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  212.880421][ T9321] Dead loop on virtual device ipvlan1, fix it urgently!
[  212.944218][ T9323] x_tables: unsorted underflow at hook 1
[  213.292334][ T9341] xt_ecn: cannot match TCP bits for non-tcp packets
[  213.824883][ T9321] syz.4.1170 (9321) used greatest stack depth: 7064 bytes left
[  213.875725][ T9380] sctp: [Deprecated]: syz.3.1192 (pid 9380) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.875725][ T9380] Use struct sctp_sack_info instead
[  213.979148][ T9387] netlink: zone id is out of range
[  214.134564][ T9394] netlink: 'syz.3.1198': attribute type 10 has an invalid length.
[  214.155066][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.162285][ T9394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.169853][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.177086][ T9394] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.193427][ T9394] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  214.691579][ T9423] xt_TCPMSS: Only works on TCP SYN packets
[  214.973159][   T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  215.197722][ T9455] netlink: zone id is out of range
[  215.434850][ T9470] __nla_validate_parse: 9 callbacks suppressed
[  215.434869][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'.
[  215.471754][ T9470] vxcan5: entered promiscuous mode
[  215.800266][ T9498] xt_policy: too many policy elements
[  215.969512][ T9508] FAULT_INJECTION: forcing a failure.
[  215.969512][ T9508] name failslab, interval 1, probability 0, space 0, times 1
[  216.022623][ T9508] CPU: 0 UID: 0 PID: 9508 Comm: syz.0.1237 Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  216.033014][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  216.043191][ T9508] Call Trace:
[  216.046485][ T9508]  <TASK>
[  216.049430][ T9508]  dump_stack_lvl+0x241/0x360
[  216.054145][ T9508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.059376][ T9508]  ? __pfx__printk+0x10/0x10
[  216.064009][ T9508]  should_fail_ex+0x3b0/0x4e0
[  216.068716][ T9508]  ? dst_alloc+0x12b/0x190
[  216.073171][ T9508]  should_failslab+0xac/0x100
[  216.077969][ T9508]  ? dst_alloc+0x12b/0x190
[  216.082437][ T9508]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  216.087842][ T9508]  dst_alloc+0x12b/0x190
[  216.092220][ T9508]  xfrm_alloc_dst+0x6e/0x150
[  216.096876][ T9508]  xfrm_lookup_with_ifid+0xc16/0x1ee0
[  216.102297][ T9508]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  216.108137][ T9508]  ? ip_route_output_key_hash+0xdf/0x2b0
[  216.113893][ T9508]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  216.120003][ T9508]  ? tomoyo_check_acl+0x37e/0x3f0
[  216.125064][ T9508]  ? tomoyo_check_inet_address+0x2b7/0xbb0
[  216.130890][ T9508]  xfrm_lookup_route+0x3c/0x1c0
[  216.135752][ T9508]  udp_sendmsg+0x174a/0x2a60
[  216.140365][ T9508]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  216.145920][ T9508]  ? __pfx_udp_sendmsg+0x10/0x10
[  216.150882][ T9508]  ? aa_sk_perm+0x96d/0xab0
[  216.155394][ T9508]  ? __pfx_aa_sk_perm+0x10/0x10
[  216.160248][ T9508]  ? sock_rps_record_flow+0x1a/0x400
[  216.165546][ T9508]  ? inet_sendmsg+0x2ba/0x390
[  216.170226][ T9508]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  216.175536][ T9508]  ? security_socket_sendmsg+0x87/0xb0
[  216.181009][ T9508]  __sock_sendmsg+0x1a6/0x270
[  216.185694][ T9508]  __sys_sendto+0x3a4/0x4f0
[  216.190220][ T9508]  ? __pfx___sys_sendto+0x10/0x10
[  216.195294][ T9508]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  216.201292][ T9508]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  216.207637][ T9508]  __x64_sys_sendto+0xde/0x100
[  216.212423][ T9508]  do_syscall_64+0xf3/0x230
[  216.216948][ T9508]  ? clear_bhb_loop+0x35/0x90
[  216.221638][ T9508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.227539][ T9508] RIP: 0033:0x7f0f1077def9
[  216.231976][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.251593][ T9508] RSP: 002b:00007f0f11512038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  216.260005][ T9508] RAX: ffffffffffffffda RBX: 00007f0f10935f80 RCX: 00007f0f1077def9
[  216.267978][ T9508] RDX: 000000000000008e RSI: 0000000020000180 RDI: 0000000000000004
[  216.275952][ T9508] RBP: 00007f0f11512090 R08: 0000000020000380 R09: 0000000000000010
[  216.283922][ T9508] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001
[  216.291976][ T9508] R13: 0000000000000000 R14: 00007f0f10935f80 R15: 00007ffeb3d09f58
[  216.299962][ T9508]  </TASK>
[  217.133655][ T9556] FAULT_INJECTION: forcing a failure.
[  217.133655][ T9556] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  217.147298][ T9556] CPU: 1 UID: 0 PID: 9556 Comm: syz.2.1257 Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  217.157668][ T9556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  217.167736][ T9556] Call Trace:
[  217.171016][ T9556]  <TASK>
[  217.173939][ T9556]  dump_stack_lvl+0x241/0x360
[  217.178625][ T9556]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.183830][ T9556]  ? __pfx__printk+0x10/0x10
[  217.188425][ T9556]  ? __pfx_lock_release+0x10/0x10
[  217.193458][ T9556]  should_fail_ex+0x3b0/0x4e0
[  217.198148][ T9556]  _copy_from_user+0x2f/0xe0
[  217.202742][ T9556]  copy_msghdr_from_user+0xae/0x680
[  217.207948][ T9556]  ? timespec64_add_safe+0x1be/0x220
[  217.213249][ T9556]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  217.219065][ T9556]  do_recvmmsg+0x40f/0xae0
[  217.223481][ T9556]  ? mark_lock+0x9a/0x350
[  217.227840][ T9556]  ? __pfx_do_recvmmsg+0x10/0x10
[  217.232809][ T9556]  ? __pfx___might_resched+0x10/0x10
[  217.238098][ T9556]  ? __might_fault+0xaa/0x120
[  217.242781][ T9556]  ? __pfx_lock_release+0x10/0x10
[  217.247813][ T9556]  ? vfs_write+0x7c4/0xc90
[  217.252248][ T9556]  ? get_timespec64+0x19c/0x280
[  217.257117][ T9556]  __x64_sys_recvmmsg+0x1b8/0x250
[  217.262150][ T9556]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  217.267698][ T9556]  ? do_syscall_64+0x100/0x230
[  217.272477][ T9556]  ? do_syscall_64+0xb6/0x230
[  217.277164][ T9556]  do_syscall_64+0xf3/0x230
[  217.281681][ T9556]  ? clear_bhb_loop+0x35/0x90
[  217.286362][ T9556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.292256][ T9556] RIP: 0033:0x7f7323d7def9
[  217.296668][ T9556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.316273][ T9556] RSP: 002b:00007f7324c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  217.324778][ T9556] RAX: ffffffffffffffda RBX: 00007f7323f35f80 RCX: 00007f7323d7def9
[  217.332753][ T9556] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003
[  217.340725][ T9556] RBP: 00007f7324c29090 R08: 0000000020003700 R09: 0000000000000000
[  217.348704][ T9556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.356681][ T9556] R13: 0000000000000000 R14: 00007f7323f35f80 R15: 00007fff8bff2578
[  217.364668][ T9556]  </TASK>
[  217.372889][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1255'.
[  217.382200][ T9557] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1255'.
[  217.431514][ T9557] gretap1: entered promiscuous mode
[  217.445462][ T9557] gretap1: entered allmulticast mode
[  217.465286][ T9559] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  218.194992][ T9597] FAULT_INJECTION: forcing a failure.
[  218.194992][ T9597] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  218.218996][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'.
[  218.225201][ T9597] CPU: 0 UID: 0 PID: 9597 Comm: syz.3.1268 Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  218.238217][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  218.248292][ T9597] Call Trace:
[  218.251592][ T9597]  <TASK>
[  218.254537][ T9597]  dump_stack_lvl+0x241/0x360
[  218.259262][ T9597]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.264505][ T9597]  ? __pfx__printk+0x10/0x10
[  218.269130][ T9597]  ? __pfx_lock_release+0x10/0x10
[  218.274183][ T9597]  ? __alloc_skb+0x28f/0x440
[  218.278806][ T9597]  should_fail_ex+0x3b0/0x4e0
[  218.283504][ T9597]  _copy_from_user+0x2f/0xe0
[  218.288128][ T9597]  csum_and_copy_from_iter_full+0x1fe/0x1df0
[  218.294130][ T9597]  ? alloc_skb_with_frags+0x77c/0x820
[  218.299529][ T9597]  ? skb_set_owner_w+0x238/0x3e0
[  218.304506][ T9597]  ? __pfx_csum_and_copy_from_iter_full+0x10/0x10
[  218.310958][ T9597]  ip_generic_getfrag+0x158/0x310
[  218.316014][ T9597]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  218.321592][ T9597]  ? skb_put+0x114/0x1f0
[  218.325857][ T9597]  __ip_append_data+0x31f8/0x41d0
[  218.330935][ T9597]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  218.336521][ T9597]  ? ip_route_output_key_hash+0xdf/0x2b0
[  218.342186][ T9597]  ? __pfx___ip_append_data+0x10/0x10
[  218.347589][ T9597]  ? ipv4_mtu+0x2bc/0x3d0
[  218.351956][ T9597]  ? ip_setup_cork+0x4ae/0x8b0
[  218.356752][ T9597]  ip_make_skb+0x198/0x420
[  218.361202][ T9597]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  218.366777][ T9597]  ? __pfx_ip_make_skb+0x10/0x10
[  218.371773][ T9597]  ? tomoyo_check_inet_address+0x2b7/0xbb0
[  218.377618][ T9597]  udp_sendmsg+0x1bef/0x2a60
[  218.382263][ T9597]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  218.387845][ T9597]  ? __pfx_udp_sendmsg+0x10/0x10
[  218.392840][ T9597]  ? aa_sk_perm+0x96d/0xab0
[  218.397381][ T9597]  ? __pfx_aa_sk_perm+0x10/0x10
[  218.402270][ T9597]  ? inet_sendmsg+0x2ba/0x390
[  218.406988][ T9597]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  218.412306][ T9597]  ? security_socket_sendmsg+0x87/0xb0
[  218.417800][ T9597]  __sock_sendmsg+0x1a6/0x270
[  218.422522][ T9597]  __sys_sendto+0x3a4/0x4f0
[  218.427102][ T9597]  ? __pfx___sys_sendto+0x10/0x10
[  218.432202][ T9597]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  218.438213][ T9597]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  218.444575][ T9597]  __x64_sys_sendto+0xde/0x100
[  218.449382][ T9597]  do_syscall_64+0xf3/0x230
[  218.453910][ T9597]  ? clear_bhb_loop+0x35/0x90
[  218.458611][ T9597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.464529][ T9597] RIP: 0033:0x7f3c14f7def9
[  218.468973][ T9597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.488594][ T9597] RSP: 002b:00007f3c15cba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  218.497035][ T9597] RAX: ffffffffffffffda RBX: 00007f3c15135f80 RCX: 00007f3c14f7def9
[  218.505032][ T9597] RDX: 000000000000008e RSI: 0000000020000180 RDI: 0000000000000004
[  218.513022][ T9597] RBP: 00007f3c15cba090 R08: 0000000020000380 R09: 0000000000000010
[  218.521008][ T9597] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001
[  218.528994][ T9597] R13: 0000000000000000 R14: 00007f3c15135f80 R15: 00007fff22ed3948
[  218.537009][ T9597]  </TASK>
[  218.925540][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'.
