last executing test programs:

48.720112819s ago: executing program 3 (id=3075):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x368, 0xffffffff, 0x1d0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80)
sendfile(r3, r2, 0x0, 0xf03a0005)
recvmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/224, 0xe0}, {&(0x7f0000000680)=""/134, 0x86}], 0x2, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10060)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

48.483188316s ago: executing program 3 (id=3078):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x6a, 0x2, 0x0, &(0x7f0000000300))
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2f0, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@multicast2, @broadcast, 0xff000000, 0xffffffff, 'pim6reg1\x00', 'geneve1\x00', {0xff}, {0xff}, 0x67, 0x3, 0x50}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}, {0x2, 0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x4, 0x10, [0x1b, 0x15, 0x1f, 0x11, 0x16, 0x19, 0x30, 0x6, 0x22, 0x20, 0x1, 0x2d, 0x18, 0x22, 0x11, 0x28], 0x2, 0xc, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0)

48.192423466s ago: executing program 3 (id=3081):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f72740000b9c13db387675a"], 0x4c}}, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00)

38.037644259s ago: executing program 3 (id=3081):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f72740000b9c13db387675a"], 0x4c}}, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00)

24.983382219s ago: executing program 3 (id=3081):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f72740000b9c13db387675a"], 0x4c}}, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00)

14.642684108s ago: executing program 2 (id=3309):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203803afffe8000000000000000000000000000bbff0200000000000000000000000000018600907800000000feffffff00000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af030200010000000500000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f906c2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a0274500040000000000000000000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c"], 0x44}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r2, 0x800, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48881}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r7=>0x0})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r1)
sendmsg$FOU_CMD_DEL(r1, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000102}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="4ca3416156db37294793f585e3be755c6ac7c2348b10c7049dbe29b0d3c279d176", @ANYRES16=r9, @ANYBLOB="040025bd7000fbdbdf250200000008000b00", @ANYRES32=r7, @ANYBLOB="04000500"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x4010)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r8)
socket$netlink(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf2508000100050000000800010001000000080001000100000008000100000100"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

14.246359704s ago: executing program 2 (id=3314):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0xffffff9b}, 0x2000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @broadcast})
ioctl(r2, 0x8b32, &(0x7f0000000040))
r3 = socket(0x1e, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r4, &(0x7f00000001c0), &(0x7f0000000000)=@udp=r5}, 0x20)
recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x8}], 0x1, 0x140, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, 0x0}, 0x4000000)
recvmsg$can_j1939(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/233, 0xe9}], 0x1, &(0x7f0000000680)=""/218, 0xda}, 0x0)
ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x110c230000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280"], 0x44}, 0x1, 0x2}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380050003"], 0x38}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007110ad000000000095"], &(0x7f0000001580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

14.014062061s ago: executing program 2 (id=3318):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x10}, 0xc)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000009c0)="dd9453", 0x0}, 0x50)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000040)="07000000010003", 0x7)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmmsg$sock(r3, &(0x7f0000007980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}}], 0x1, 0x840)
sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20)

13.355914416s ago: executing program 2 (id=3321):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x12, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200058cc)
getsockopt(r0, 0xb, 0x1fd, &(0x7f0000000780)=""/245, &(0x7f00000000c0)=0xf5)
r1 = socket(0x15, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x402, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x808}, 0x20000000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, &(0x7f0000000200)=0x8)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESOCT=r3], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x6b, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000540)={&(0x7f0000000580), 0xc, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB="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", @ANYBLOB="fb0baa6ce5f65df49e55f20dd613d44de6ded27d47bace5d65a925dc5e51d4ab1f42400be215b8ff7cdb28edbfd9cd90ab7524cdfc17c2c0f4f2ff9a0165bf2ce324902c96a27bd002e435fd9138ecbfcecab35877559a97e43979bddee538ebd8a1a4a481871715ffd69e9a4ee41da8f2c8ac8e20c762a9eedb0fd4f7ddb13ac718a42f247b3d4cec3fa9688d79b65a794ad12536454429a8bfcc25be50bedf038bce4287f71abb6