[  218.953073][ T9628] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[  220.921813][ T9652] IPVS: Unknown mcast interface: lo
[  220.992417][ T9651] syz.1.1282 uses old SIOCAX25GETINFO
[  221.028992][ T9659] FAULT_INJECTION: forcing a failure.
[  221.028992][ T9659] name failslab, interval 1, probability 0, space 0, times 0
[  221.055044][ T9659] CPU: 0 UID: 0 PID: 9659 Comm: syz.2.1284 Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  221.065437][ T9659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  221.075492][ T9659] Call Trace:
[  221.078858][ T9659]  <TASK>
[  221.081787][ T9659]  dump_stack_lvl+0x241/0x360
[  221.086473][ T9659]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.091676][ T9659]  ? __pfx__printk+0x10/0x10
[  221.096274][ T9659]  ? kmem_cache_alloc_node_noprof+0x49/0x320
[  221.102258][ T9659]  ? __pfx___might_resched+0x10/0x10
[  221.107561][ T9659]  should_fail_ex+0x3b0/0x4e0
[  221.112265][ T9659]  should_failslab+0xac/0x100
[  221.116957][ T9659]  ? __alloc_skb+0x1c3/0x440
[  221.121563][ T9659]  kmem_cache_alloc_node_noprof+0x71/0x320
[  221.127382][ T9659]  __alloc_skb+0x1c3/0x440
[  221.131836][ T9659]  ? ip_generic_getfrag+0x1d5/0x310
[  221.137047][ T9659]  ? __pfx___alloc_skb+0x10/0x10
[  221.141997][ T9659]  ? skb_put+0x114/0x1f0
[  221.146236][ T9659]  __ip_append_data+0x2e35/0x41d0
[  221.151293][ T9659]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  221.156873][ T9659]  ? __pfx___ip_append_data+0x10/0x10
[  221.162252][ T9659]  ? ipv4_mtu+0x2bc/0x3d0
[  221.166591][ T9659]  ? ip_setup_cork+0x4ae/0x8b0
[  221.171364][ T9659]  ip_make_skb+0x198/0x420
[  221.175787][ T9659]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  221.181336][ T9659]  ? __pfx_ip_make_skb+0x10/0x10
[  221.186285][ T9659]  ? tomoyo_check_inet_address+0x2b7/0xbb0
[  221.192098][ T9659]  udp_sendmsg+0x1bef/0x2a60
[  221.196709][ T9659]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  221.202261][ T9659]  ? __pfx_udp_sendmsg+0x10/0x10
[  221.207226][ T9659]  ? aa_sk_perm+0x96d/0xab0
[  221.211768][ T9659]  ? __pfx_aa_sk_perm+0x10/0x10
[  221.216622][ T9659]  ? inet_sendmsg+0x2ba/0x390
[  221.221310][ T9659]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  221.226604][ T9659]  ? security_socket_sendmsg+0x87/0xb0
[  221.232068][ T9659]  __sock_sendmsg+0x1a6/0x270
[  221.236746][ T9659]  __sys_sendto+0x3a4/0x4f0
[  221.241261][ T9659]  ? __pfx___sys_sendto+0x10/0x10
[  221.246311][ T9659]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  221.252297][ T9659]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  221.258630][ T9659]  __x64_sys_sendto+0xde/0x100
[  221.263402][ T9659]  do_syscall_64+0xf3/0x230
[  221.267915][ T9659]  ? clear_bhb_loop+0x35/0x90
[  221.272600][ T9659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.278490][ T9659] RIP: 0033:0x7f7323d7def9
[  221.282901][ T9659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.302501][ T9659] RSP: 002b:00007f7324c29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  221.310926][ T9659] RAX: ffffffffffffffda RBX: 00007f7323f35f80 RCX: 00007f7323d7def9
[  221.318892][ T9659] RDX: 000000000000008e RSI: 0000000020000180 RDI: 0000000000000004
[  221.326891][ T9659] RBP: 00007f7324c29090 R08: 0000000020000380 R09: 0000000000000010
[  221.334865][ T9659] R10: 0000000004004000 R11: 0000000000000246 R12: 0000000000000001
[  221.342828][ T9659] R13: 0000000000000000 R14: 00007f7323f35f80 R15: 00007fff8bff2578
[  221.350807][ T9659]  </TASK>
[  221.540461][ T9670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1289'.
[  221.568932][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'.
[  221.583903][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'.
[  221.674250][ T9674] netlink: 'syz.1.1292': attribute type 1 has an invalid length.
[  221.786124][ T9680] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1292'.
[  221.849319][ T9674] bond2 (unregistering): Released all slaves
[  222.055927][ T9696] Cannot find del_set index 17 as target
[  222.101267][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'.
[  222.152068][ T9702] gtp0: entered promiscuous mode
[  222.167281][ T9702] gtp0: entered allmulticast mode
[  222.187760][ T9702] netlink: 'syz.4.1301': attribute type 1 has an invalid length.
[  222.207875][ T9702] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1301'.
[  223.027627][ T5291] IPVS: starting estimator thread 0...
[  223.040149][ T9748] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  223.087301][ T9748] tipc: Enabled bearer <udp:s>, priority 10
[  223.160734][ T9750] IPVS: using max 19 ests per chain, 45600 per kthread
[  223.171203][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  223.212089][ T9760] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1320'.
[  223.232692][ T9760] netlink: 'syz.1.1320': attribute type 10 has an invalid length.
[  223.331501][ T9760] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  223.364563][ T9759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.421480][ T9774] netlink: 'syz.2.1325': attribute type 4 has an invalid length.
[  223.440134][ T9774] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1325'.
[  223.449609][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  223.742693][ T9792] openvswitch: netlink: nsh attr 9 is out of range max 3
[  223.757513][ T9794] openvswitch: netlink: nsh attr 9 is out of range max 3
[  223.793120][ T9792] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1331'.
[  223.815275][ T9797] sch_fq: defrate 3 ignored.
[  223.824127][ T9794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1331'.
[  223.970701][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  224.785024][ T5291] Dead loop on virtual device ipvlan1, fix it urgently!
[  224.901298][ T5241] Bluetooth: hci2: command tx timeout
[  225.054886][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  225.393547][ T9914] macsec0: entered promiscuous mode
[  225.512220][ T9922] ebtables: ebtables: counters copy to user failed while replacing table
[  225.788684][   T47] Dead loop on virtual device ipvlan1, fix it urgently!
[  225.912162][ T9935] netlink: 'syz.1.1368': attribute type 5 has an invalid length.
[  226.256607][ T9939] team1: Mode changed to "loadbalance"
[  226.324101][ T9947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  226.557753][ T9959] __nla_validate_parse: 11 callbacks suppressed
[  226.557777][ T9959] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1376'.
[  226.658396][ T9961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1377'.
[  226.757585][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'.
[  226.875830][ T9970] pim6reg1: entered promiscuous mode
[  226.885996][ T9970] pim6reg1: entered allmulticast mode
[  227.365958][ T9987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1387'.
[  227.388197][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'.
[  228.173469][    C1] net_ratelimit: 3 callbacks suppressed
[  228.173493][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  229.212471][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  229.574723][T10017] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1393'.
[  230.119441][T10058] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1405'.
[  230.139489][T10059] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1402'.
[  230.180911][T10059] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1402'.
[  230.250801][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  230.309561][T10066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1406'.
[  230.426020][T10070] netlink: 'syz.2.1408': attribute type 11 has an invalid length.
[  230.470079][T10072] x_tables: unsorted underflow at hook 4
[  230.745564][T10088] Dead loop on virtual device ipvlan1, fix it urgently!
[  230.840702][   T47] IPVS: starting estimator thread 0...
[  230.859190][T10088] syz.4.1415 (10088) used greatest stack depth: 6640 bytes left
[  230.924844][T10102] batadv_slave_1: entered promiscuous mode
[  230.942034][T10107] set match dimension is over the limit!
[  230.943180][T10098] IPVS: using max 19 ests per chain, 45600 per kthread
[  231.033586][T10100] batadv_slave_1: left promiscuous mode
[  231.179637][T10114] netlink: 'syz.3.1425': attribute type 1 has an invalid length.
[  231.201337][T10114] netlink: 'syz.3.1425': attribute type 1 has an invalid length.
[  231.209400][T10119] netlink: 'syz.0.1427': attribute type 3 has an invalid length.
[  231.290809][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  231.510947][T10139] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  231.521469][T10139] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  231.755030][T10153] netlink: 'syz.0.1438': attribute type 1 has an invalid length.
[  231.782460][T10155] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  231.938684][T10164] netlink: 'syz.4.1441': attribute type 1 has an invalid length.
[  232.326042][T10180] __nla_validate_parse: 6 callbacks suppressed
[  232.326061][T10180] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1447'.
[  232.332349][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  232.397928][T10180] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1447'.
[  232.449568][T10180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.529452][T10187] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1448'.
[  233.054516][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'.
[  233.082694][T10226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1457'.
[  233.116460][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'.
[  233.132938][T10219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'.
[  233.371004][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  233.561275][T10246] gretap0: Device is already in use.
[  233.689904][T10259] sctp: [Deprecated]: syz.1.1472 (pid 10259) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.689904][T10259] Use struct sctp_sack_info instead
[  234.001920][T10277] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  234.046675][T10279] netlink: 'syz.0.1477': attribute type 16 has an invalid length.
[  234.321920][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1480'.
[  234.410703][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  234.911061][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1493'.
[  234.993709][T10334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1494'.
[  235.154019][T10341] netlink: 'syz.1.1496': attribute type 9 has an invalid length.
[  235.215661][T10342] netlink: 'syz.1.1496': attribute type 9 has an invalid length.
[  235.300807][T10344] netlink: 'syz.2.1498': attribute type 1 has an invalid length.
[  235.450623][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  236.226140][ T5291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.327982][T10407] netlink: 'syz.4.1518': attribute type 4 has an invalid length.
[  236.354679][ T5291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.420796][ T5241] Bluetooth: hci2: command tx timeout
[  236.430937][ T5318] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.500759][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  236.530958][ T5318] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.650911][ T5318] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.841014][ T5318] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  236.920996][ T5318] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  237.081709][ T5291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  237.161474][ T5291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  237.283711][T10466] netlink: 'syz.1.1538': attribute type 3 has an invalid length.
[  237.372840][T10473] __nla_validate_parse: 13 callbacks suppressed
[  237.372859][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1541'.
[  237.392667][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'.
[  237.529170][T10483] netlink: 'syz.4.1545': attribute type 1 has an invalid length.
[  237.541891][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  237.630162][T10483] 8021q: adding VLAN 0 to HW filter on device bond3
[  237.638656][T10481] netlink: 'syz.4.1545': attribute type 1 has an invalid length.
[  237.668033][T10487] bond3: (slave ip6gretap1): making interface the new active one
[  237.678914][T10487] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  237.750839][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  237.925435][T10502] netlink: 'syz.1.1548': attribute type 1 has an invalid length.
[  237.946357][T10502] netlink: 'syz.1.1548': attribute type 2 has an invalid length.
[  238.528996][T10514] syzkaller0: entered promiscuous mode
[  238.539619][T10514] syzkaller0: entered allmulticast mode
[  238.550492][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'.
[  238.570713][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  239.610629][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  240.599710][T10490] pimreg3: entered allmulticast mode
[  240.660592][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  241.133438][T10558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1566'.
[  241.166834][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1566'.
[  241.320191][T10562] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  241.362575][T10562] macsec2: entered promiscuous mode
[  241.378419][T10562] macsec2: entered allmulticast mode
[  241.388450][T10562] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode
[  241.470268][T10566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1568'.
[  241.482430][T10572] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1570'.
[  241.512222][T10572] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1570'.
[  241.690691][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  241.753189][T10589] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1576'.
[  241.949042][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'.
[  242.040991][T10602] netlink: 'syz.3.1579': attribute type 1 has an invalid length.
[  242.060982][T10602] netlink: 'syz.3.1579': attribute type 1 has an invalid length.
[  242.191788][T10615] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  242.208997][T10611] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20004
[  242.386578][T10633] __nla_validate_parse: 9 callbacks suppressed
[  242.386601][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1588'.
[  242.454721][T10637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1590'.
[  242.493671][ T5253] Bluetooth: hci1: command 0x0406 tx timeout
[  242.494487][ T4621] Bluetooth: hci5: command 0x0406 tx timeout
[  242.500158][ T5253] Bluetooth: hci6: command 0x0406 tx timeout
[  242.507595][T10637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1590'.
[  242.679670][T10646] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1591'.
[  242.730720][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  242.809468][T10660] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1596'.
[  242.840201][T10659] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1596'.
[  242.870841][T10660] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[  242.878611][T10659] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[  243.203406][T10681] netlink: 'syz.4.1601': attribute type 11 has an invalid length.
[  243.253328][T10684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1603'.
[  243.281773][T10684] netlink: 'syz.1.1603': attribute type 7 has an invalid length.
[  243.289547][T10684] netlink: 'syz.1.1603': attribute type 8 has an invalid length.
[  243.302276][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'.
[  243.358416][T10685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1603'.
[  243.411018][T10685] netlink: 'syz.1.1603': attribute type 7 has an invalid length.
[  243.420735][T10685] netlink: 'syz.1.1603': attribute type 8 has an invalid length.
[  243.428501][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'.
[  243.770640][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  243.961864][T10733] syz.0.1615[10733] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  243.962009][T10733] syz.0.1615[10733] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  244.506156][T10775] netlink: 'syz.2.1628': attribute type 10 has an invalid length.
[  244.632275][T10775] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  244.703960][T10791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.760831][T10793] xt_CT: You must specify a L4 protocol and not use inversions on it
[  244.810694][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  245.091786][T10817] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:004c:7000 with DS=0xd
[  245.355618][T10832] netlink: 'syz.0.1646': attribute type 10 has an invalid length.
[  245.381559][T10832] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.388852][T10832] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.398327][T10836] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20002
[  245.447512][T10840] netlink: 'syz.1.1648': attribute type 8 has an invalid length.
[  245.748153][T10858] sctp: [Deprecated]: syz.1.1653 (pid 10858) Use of int in maxseg socket option.
[  245.748153][T10858] Use struct sctp_assoc_value instead
[  245.850803][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  245.999989][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  246.881656][T10930] bridge_slave_1: left allmulticast mode
[  246.887365][T10930] bridge_slave_1: left promiscuous mode
[  246.893611][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  246.940047][T10930] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.954932][T10934] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  246.964249][T10934] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  246.974008][T10934] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  246.983880][T10934] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  246.994443][T10934] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  247.008418][T10934] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  247.018408][T10934] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  247.032821][T10934] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  247.042365][T10934] geneve2: entered promiscuous mode
[  247.047604][T10934] geneve2: entered allmulticast mode
[  247.573742][T10969] __nla_validate_parse: 44 callbacks suppressed
[  247.573772][T10969] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1692'.
[  247.624287][T10971] openvswitch: netlink: Message has 8 unknown bytes.
[  247.645054][T10971] openvswitch: netlink: Actions may not be safe on all matching packets
[  247.820328][T10980] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1698'.
[  247.930917][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  248.012998][T10999] netlink: zone id is out of range
[  248.013654][T11002] validate_nla: 2 callbacks suppressed
[  248.013670][T11002] netlink: 'syz.1.1701': attribute type 12 has an invalid length.
[  248.018152][T10999] netlink: zone id is out of range
[  248.045436][T11002] netlink: 'syz.1.1701': attribute type 11 has an invalid length.
[  248.085616][T11004] netlink: 'syz.2.1700': attribute type 4 has an invalid length.
[  248.091476][T11002] netlink: 'syz.1.1701': attribute type 11 has an invalid length.
[  248.131519][T11002] netlink: 'syz.1.1701': attribute type 11 has an invalid length.
[  248.139411][T11002] netlink: 'syz.1.1701': attribute type 11 has an invalid length.
[  248.185972][T11002] netlink: 'syz.1.1701': attribute type 11 has an invalid length.
[  248.204425][T11002] netlink: 'syz.1.1701': attribute type 4 has an invalid length.
[  248.222124][T11002] netlink: 'syz.1.1701': attribute type 5 has an invalid length.
[  248.233727][T11012] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode
[  248.253448][T11002] netlink: 196072 bytes leftover after parsing attributes in process `syz.1.1701'.
[  248.274079][T11009] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1703'.
[  248.428568][T11027] xt_cgroup: xt_cgroup: no path or classid specified
[  248.785701][T11048] net_ratelimit: 41 callbacks suppressed
[  248.785721][T11048] A link change request failed with some changes committed already. Interface nê1®NuëöÉÑ30 may have been left with an inconsistent configuration, please check.
[  248.971752][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  249.000261][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'.
[  249.021147][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'.
[  249.031873][T11059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.039914][T11059] IPv6: NLM_F_CREATE should be set when creating new route
[  249.115855][T11059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1720'.
[  249.164666][T11070] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1724'.
[  249.184788][T11070] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1724'.
[  249.691557][T11099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1732'.
[  249.718236][T11099] netlink: 'syz.2.1732': attribute type 7 has an invalid length.
[  249.744284][T11099] netlink: 'syz.2.1732': attribute type 8 has an invalid length.
[  250.010895][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  250.535483][T11153] IPv6: sit1: Disabled Multicast RS
[  250.600133][ T5241] Bluetooth: hci2: link tx timeout
[  250.608819][ T5241] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  250.636389][T11161] netlink: 'syz.3.1751': attribute type 1 has an invalid length.
[  250.951169][T11175] tipc: Can't bind to reserved service type 2
[  251.019619][T11185] erspan0: vlans aren't supported yet for dev_uc|mc_add()
[  251.050596][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  251.363903][T11203] netlink: 'syz.2.1763': attribute type 2 has an invalid length.
[  251.569260][T11216] nê1®NuëöÉÑ30: left allmulticast mode
[  251.586726][T11216] A link change request failed with some changes committed already. Interface nê1®NuëöÉÑ30 may have been left with an inconsistent configuration, please check.
[  251.829188][T11236] netlink: 'syz.1.1770': attribute type 4 has an invalid length.
[  251.984592][T11238] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.100614][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  252.217609][T11253] netlink: 'syz.0.1780': attribute type 9 has an invalid length.
[  252.653317][ T5241] Bluetooth: hci2: command 0x0406 tx timeout
[  252.728165][T11286] __nla_validate_parse: 11 callbacks suppressed
[  252.728184][T11286] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1792'.
[  253.130632][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  253.145639][T11310] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0
[  253.155820][T11302] IPVS: stopping backup sync thread 11310 ...
[  253.368830][T11311] veth0_macvtap: left promiscuous mode
[  253.376825][T11318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1797'.
[  253.437808][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'.
[  254.170915][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  254.357556][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'.
[  254.625732][T11373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1815'.
[  254.933919][T11388] netlink: 'syz.0.1818': attribute type 4 has an invalid length.
[  254.960732][   T29] audit: type=1107 audit(1726768260.644:2): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Š63
ú\›†m!öiN›íŠÉÍ‹ôEð~8§*ÔŽFEß@P7+¼kÜÖ'
[  254.983226][T11388] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  255.054045][T11388] netlink: 'syz.0.1818': attribute type 7 has an invalid length.
[  255.210624][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  255.612793][T11417] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  255.620319][T11417] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  255.672311][T11417] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  255.706958][T11416] netlink: 'syz.3.1821': attribute type 21 has an invalid length.
[  255.736505][T11416] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1821'.
[  255.781953][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  255.790550][T11416] netlink: 'syz.3.1821': attribute type 5 has an invalid length.
[  255.798481][T11416] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1821'.
[  256.133978][T11456] xt_hashlimit: invalid interval
[  256.144751][T11452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1828'.
[  256.240701][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1834'.
[  256.250663][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  256.315810][T11463] can: request_module (can-proto-0) failed.
[  256.637175][T11488] pimreg: entered allmulticast mode
[  256.817090][T11502] delete_channel: no stack
[  256.841247][T11504] netlink: 'syz.1.1843': attribute type 1 has an invalid length.
[  256.860065][T11504] netlink: 9384 bytes leftover after parsing attributes in process `syz.1.1843'.
[  256.896059][T11508] netlink: zone id is out of range
[  256.924513][T11511] ipt_REJECT: TCP_RESET invalid for non-tcp
[  257.290850][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  257.306091][T11531] netlink: 'syz.3.1853': attribute type 8 has an invalid length.
[  257.333654][T11525] ieee802154 phy0 wpan0: encryption failed: -22
[  257.872546][T11565] netlink: 'syz.3.1861': attribute type 9 has an invalid length.
[  257.897772][T11565] __nla_validate_parse: 6 callbacks suppressed
[  257.897791][T11565] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1861'.
[  257.962914][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'.
[  257.994763][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1862'.
[  258.021523][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'.
[  258.030288][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'.
[  258.069877][T11574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  258.073574][T11573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  258.331109][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  258.691973][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'.
[  258.719570][T11619] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1878'.
[  258.738546][T11619] 0·: renamed from hsr0 (while UP)
[  258.745879][T11619] 0·: entered promiscuous mode
[  258.762098][T11619] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  258.894614][T11629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1881'.
[  258.922044][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'.
[  258.949192][    C1] Unknown status report in ack skb
[  259.117579][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'.
[  259.308596][T11663] netlink: 'syz.2.1890': attribute type 1 has an invalid length.
[  259.370690][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  259.625634][T11684] netlink: 'syz.3.1897': attribute type 21 has an invalid length.
[  259.678383][T11687] 0·: renamed from hsr0 (while UP)
[  259.688423][T11687] 0·: entered promiscuous mode
[  259.706945][T11687] A link change request failed with some changes committed already. Interface 
70· may have been left with an inconsistent configuration, please check.
[  260.410719][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  260.746008][T11749] A link change request failed with some changes committed already. Interface nê1®NuëöÉÑ30 may have been left with an inconsistent configuration, please check.
[  261.140941][T11776] validate_nla: 2 callbacks suppressed
[  261.140958][T11776] netlink: 'syz.4.1922': attribute type 3 has an invalid length.
[  261.264805][T11789] netlink: 'syz.3.1927': attribute type 1 has an invalid length.
[  261.288419][T11789] netlink: 'syz.3.1927': attribute type 3 has an invalid length.
[  261.450676][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  262.006888][ T5318] IPVS: starting estimator thread 0...
[  262.033953][T11836] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:0
[  262.107607][T11853] sctp: [Deprecated]: syz.2.1945 (pid 11853) Use of struct sctp_assoc_value in delayed_ack socket option.
[  262.107607][T11853] Use struct sctp_sack_info instead
[  262.150773][T11850] IPVS: using max 18 ests per chain, 43200 per kthread
[  262.490981][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  262.571375][T11876] netlink: 'syz.2.1954': attribute type 32 has an invalid length.
[  262.596284][T11876] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52)
[  262.935361][T11912] __nla_validate_parse: 18 callbacks suppressed
[  262.935381][T11912] netlink: 4420 bytes leftover after parsing attributes in process `syz.4.1961'.
[  263.088437][T11911] netlink: 'syz.4.1961': attribute type 4 has an invalid length.
[  263.472120][T11949] netlink: 'syz.4.1974': attribute type 32 has an invalid length.
[  263.490677][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'.
[  263.519534][T11949] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52)
[  263.530770][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  263.589385][T11963] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1978'.
[  263.630074][T11964] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1978'.
[  263.711673][T11968] netlink: 'syz.3.1979': attribute type 11 has an invalid length.
[  264.038091][T11981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1984'.
[  264.061104][T11989] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1984'.
[  264.382981][T12007] Bluetooth: MGMT ver 1.23
[  264.518115][T12012] netlink: 'syz.2.1996': attribute type 1 has an invalid length.
[  264.537270][T12018] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1997'.
[  264.571018][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  264.617974][T12022] Dead loop on virtual device ipvlan1, fix it urgently!
[  264.719679][T12027] --map-set only usable from mangle table
[  264.756119][T12032] xt_time: unknown flags 0x4
[  264.857374][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.910857][T12034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2003'.
[  264.953056][T12042] netlink: 'syz.2.2006': attribute type 1 has an invalid length.
[  264.969411][T12042] netlink: 'syz.2.2006': attribute type 4 has an invalid length.
[  264.978515][T12042] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.2006'.
[  265.209686][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'.
[  265.607620][T12086] xt_CT: You must specify a L4 protocol and not use inversions on it
[  265.615933][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  265.698887][T12092] ebt_among: dst integrity fail: 101
[  265.796963][T12100] ipvlan2: entered allmulticast mode
[  265.820123][T12100] veth0_vlan: entered allmulticast mode
[  265.862822][T12102] openvswitch: netlink: Missing key (keys=440, expected=200000)
[  265.917098][T12102] ax25_connect(): syz.0.2023 uses autobind, please contact jreuter@yaina.de
[  266.042424][T12114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  266.086447][T12115] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes.
[  266.261497][ T5255] Bluetooth: hci2: command 0x0406 tx timeout
[  266.341331][T12122] tc_dump_action: action bad kind
[  266.352214][T12126] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  266.419123][T12130] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  266.448613][T12131] unknown channel width for channel at 909000KHz?
[  266.651168][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  266.874677][T12150] Dead loop on virtual device ipvlan1, fix it urgently!
[  267.099575][T12156] 
@ÿÿÿ: renamed from veth0_vlan (while UP)
[  267.684883][T12191] ip6t_srh: unknown srh match flags  4001
[  267.694891][ T5241] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  267.759281][T12197] set match dimension is over the limit!
[  267.766500][T12191] pim6reg1: entered promiscuous mode
[  267.801191][T12191] pim6reg1: entered allmulticast mode
[  268.033861][T12212] __nla_validate_parse: 14 callbacks suppressed
[  268.033882][T12212] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2058'.
[  268.092847][ T9839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.141873][ T9839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.302824][T12226] netlink: 'syz.2.2061': attribute type 9 has an invalid length.
[  268.325037][T12226] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.2061'.
[  268.368995][T12236] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  268.408650][T12236] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  268.444098][T12236] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  268.456779][T12236] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  268.465741][T12236] geneve4: entered promiscuous mode
[  268.472142][T12236] geneve4: entered allmulticast mode
[  268.480060][T12238] netlink: 'syz.3.2064': attribute type 10 has an invalid length.
[  268.501873][T12242] netlink: 'syz.4.2067': attribute type 10 has an invalid length.
[  268.518134][T12242] bond0: (slave virt_wifi0): no link monitoring support
[  268.525836][T12242] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address
[  268.539345][T12242] bond0: (slave virt_wifi0): Error -95 calling set_mac_address
[  268.547374][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'.
[  268.624664][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'.
[  268.671818][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'.
[  268.715422][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'.
[  268.749136][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'.
[  268.776256][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'.
[  268.795986][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'.
[  268.821008][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'.
[  269.129448][T12284] netlink: 'syz.4.2081': attribute type 1 has an invalid length.
[  269.155837][T12284] netlink: 'syz.4.2081': attribute type 1 has an invalid length.
[  269.299230][T12296] netlink: 'syz.3.2085': attribute type 1 has an invalid length.
[  269.770875][    C1] net_ratelimit: 2 callbacks suppressed
[  269.770893][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  269.811052][T12325] xt_hashlimit: Unknown mode mask 115, kernel too old?
[  270.106554][T12351] netlink: 'syz.2.2103': attribute type 12 has an invalid length.
[  270.141572][T12351] netlink: 'syz.2.2103': attribute type 3 has an invalid length.
[  270.281644][T12357] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8
[  270.432507][ T5254] Bluetooth: hci2: command 0x0406 tx timeout
[  270.475127][T12367] hsr0: entered promiscuous mode
[  270.810617][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  270.936937][T12401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.131883][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  271.261236][T12412] netlink: 'syz.4.2124': attribute type 4 has an invalid length.
[  271.647533][T12439] netlink: 'syz.2.2132': attribute type 1 has an invalid length.
[  271.771181][T12445] xt_CT: You must specify a L4 protocol and not use inversions on it
[  271.809962][T12447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.850911][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  272.211995][T12465] SET target dimension over the limit!
[  272.414904][T12479] vlan3: entered promiscuous mode
[  272.476210][T12480] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  272.773966][T12490] IPVS: length: 129 != 8
[  272.890715][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  273.106730][T12499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.282640][T12515] __nla_validate_parse: 61 callbacks suppressed
[  273.282661][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2156'.
[  273.368986][T12519] delete_channel: no stack
[  273.418726][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'.
[  273.425063][T12517] syzkaller0: entered promiscuous mode
[  273.435171][T12517] syzkaller0: entered allmulticast mode
[  273.481448][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'.
[  273.634497][T12523] bond0: (slave macvlan4): Error -98 calling set_mac_address
[  273.940695][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  274.429230][T12553] netlink: set zone limit has 8 unknown bytes
[  274.973929][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  276.013261][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  276.151355][T12542] ip_vti0: entered allmulticast mode
[  276.253222][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  276.341059][T12569] C: renamed from team_slave_0 (while UP)
[  276.360103][T12569] netlink: 'syz.0.2174': attribute type 1 has an invalid length.
[  276.390412][T12569] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  276.417438][T12573] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  276.461476][T12580] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  276.559862][T12584] netlink: 'syz.0.2179': attribute type 3 has an invalid length.
[  276.582012][T12584] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2179'.
[  276.598744][T12585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2180'.
[  276.614402][T12588] Unsupported ieee802154 address type: 0
[  276.761183][T12592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2183'.
[  276.828595][ T9826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.847231][ T9826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  276.999508][ T9826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.023632][ T9826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  277.035967][ T9839] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  277.050792][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  277.178300][T12599] syz.2.2187[12599] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  277.178445][T12599] syz.2.2187[12599] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  277.234009][ T9826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.257247][ T9826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  277.488864][ T9826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.508052][ T9826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  277.784594][ T9826] bridge_slave_0: left allmulticast mode
[  277.790321][ T9826] bridge_slave_0: left promiscuous mode
[  277.823153][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.899685][ T5255] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  277.912537][ T5255] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  277.916406][T12638] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.2197'.
[  277.925464][T12639] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2196'.
[  277.939810][ T5255] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  277.952796][T12639] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  277.974298][ T5255] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  277.989415][ T5255] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  278.003996][ T5255] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  278.091036][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  278.331714][ T5241] Bluetooth: hci7: command 0x0406 tx timeout
[  278.384441][ T9826] bond2 (unregistering): (slave gre1): Releasing backup interface
[  278.484535][ T9826] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  278.592949][ T9826] team0: Port device bridge1 removed
[  278.897161][ T9826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.913227][ T9826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.925888][ T9826] bond0 (unregistering): (slave bond3): Releasing backup interface
[  278.935721][ T9826] bond0 (unregistering): Released all slaves
[  278.951811][ T9826] bond1 (unregistering): Released all slaves
[  278.966319][ T9826] bond2 (unregistering): Released all slaves
[  279.105166][ T9826] bond3 (unregistering): Released all slaves
[  279.117774][ T9826] bond4 (unregistering): Released all slaves
[  279.131046][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  279.161334][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2199'.
[  279.261169][T12654] netlink: 'syz.1.2200': attribute type 1 has an invalid length.
[  279.277032][T12654] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.2200'.
[  279.289015][T12654] netlink: 'syz.1.2200': attribute type 1 has an invalid length.
[  279.310267][ T9826] tipc: Left network mode
[  279.476266][T12658] syz.2.2202[12658] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  279.476418][T12658] syz.2.2202[12658] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  279.637533][T12668] batadv0: entered promiscuous mode
[  279.661938][T12668] batadv_slave_0: entered promiscuous mode
[  279.668108][T12668] batadv_slave_0: left promiscuous mode
[  279.675106][T12668] batadv0: left promiscuous mode
[  279.830108][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2207'.
[  280.086497][T12687] IPVS: length: 157 != 24
[  280.091221][ T5254] Bluetooth: hci6: command tx timeout
[  280.170869][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  280.456096][ T9826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.465329][ T9826] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.484025][ T9826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.509156][ T9826] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.551178][ T9826] veth1_macvtap: left promiscuous mode
[  280.556743][ T9826] veth0_macvtap: left allmulticast mode
[  280.573865][ T9826] veth0_macvtap: left promiscuous mode
[  280.579810][ T9826] veth1_vlan: left promiscuous mode
[  280.596102][ T9826] veth0_vlan: left promiscuous mode
[  280.962163][ T9826] pimreg3 (unregistering): left allmulticast mode
[  281.214033][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  281.441087][ T9826] team0 (unregistering): Port device team_slave_1 removed
[  281.487470][ T9826] team0 (unregistering): Port device C removed
[  281.856426][T12740] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  281.996085][T12633] chnl_net:caif_netlink_parms(): no params data found
[  282.136563][T12752] netlink: 'syz.2.2227': attribute type 1 has an invalid length.
[  282.162478][T12752] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2227'.
[  282.171773][ T5254] Bluetooth: hci6: command tx timeout
[  282.260585][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  282.273094][T12755] netlink: 'syz.4.2230': attribute type 7 has an invalid length.
[  282.281538][T12755] netlink: 'syz.4.2230': attribute type 39 has an invalid length.
[  282.380060][T12758] bridge6: port 1(gretap2) entered blocking state
[  282.388521][T12758] bridge6: port 1(gretap2) entered disabled state
[  282.395518][T12758] gretap2: entered allmulticast mode
[  282.402566][T12758] gretap2: entered promiscuous mode
[  282.416733][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'.
[  282.501158][T12755] netlink: 'syz.4.2230': attribute type 7 has an invalid length.
[  282.524367][T12755] netlink: 'syz.4.2230': attribute type 39 has an invalid length.
[  282.549921][T12770] dccp_v4_rcv: dropped packet with invalid checksum
[  282.700358][T12633] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.731069][T12633] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.738338][T12633] bridge_slave_0: entered allmulticast mode
[  282.802152][T12633] bridge_slave_0: entered promiscuous mode
[  282.912975][T12633] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.947280][T12633] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.966917][T12633] bridge_slave_1: entered allmulticast mode
[  282.993902][T12633] bridge_slave_1: entered promiscuous mode
[  283.189225][T12633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.225549][T12633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.291052][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  283.363158][T12633] team0: Port device team_slave_0 added
[  283.375641][T12633] team0: Port device team_slave_1 added
[  283.406946][ T9826] IPVS: stop unused estimator thread 0...
[  283.500438][T12633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.509162][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.540887][T12633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.558310][T12633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.575561][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.603520][T12633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.619179][T12811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2242'.
[  283.646654][T12815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2242'.
[  283.839893][T12829] dccp_v4_rcv: dropped packet with invalid checksum
[  283.855343][T12830] netlink: 'syz.4.2245': attribute type 11 has an invalid length.
[  283.889540][T12633] hsr_slave_0: entered promiscuous mode
[  283.905768][T12633] hsr_slave_1: entered promiscuous mode
[  283.912981][T12633] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.934336][T12633] Cannot create hsr debugfs directory
[  284.264477][ T5254] Bluetooth: hci6: command tx timeout
[  284.330988][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  284.413503][T12850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  284.491511][T12851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2251'.
[  284.924196][T12633] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  284.944861][T12633] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  284.964768][T12633] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  285.007090][T12633] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  285.102777][T12870] netlink: 'syz.1.2258': attribute type 4 has an invalid length.
[  285.129668][T12870] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2258'.
[  285.200872][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2262'.
[  285.348140][T12633] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.380716][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  285.441718][T12633] 8021q: adding VLAN 0 to HW filter on device team0
[  285.471971][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.479116][ T9826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.568470][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.575679][ T9826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.807441][T12905] netdevsim netdevsim4: Direct firmware load for 
 failed with error -2
[  285.827931][T12905] netdevsim netdevsim4: Falling back to sysfs fallback for: 

[  285.910985][T12908] openvswitch: netlink: ct_state flags 0000d2dc unsupported
[  286.051105][T12906] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  286.255491][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.332521][ T5254] Bluetooth: hci6: command tx timeout
[  286.355592][T12633] veth0_vlan: entered promiscuous mode
[  286.386171][T12633] veth1_vlan: entered promiscuous mode
[  286.420666][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  286.533960][T12931] batadv0: entered allmulticast mode
[  286.592852][T12633] veth0_macvtap: entered promiscuous mode
[  286.621337][T12633] veth1_macvtap: entered promiscuous mode
[  286.671956][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.700548][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.710396][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.763790][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.781219][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.805431][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.831011][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.850620][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.872835][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.897150][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.907572][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  286.926809][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.939233][T12633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.965885][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2275'.
[  287.082189][T12940] bridge0 (unregistering): left promiscuous mode
[  287.156936][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.169878][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2277'.
[  287.192845][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2277'.
[  287.199026][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.226250][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.246897][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.257087][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.268646][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.284432][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.299657][T12951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2277'.
[  287.310667][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.333076][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.353914][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.380696][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.397818][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.441788][T12633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.450772][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  287.489237][T12633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.514889][T12633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.540959][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2277'.
[  287.548769][T12633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.568705][T12633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.570764][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2277'.
[  287.813716][T12947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2277'.
[  287.828046][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.856502][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.909398][ T9839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.931652][ T9839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.490816][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  289.181081][T13008] netlink: 'syz.2.2295': attribute type 13 has an invalid length.
[  289.189033][T13008] macvtap0: entered allmulticast mode
[  289.238069][T13008] macvtap0: refused to change device tx_queue_len
[  289.530768][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  290.129343][T13053] __nla_validate_parse: 7 callbacks suppressed
[  290.129364][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2307'.
[  290.174329][T13054] IPVS: Error connecting to the multicast addr
[  290.366048][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.440168][T13059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2310'.
[  290.571018][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  290.768781][T13063] netlink: 'syz.2.2311': attribute type 5 has an invalid length.
[  290.809370][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2312'.
[  290.864237][T13066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2311'.
[  291.356840][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  291.368355][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  291.378561][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  291.396835][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  291.407958][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  291.416243][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  291.508272][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.611190][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  291.746715][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.802995][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2319'.
[  291.967767][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.287554][T13107] netlink: 'syz.4.2323': attribute type 1 has an invalid length.
[  292.318742][T13107] netlink: 'syz.4.2323': attribute type 4 has an invalid length.
[  292.329920][T13107] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.2323'.
[  292.361030][   T11] bridge_slave_1: left allmulticast mode
[  292.379958][   T11] bridge_slave_1: left promiscuous mode
[  292.408663][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.433168][   T11] bridge_slave_0: left allmulticast mode
[  292.450048][   T11] bridge_slave_0: left promiscuous mode
[  292.460323][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.661620][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  293.085072][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.119171][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.154316][   T11] bond0 (unregistering): Released all slaves
[  293.185384][T13109] batadv_slave_1: entered allmulticast mode
[  293.211146][T13111] batadv_slave_1: left allmulticast mode
[  293.354520][T13127] FAULT_INJECTION: forcing a failure.
[  293.354520][T13127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.379704][T13127] CPU: 0 UID: 0 PID: 13127 Comm: syz.4.2329 Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  293.390158][T13127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  293.400246][T13127] Call Trace:
[  293.403553][T13127]  <TASK>
[  293.406517][T13127]  dump_stack_lvl+0x241/0x360
[  293.411245][T13127]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.416491][T13127]  ? __pfx__printk+0x10/0x10
[  293.421151][T13127]  ? snprintf+0xda/0x120
[  293.425426][T13127]  should_fail_ex+0x3b0/0x4e0
[  293.430204][T13127]  _copy_to_user+0x2f/0xb0
[  293.434650][T13127]  simple_read_from_buffer+0xca/0x150
[  293.440082][T13127]  proc_fail_nth_read+0x1ec/0x260
[  293.445132][T13127]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.450692][T13127]  ? rw_verify_area+0x520/0x6b0
[  293.455544][T13127]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.461103][T13127]  vfs_read+0x204/0xbc0
[  293.465265][T13127]  ? __pfx_lock_release+0x10/0x10
[  293.470295][T13127]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  293.475846][T13127]  ? __pfx_vfs_read+0x10/0x10
[  293.480529][T13127]  ? __fget_files+0x29/0x470
[  293.485153][T13127]  ? __fget_files+0x3f6/0x470
[  293.489850][T13127]  ksys_read+0x1a0/0x2c0
[  293.494100][T13127]  ? __pfx_ksys_read+0x10/0x10
[  293.498866][T13127]  ? do_syscall_64+0x100/0x230
[  293.503653][T13127]  ? do_syscall_64+0xb6/0x230
[  293.508337][T13127]  do_syscall_64+0xf3/0x230
[  293.512853][T13127]  ? clear_bhb_loop+0x35/0x90
[  293.517541][T13127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.523450][T13127] RIP: 0033:0x7f5624f7c93c
[  293.527871][T13127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  293.547490][T13127] RSP: 002b:00007f5625e07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  293.555913][T13127] RAX: ffffffffffffffda RBX: 00007f5625135f80 RCX: 00007f5624f7c93c
[  293.563882][T13127] RDX: 000000000000000f RSI: 00007f5625e070a0 RDI: 0000000000000005
[  293.571850][T13127] RBP: 00007f5625e07090 R08: 0000000000000000 R09: 0000000000000000
[  293.579820][T13127] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000001
[  293.587799][T13127] R13: 0000000000000000 R14: 00007f5625135f80 R15: 00007ffdf343a538
[  293.595791][T13127]  </TASK>
[  293.610369][ T5254] Bluetooth: hci6: command tx timeout
[  293.690607][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  293.824906][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2334'.
[  293.952980][T13148] netlink: 'syz.2.2336': attribute type 2 has an invalid length.
[  293.991097][T13148] netlink: 'syz.2.2336': attribute type 2 has an invalid length.
[  294.021363][T13150] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2337'.
[  294.132352][T13083] chnl_net:caif_netlink_parms(): no params data found
[  294.338903][   T11] hsr_slave_0: left promiscuous mode
[  294.348409][   T11] hsr_slave_1: left promiscuous mode
[  294.355830][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.363390][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.373821][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  294.382598][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.411071][   T11] veth1_macvtap: left promiscuous mode
[  294.416696][   T11] veth0_macvtap: left promiscuous mode
[  294.422465][   T11] veth1_vlan: left promiscuous mode
[  294.427898][   T11] veth0_vlan: left promiscuous mode
[  294.730825][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  294.803707][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2342'.
[  294.859536][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'.
[  295.251212][   T11] team0 (unregistering): Port device team_slave_1 removed
[  295.312202][   T11] team0 (unregistering): Port device team_slave_0 removed
[  295.690871][ T5254] Bluetooth: hci6: command tx timeout
[  295.780626][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  296.050769][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2340'.
[  296.342702][T13083] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.400655][T13083] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.430826][T13083] bridge_slave_0: entered allmulticast mode
[  296.462045][T13083] bridge_slave_0: entered promiscuous mode
[  296.496297][T13083] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.507966][T13083] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.528792][T13083] bridge_slave_1: entered allmulticast mode
[  296.552997][T13083] bridge_slave_1: entered promiscuous mode
[  296.639759][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2348'.
[  296.699136][T13083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.781189][T13083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.810602][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  296.932628][T13083] team0: Port device team_slave_0 added
[  296.962793][T13083] team0: Port device team_slave_1 added
[  296.988219][T13204] netlink: 'syz.4.2352': attribute type 2 has an invalid length.
[  297.010880][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'.
[  297.327037][T13083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.351134][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.390604][T13083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.415404][T13083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.432989][T13083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.461523][T13083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.491574][T13215] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526
[  297.643329][T13217] ipt_REJECT: ECHOREPLY no longer supported.
[  297.709821][T13083] hsr_slave_0: entered promiscuous mode
[  297.729585][T13083] hsr_slave_1: entered promiscuous mode
[  297.750895][T13083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  297.768460][T13083] Cannot create hsr debugfs directory
[  297.773986][ T5254] Bluetooth: hci6: command tx timeout
[  297.819669][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'.
[  297.850693][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  297.962781][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'.
[  297.972349][T13230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2359'.
[  298.259309][T13245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2363'.
[  298.307054][T13247] netlink: 'syz.3.2365': attribute type 4 has an invalid length.
[  298.327621][T13247] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2365'.
[  298.337728][T13248] netlink: 'syz.3.2365': attribute type 4 has an invalid length.
[  298.337751][T13248] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2365'.
[  298.412211][T13252] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2366'.
[  298.669042][T13261] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm
[  298.829641][T13266] xt_l2tp: missing protocol rule (udp|l2tpip)
[  298.890733][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  298.960942][T13083] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  299.024397][T13083] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  299.060494][T13083] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  299.134409][T13083] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  299.491924][T13297] netlink: 'syz.2.2379': attribute type 1 has an invalid length.
[  299.519114][T13297] netlink: 'syz.2.2379': attribute type 2 has an invalid length.
[  299.547020][T13083] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.619304][T13083] 8021q: adding VLAN 0 to HW filter on device team0
[  299.736474][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.743674][ T9839] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.758418][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.765639][ T9839] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.851900][ T5254] Bluetooth: hci6: command tx timeout
[  299.930663][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  300.067285][T13083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.208219][T13083] veth0_vlan: entered promiscuous mode
[  300.244371][T13083] veth1_vlan: entered promiscuous mode
[  300.355839][T13083] veth0_macvtap: entered promiscuous mode
[  300.383599][T13083] veth1_macvtap: entered promiscuous mode
[  300.465718][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.493315][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.511896][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.522936][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.539039][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.551626][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.568719][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.594469][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.614872][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.635438][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.652950][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  300.674180][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.688179][T13083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  300.749776][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.775162][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.812268][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.835594][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.846083][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.857253][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.882620][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.897918][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.918094][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.932471][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.945388][T13083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  300.955984][T13083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  300.967959][T13083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.975279][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  301.045783][T13083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.077636][T13083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.085490][T13400] __nla_validate_parse: 4 callbacks suppressed
[  301.085508][T13400] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2392'.
[  301.106278][T13083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.129988][T13083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.336955][T13402] geneve2: entered allmulticast mode
[  301.473663][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.504285][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.575803][T13415] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2397'.
[  301.587718][ T9839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.591693][T13415] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2397'.
[  301.617344][ T9839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.628634][T13418] Dead loop on virtual device ipvlan1, fix it urgently!
[  301.655057][T13415] bridge_slave_0: left allmulticast mode
[  301.661838][T13415] bridge_slave_0: left promiscuous mode
[  301.667771][T13415] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.690389][T13415] bridge_slave_1: left allmulticast mode
[  301.697688][T13415] bridge_slave_1: left promiscuous mode
[  301.705316][T13415] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.770829][T13415] bond0: (slave bond_slave_0): Releasing backup interface
[  301.817092][T13415] bond0: (slave bond_slave_1): Releasing backup interface
[  301.860987][T13415] team0: Port device team_slave_0 removed
[  301.874384][T13415] team0: Port device team_slave_1 removed
[  301.881090][T13415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.888499][T13415] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.900942][T13415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.908379][T13415] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.929826][T13415] bond0: (slave wlan1): Releasing backup interface
[  301.993018][ T5328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  302.020801][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  302.273440][T13440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2403'.
[  302.399461][T13446] SET target dimension over the limit!
[  302.451260][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2406'.
[  302.566759][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.601077][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.622560][T13463] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.634280][T13463] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.743854][T13465] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.751093][T13465] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.769168][T13465] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.776377][T13465] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.811858][   T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  302.866575][T13462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2410'.
[  303.041491][T13482] netlink: 'syz.4.2416': attribute type 4 has an invalid length.
[  303.049509][T13482] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2416'.
[  303.058720][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  303.135282][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2418'.
[  303.177760][T13491] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  303.201366][T13491] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.209108][T13491] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.222051][T13491] bridge0: entered allmulticast mode
[  303.298360][T13501] hsr0: left promiscuous mode
[  303.320138][T13503] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0
[  303.321578][T13501] IPVS: stopping backup sync thread 13503 ...
[  303.471106][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2422'.
[  303.534245][T13515] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2423'.
[  303.724596][T13523] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  303.744538][T13524] IPv6: NLM_F_REPLACE set, but no existing node found!
[  303.896920][T13528] x_tables: duplicate underflow at hook 1
[  304.090601][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  304.199130][T13546] vlan0: entered allmulticast mode
[  304.210845][T13546] veth0_vlan: entered allmulticast mode
[  305.045131][T13549] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  305.105990][T13608] netlink: 'syz.1.2452': attribute type 3 has an invalid length.
[  305.130582][T13608] netlink: 'syz.1.2452': attribute type 1 has an invalid length.
[  305.140580][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  305.307471][ T9849] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.812548][T13629] netlink: 'syz.2.2459': attribute type 1 has an invalid length.
[  305.825819][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  305.836022][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  305.861162][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  305.876751][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  305.884595][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  305.896690][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  306.096940][T13638] __nla_validate_parse: 10 callbacks suppressed
[  306.096961][T13638] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2462'.
[  306.116950][T13638] netlink: 'syz.4.2462': attribute type 4 has an invalid length.
[  306.125066][T13638] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2462'.
[  306.137454][T13638] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2462'.
[  306.171669][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  307.213540][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  307.867131][ T9849] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.884369][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'.
[  307.884378][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'.
[  307.940237][T13644] netlink: 928 bytes leftover after parsing attributes in process `syz.4.2463'.
[  308.022553][ T5254] Bluetooth: hci6: command tx timeout
[  308.074005][   T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  308.077938][ T9849] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.239873][ T9849] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.250719][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  308.296256][T13666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2468'.
[  308.578155][T13673] netlink: 'syz.4.2470': attribute type 9 has an invalid length.
[  308.586309][T13673] netlink: 134688 bytes leftover after parsing attributes in process `syz.4.2470'.
[  308.731445][ T9849] bridge_slave_1: left allmulticast mode
[  308.737118][ T9849] bridge_slave_1: left promiscuous mode
[  308.769724][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.813174][ T9849] bridge_slave_0: left allmulticast mode
[  308.818876][ T9849] bridge_slave_0: left promiscuous mode
[  308.842789][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.028356][T13696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2473'.
[  309.293190][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  309.396458][ T9849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.409719][ T9849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.422359][ T9849] bond0 (unregistering): Released all slaves
[  309.444365][T13691] netlink: 'syz.2.2475': attribute type 10 has an invalid length.
[  309.519403][T13695] geneve3: entered promiscuous mode
[  309.548435][T13695] geneve3: entered allmulticast mode
[  309.568258][T13695] bridge6: port 1(geneve3) entered blocking state
[  309.582781][T13695] bridge6: port 1(geneve3) entered disabled state
[  309.629511][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'.
[  309.642797][T13627] chnl_net:caif_netlink_parms(): no params data found
[  310.091840][ T5254] Bluetooth: hci6: command tx timeout
[  310.330615][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  310.447760][T13627] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.484914][T13627] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.508685][T13627] bridge_slave_0: entered allmulticast mode
[  310.547489][T13627] bridge_slave_0: entered promiscuous mode
[  310.583131][T13627] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.600523][T13627] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.607795][T13627] bridge_slave_1: entered allmulticast mode
[  310.630154][T13627] bridge_slave_1: entered promiscuous mode
[  310.750591][ T9849] hsr_slave_0: left promiscuous mode
[  310.763754][ T9849] hsr_slave_1: left promiscuous mode
[  310.781756][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.789290][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.798687][ T9849] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.806991][ T9849] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.860039][ T9849] veth1_macvtap: left promiscuous mode
[  310.869143][ T9849] veth0_macvtap: left promiscuous mode
[  310.878329][ T9849] veth1_vlan: left promiscuous mode
[  310.888387][ T9849] veth0_vlan: left promiscuous mode
[  311.380570][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  311.599184][ T9849] team0 (unregistering): Port device team_slave_1 removed
[  311.651885][ T9849] team0 (unregistering): Port device team_slave_0 removed
[  312.148571][T13627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.173289][ T5254] Bluetooth: hci6: command tx timeout
[  312.204887][T13627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.319978][T13778] __nla_validate_parse: 2 callbacks suppressed
[  312.319996][T13778] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2495'.
[  312.384630][T13627] team0: Port device team_slave_0 added
[  312.410810][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  312.472590][T13627] team0: Port device team_slave_1 added
[  312.571444][T13785] netlink: 'syz.3.2498': attribute type 1 has an invalid length.
[  312.655195][T13627] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.666649][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.696761][T13627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.708764][T13787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2498'.
[  312.718011][T13787] bond3: entered promiscuous mode
[  312.741877][T13796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2501'.
[  312.765168][T13627] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.789415][T13627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.864845][T13627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.928363][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2503'.
[  312.959712][T13802] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2503'.
[  312.994086][T13627] hsr_slave_0: entered promiscuous mode
[  313.004819][T13627] hsr_slave_1: entered promiscuous mode
[  313.029051][T13627] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.040587][T13627] Cannot create hsr debugfs directory
[  313.083970][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2506'.
[  313.099209][T13815] ipvlan1: entered allmulticast mode
[  313.208900][T13820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2508'.
[  313.279602][T13820] smc: net device ip6_vti0 applied user defined pnetid SYZ0
[  313.450646][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  313.818625][T13627] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  313.833648][T13627] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  313.862888][T13627] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  313.885280][T13627] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  314.054013][T13862] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2522'.
[  314.068108][T13862] IPVS: Unknown mcast interface: 
[  314.123419][T13627] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.164545][T13627] 8021q: adding VLAN 0 to HW filter on device team0
[  314.178654][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.185851][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.209743][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.216972][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.261543][ T5254] Bluetooth: hci6: command tx timeout
[  314.491040][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  314.649209][T13627] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.790468][T13627] veth0_vlan: entered promiscuous mode
[  314.828163][T13627] veth1_vlan: entered promiscuous mode
[  314.947142][T13904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2533'.
[  315.057204][T13627] veth0_macvtap: entered promiscuous mode
[  315.093297][T13627] veth1_macvtap: entered promiscuous mode
[  315.141520][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.164653][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.187976][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.210900][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.227893][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.258129][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.282191][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.310613][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.320465][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.353857][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.364729][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'.
[  315.392652][T13627] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.454223][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.475397][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.494920][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.506807][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.525578][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.540669][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  315.548585][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.570123][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.582742][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.593103][T13627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.606357][T13627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.623618][T13627] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.671734][T13627] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.687655][T13627] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.719459][T13627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.749285][T13627] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.002110][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.028417][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.060200][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.070056][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.208437][T13957] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  316.570762][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  316.710781][T13985] Dead loop on virtual device ipvlan1, fix it urgently!
[  316.877563][T13995] netlink: 'syz.3.2562': attribute type 11 has an invalid length.
[  316.907460][T13998] xt_l2tp: wrong L2TP version: 0
[  317.217131][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  317.379945][T14025] __nla_validate_parse: 5 callbacks suppressed
[  317.379966][T14025] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2571'.
[  317.395854][T14025] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  317.408772][T14025] x_tables: duplicate underflow at hook 1
[  317.610777][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  317.738208][T14053] vxcan7: entered allmulticast mode
[  317.778303][T14053] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.805875][T14053] bond0: (slave vxcan7): The slave device specified does not support setting the MAC address
[  317.819136][T14053] bond0: (slave vxcan7): Error -95 calling set_mac_address
[  318.115737][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'.
[  318.369082][T14089] nftables ruleset with unbound set
[  318.526624][T14095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2593'.
[  318.550270][T14100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  318.650609][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  318.712974][T14108] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2597'.
[  318.740966][T14105] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2597'.
[  318.963249][T14120] netlink: 'syz.2.2602': attribute type 12 has an invalid length.
[  318.976803][T14120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2602'.
[  319.055368][T14124] netlink: 'syz.1.2603': attribute type 1 has an invalid length.
[  319.074377][T14124] netlink: 'syz.1.2603': attribute type 3 has an invalid length.
[  319.082438][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2604'.
[  319.092232][T14124] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2603'.
[  319.093281][T14126] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  319.102910][T14128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2606'.
[  319.124907][T14124] NCSI netlink: No device for ifindex 813332851
[  319.129183][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2604'.
[  319.496737][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.690580][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  320.534185][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  320.547103][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  320.565826][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.577404][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  320.595852][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  320.603811][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  320.611537][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  320.730927][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  320.763041][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.901435][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.193021][   T11] bridge_slave_1: left allmulticast mode
[  321.198725][   T11] bridge_slave_1: left promiscuous mode
[  321.209411][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.249677][   T11] bridge_slave_0: left allmulticast mode
[  321.256381][   T11] bridge_slave_0: left promiscuous mode
[  321.268257][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.399309][T14207] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  321.435903][T14207] netlink: 'syz.3.2627': attribute type 9 has an invalid length.
[  321.445411][T14207] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  321.773112][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  321.846946][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  321.859974][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  321.872859][   T11] bond0 (unregistering): Released all slaves
[  321.888449][T14204] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  321.915249][T14213] dvmrp1: entered allmulticast mode
[  322.418103][T14242] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  322.527691][T14238] netlink: 'syz.4.2636': attribute type 5 has an invalid length.
[  322.561932][T14172] chnl_net:caif_netlink_parms(): no params data found
[  322.651412][ T5254] Bluetooth: hci6: command tx timeout
[  322.714229][T14246] __nla_validate_parse: 16 callbacks suppressed
[  322.714251][T14246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2637'.
[  322.767254][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'.
[  322.796694][T14247] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2637'.
[  322.810938][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  322.841372][   T11] hsr_slave_0: left promiscuous mode
[  322.867074][   T11] hsr_slave_1: left promiscuous mode
[  322.893141][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.910704][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.931002][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.938537][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.985779][   T11] veth1_macvtap: left promiscuous mode
[  323.000706][   T11] veth0_macvtap: left promiscuous mode
[  323.008492][   T11] veth1_vlan: left promiscuous mode
[  323.021036][   T11] veth0_vlan: left promiscuous mode
[  323.087971][T14262] "syz.3.2641" (14262) uses obsolete ecb(arc4) skcipher
[  323.731064][   T11] team0 (unregistering): Port device team_slave_1 removed
[  323.783839][   T11] team0 (unregistering): Port device team_slave_0 removed
[  323.856537][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  324.338939][T14271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2643'.
[  324.417408][T14278] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2645'.
[  324.427640][T14278] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  324.475713][T14280] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2646'.
[  324.557430][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'.
[  324.600043][T14280] vlan3: entered allmulticast mode
[  324.615105][T14172] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.622680][T14172] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.629963][T14172] bridge_slave_0: entered allmulticast mode
[  324.637850][T14172] bridge_slave_0: entered promiscuous mode
[  324.648530][T14172] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.657786][T14172] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.672994][T14172] bridge_slave_1: entered allmulticast mode
[  324.701215][T14172] bridge_slave_1: entered promiscuous mode
[  324.746041][ T5254] Bluetooth: hci6: command tx timeout
[  324.861664][T14172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.896091][T14297] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.900747][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  324.946483][T14297] team0: Port device bond0 added
[  324.992114][T14305] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  325.019574][T14305] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  325.095322][T14172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.117586][T14321] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2655'.
[  325.258082][T14172] team0: Port device team_slave_0 added
[  325.284057][T14172] team0: Port device team_slave_1 added
[  325.359760][T14325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2657'.
[  325.495604][T14172] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.507866][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.555446][T14172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.608789][T14172] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.655031][T14172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.678591][T14342] netlink: 'syz.1.2662': attribute type 1 has an invalid length.
[  325.705888][T14172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.719610][T14340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2661'.
[  325.887108][T14348] IPVS: set_ctl: invalid protocol: 45 10.1.1.2:20001
[  325.929011][T14172] hsr_slave_0: entered promiscuous mode
[  325.934692][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  325.987071][T14172] hsr_slave_1: entered promiscuous mode
[  326.038220][T14172] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  326.060589][T14172] Cannot create hsr debugfs directory
[  326.197176][T14368] netlink: 'syz.1.2669': attribute type 3 has an invalid length.
[  326.207815][T14367] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8
[  326.231507][T14368] netlink: 'syz.1.2669': attribute type 1 has an invalid length.
[  326.450828][T14377] netlink: 'syz.2.2675': attribute type 16 has an invalid length.
[  326.458772][T14377] netlink: 'syz.2.2675': attribute type 3 has an invalid length.
[  326.810893][ T5254] Bluetooth: hci6: command tx timeout
[  326.854878][T14172] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  326.876941][T14172] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  326.908716][T14172] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  326.959297][T14172] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  326.970968][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  327.082662][T14405] sctp: [Deprecated]: syz.2.2684 (pid 14405) Use of int in maxseg socket option.
[  327.082662][T14405] Use struct sctp_assoc_value instead
[  327.116840][T14406] netlink: 'syz.1.2683': attribute type 1 has an invalid length.
[  327.137814][T14406] netlink: 'syz.1.2683': attribute type 1 has an invalid length.
[  327.335378][T14172] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.360848][T14413] netlink: 'syz.2.2686': attribute type 11 has an invalid length.
[  327.408927][T14172] 8021q: adding VLAN 0 to HW filter on device team0
[  327.409052][T14422] netlink: 'syz.2.2686': attribute type 11 has an invalid length.
[  327.436330][T14423] xt_cgroup: xt_cgroup: no path or classid specified
[  327.476530][  T662] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.483837][  T662] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.582283][T14422] debugfs: Directory 'netdev:' with parent 'phy19' already present!
[  327.637993][  T662] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.645219][  T662] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.823409][T14437] __nla_validate_parse: 12 callbacks suppressed
[  327.823430][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2691'.
[  327.869328][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2691'.
[  327.896745][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2693'.
[  327.990742][T14449] netlink: 'syz.2.2694': attribute type 1 has an invalid length.
[  327.998606][T14449] netlink: 9312 bytes leftover after parsing attributes in process `syz.2.2694'.
[  328.010613][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  328.094403][T14451] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  328.100748][T14449] netlink: 'syz.2.2694': attribute type 1 has an invalid length.
[  328.126660][T14446] gtp0: entered promiscuous mode
[  328.156828][T14446] gtp0: entered allmulticast mode
[  328.249705][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2697'.
[  328.473872][T14463] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  328.853379][T14172] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.900770][ T5254] Bluetooth: hci6: command tx timeout
[  329.023761][T14172] veth0_vlan: entered promiscuous mode
[  329.050652][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  329.076117][T14172] veth1_vlan: entered promiscuous mode
[  329.243665][T14172] veth0_macvtap: entered promiscuous mode
[  329.295904][T14486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2704'.
[  329.395143][T14485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2704'.
[  329.414224][T14172] veth1_macvtap: entered promiscuous mode
[  329.459399][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.481022][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.513879][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.550552][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.587133][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.610530][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.621484][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.640599][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.650422][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.694658][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.733040][T14172] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.748770][T14499] xt_l2tp: invalid flags combination: c
[  329.766919][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.823808][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.861349][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.880528][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.891007][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.910533][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.920354][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.940817][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.962901][T14172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  329.980621][T14172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.003019][T14172] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.062657][T14172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.084768][T14172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.100595][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  330.104000][T14172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.117703][T14508] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2710'.
[  330.126987][T14172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  330.149622][T14508] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2710'.
[  330.172758][T14508] netlink: 'syz.4.2710': attribute type 5 has an invalid length.
[  330.192546][T14508] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2710'.
[  330.295028][T14512] ax25_connect(): syz.3.2712 uses autobind, please contact jreuter@yaina.de
[  330.369267][ T9849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.393655][ T9849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.454308][ T9849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  330.473079][ T9849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.130641][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  331.291197][   T30] INFO: task syz.1.810:8188 blocked for more than 143 seconds.
[  331.315020][   T30]       Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  331.334170][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  331.362330][   T30] task:syz.1.810       state:D stack:26640 pid:8188  tgid:8186  ppid:6419   flags:0x00000004
[  331.381950][   T30] Call Trace:
[  331.389858][   T30]  <TASK>
[  331.397330][   T30]  __schedule+0x1800/0x4a60
[  331.410681][   T30]  ? __pfx___schedule+0x10/0x10
[  331.422432][   T30]  ? __pfx_lock_release+0x10/0x10
[  331.433183][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  331.438844][   T30]  ? schedule+0x90/0x320
[  331.444482][   T30]  schedule+0x14b/0x320
[  331.448780][   T30]  schedule_preempt_disabled+0x13/0x30
[  331.459917][   T30]  __mutex_lock+0x6a4/0xd70
[  331.474630][   T30]  ? __mutex_lock+0x527/0xd70
[  331.479516][   T30]  ? nfsd_nl_version_get_doit+0x181/0x790
[  331.492940][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  331.499408][   T30]  ? genlmsg_put+0x145/0x2e0
[  331.507913][   T30]  nfsd_nl_version_get_doit+0x181/0x790
[  331.513890][   T30]  ? genl_get_cmd+0x65d/0xbe0
[  331.518848][   T30]  ? __asan_memcpy+0x40/0x70
[  331.523733][   T30]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  331.530033][   T30]  ? genl_get_cmd+0x65d/0xbe0
[  331.537713][   T30]  ? dev_hard_start_xmit+0x773/0x7e0
[  331.543426][   T30]  genl_rcv_msg+0xb14/0xec0
[  331.548090][   T30]  ? mark_lock+0x9a/0x350
[  331.553979][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.559202][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  331.564540][   T30]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  331.570826][   T30]  ? __pfx___might_resched+0x10/0x10
[  331.583027][   T30]  netlink_rcv_skb+0x1e3/0x430
[  331.588009][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.597773][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  331.612567][   T30]  ? __netlink_deliver_tap+0x77e/0x7c0
[  331.625169][   T30]  genl_rcv+0x28/0x40
[  331.630065][   T30]  netlink_unicast+0x7f6/0x990
[  331.639277][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  331.650805][   T30]  ? __virt_addr_valid+0x183/0x530
[  331.659822][   T30]  ? __check_object_size+0x49c/0x900
[  331.674572][   T30]  ? bpf_lsm_netlink_send+0x9/0x10
[  331.685408][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  331.694243][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.699582][   T30]  ? __import_iovec+0x536/0x820
[  331.710625][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  331.715609][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  331.728393][   T30]  ? security_socket_sendmsg+0x87/0xb0
[  331.734816][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  331.740141][   T30]  __sock_sendmsg+0x221/0x270
[  331.750609][   T30]  ____sys_sendmsg+0x525/0x7d0
[  331.755446][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  331.770332][   T30]  __sys_sendmsg+0x2b0/0x3a0
[  331.776355][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  331.782458][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  331.788828][   T30]  ? do_syscall_64+0x100/0x230
[  331.793677][   T30]  ? do_syscall_64+0xb6/0x230
[  331.798393][   T30]  do_syscall_64+0xf3/0x230
[  331.803035][   T30]  ? clear_bhb_loop+0x35/0x90
[  331.807749][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.815905][   T30] RIP: 0033:0x7f3988d7def9
[  331.820353][   T30] RSP: 002b:00007f3989bde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.828993][   T30] RAX: ffffffffffffffda RBX: 00007f3988f35f80 RCX: 00007f3988d7def9
[  331.840596][   T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[  331.848718][   T30] RBP: 00007f3988df0b76 R08: 0000000000000000 R09: 0000000000000000
[  331.869426][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.879919][   T30] R13: 0000000000000000 R14: 00007f3988f35f80 R15: 00007ffe7b8d6a78
[  331.898150][   T30]  </TASK>
[  331.908577][   T30] 
[  331.908577][   T30] Showing all locks held in the system:
[  331.931505][   T30] 1 lock held by khungtaskd/30:
[  331.936384][   T30]  #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  331.964381][   T30] 3 locks held by kworker/0:2/58:
[  331.969438][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  331.990176][   T30]  #1: ffff8880b8828948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770
[  332.003215][   T30]  #2: ffff888058275538 (&idev->mc_lock){+.+.}-{3:3}, at: mld_ifc_work+0x2d/0xd90
[  332.021762][   T30] 2 locks held by getty/4987:
[  332.026499][   T30]  #0: ffff88803044c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  332.046821][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[  332.060670][   T30] 3 locks held by kworker/1:4/5289:
[  332.065900][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  332.085729][   T30]  #1: ffffc90004167d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  332.110440][   T30]  #2: ffff88805f463240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130
[  332.130774][   T30] 2 locks held by syz.2.195/5955:
[  332.140517][   T30]  #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  332.148784][   T30]  #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90
[  332.165769][   T30] 2 locks held by syz.1.810/8188:
[  332.176233][   T30]  #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  332.180718][    C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  332.189863][   T30]  #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_version_get_doit+0x181/0x790
[  332.212895][   T30] 1 lock held by syz-executor/14172:
[  332.226656][   T30]  #0: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530
[  332.245480][   T30] 2 locks held by syz.4.2721/14537:
[  332.256506][   T30]  #0: ffff88805a6df408 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240
[  332.276211][   T30]  #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  332.313652][   T30] 
[  332.318329][   T30] =============================================
[  332.318329][   T30] 
[  332.343393][   T30] NMI backtrace for cpu 0
[  332.347759][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  332.357941][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  332.368023][   T30] Call Trace:
[  332.371324][   T30]  <TASK>
[  332.374268][   T30]  dump_stack_lvl+0x241/0x360
[  332.378983][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.384219][   T30]  ? __pfx__printk+0x10/0x10
[  332.388837][   T30]  ? vprintk_emit+0x667/0x7c0
[  332.393536][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  332.398591][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  332.403568][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  332.409044][   T30]  ? _printk+0xd5/0x120
[  332.413229][   T30]  ? __pfx__printk+0x10/0x10
[  332.417869][   T30]  ? __wake_up_klogd+0xcc/0x110
[  332.422750][   T30]  ? __pfx__printk+0x10/0x10
[  332.427373][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  332.432453][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  332.438465][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  332.444476][   T30]  watchdog+0xff4/0x1040
[  332.448753][   T30]  ? watchdog+0x1ea/0x1040
[  332.453214][   T30]  ? __pfx_watchdog+0x10/0x10
[  332.457922][   T30]  kthread+0x2f0/0x390
[  332.462027][   T30]  ? __pfx_watchdog+0x10/0x10
[  332.466722][   T30]  ? __pfx_kthread+0x10/0x10
[  332.471338][   T30]  ret_from_fork+0x4b/0x80
[  332.475778][   T30]  ? __pfx_kthread+0x10/0x10
[  332.480398][   T30]  ret_from_fork_asm+0x1a/0x30
[  332.485203][   T30]  </TASK>
[  332.490255][   T30] Sending NMI from CPU 0 to CPUs 1:
[  332.496788][    C1] NMI backtrace for cpu 1
[  332.496800][    C1] CPU: 1 UID: 0 PID: 14463 Comm: syz.1.2699 Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  332.496820][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  332.496831][    C1] RIP: 0010:lock_release+0x2d9/0xa30
[  332.496862][    C1] Code: 85 2a 05 00 00 83 3b 00 0f 85 2d 04 00 00 4d 8d 66 20 4c 89 e3 48 c1 eb 03 42 0f b6 04 3b 84 c0 48 8b 34 24 0f 85 2e 05 00 00 <45> 8b 2c 24 41 81 fd 00 00 20 00 72 25 41 81 c5 00 00 e0 ff 42 0f
[  332.496876][    C1] RSP: 0018:ffffc9000388f940 EFLAGS: 00000046
[  332.496918][    C1] RAX: 0000000000000000 RBX: 1ffff1100fd908e0 RCX: ffffc9000388f903
[  332.496932][    C1] RDX: 0000000000000000 RSI: ffff88807ec846d8 RDI: ffff88807ec846e0
[  332.496944][    C1] RBP: ffffc9000388fa70 R08: ffffffff901830ef R09: 1ffffffff203061d
[  332.496958][    C1] R10: dffffc0000000000 R11: fffffbfff203061e R12: ffff88807ec84700
[  332.497021][    C1] R13: 0000000000000000 R14: ffff88807ec846e0 R15: dffffc0000000000
[  332.497034][    C1] FS:  00007f6bfdafd6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
[  332.497051][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  332.497064][    C1] CR2: 0000000020a30030 CR3: 000000006940a000 CR4: 00000000003506f0
[  332.497080][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  332.497091][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  332.497103][    C1] Call Trace:
[  332.497110][    C1]  <NMI>
[  332.497117][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  332.497139][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  332.497165][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  332.497196][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  332.497218][    C1]  ? nmi_handle+0x14f/0x5a0
[  332.497237][    C1]  ? nmi_handle+0x2a/0x5a0
[  332.497255][    C1]  ? lock_release+0x2d9/0xa30
[  332.497278][    C1]  ? default_do_nmi+0x63/0x160
[  332.497300][    C1]  ? exc_nmi+0x123/0x1f0
[  332.497320][    C1]  ? end_repeat_nmi+0xf/0x53
[  332.497348][    C1]  ? lock_release+0x2d9/0xa30
[  332.497373][    C1]  ? lock_release+0x2d9/0xa30
[  332.497398][    C1]  ? lock_release+0x2d9/0xa30
[  332.497422][    C1]  </NMI>
[  332.497428][    C1]  <TASK>
[  332.497436][    C1]  ? __pfx___might_resched+0x10/0x10
[  332.497460][    C1]  ? __might_fault+0xaa/0x120
[  332.497486][    C1]  ? __pfx_lock_release+0x10/0x10
[  332.497513][    C1]  ? do_recvmmsg+0x498/0xae0
[  332.497534][    C1]  ? __might_fault+0xaa/0x120
[  332.497558][    C1]  ? __might_fault+0xc6/0x120
[  332.497585][    C1]  do_recvmmsg+0x5e1/0xae0
[  332.497608][    C1]  ? __pfx_try_to_wake_up+0x10/0x10
[  332.497637][    C1]  ? __pfx_do_recvmmsg+0x10/0x10
[  332.497665][    C1]  ? futex_wake+0x523/0x5c0
[  332.497696][    C1]  ? __pfx_futex_wake+0x10/0x10
[  332.497722][    C1]  ? __pfx_reacquire_held_locks+0x10/0x10
[  332.497751][    C1]  ? __pfx_do_futex+0x10/0x10
[  332.497781][    C1]  __x64_sys_recvmmsg+0x199/0x250
[  332.497804][    C1]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  332.497844][    C1]  ? do_syscall_64+0x100/0x230
[  332.497873][    C1]  ? do_syscall_64+0xb6/0x230
[  332.497901][    C1]  do_syscall_64+0xf3/0x230
[  332.497928][    C1]  ? clear_bhb_loop+0x35/0x90
[  332.497950][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.497975][    C1] RIP: 0033:0x7f6bfcd7def9
[  332.497990][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.498006][    C1] RSP: 002b:00007f6bfdafd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  332.498024][    C1] RAX: ffffffffffffffda RBX: 00007f6bfcf35f80 RCX: 00007f6bfcd7def9
[  332.498037][    C1] RDX: 000000000400023c RSI: 00000000200055c0 RDI: 000000000000000e
[  332.498050][    C1] RBP: 00007f6bfcdf0b76 R08: 0000000000000000 R09: 0000000000000000
[  332.498061][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.498072][    C1] R13: 0000000000000000 R14: 00007f6bfcf35f80 R15: 00007ffe3ac9eae8
[  332.498105][    C1]  </TASK>
[  332.890383][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  332.897308][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01461-g5a6caa2cfabb #0
[  332.907489][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  332.917572][   T30] Call Trace:
[  332.920872][   T30]  <TASK>
[  332.923835][   T30]  dump_stack_lvl+0x241/0x360
[  332.928551][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.933787][   T30]  ? __pfx__printk+0x10/0x10
[  332.938408][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  332.944425][   T30]  ? vscnprintf+0x5d/0x90
[  332.948774][   T30]  panic+0x349/0x860
[  332.952695][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  332.958867][   T30]  ? __pfx_panic+0x10/0x10
[  332.963308][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  332.968697][   T30]  ? __irq_work_queue_local+0x137/0x410
[  332.974282][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  332.979675][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  332.985849][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  332.992028][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  332.998219][   T30]  watchdog+0x1033/0x1040
[  333.002580][   T30]  ? watchdog+0x1ea/0x1040
[  333.007034][   T30]  ? __pfx_watchdog+0x10/0x10
[  333.011740][   T30]  kthread+0x2f0/0x390
[  333.015832][   T30]  ? __pfx_watchdog+0x10/0x10
[  333.020533][   T30]  ? __pfx_kthread+0x10/0x10
[  333.025153][   T30]  ret_from_fork+0x4b/0x80
[  333.029592][   T30]  ? __pfx_kthread+0x10/0x10
[  333.034207][   T30]  ret_from_fork_asm+0x1a/0x30
[  333.039009][   T30]  </TASK>
[  333.042356][   T30] Kernel Offset: disabled
[  333.046684][   T30] Rebooting in 86400 seconds..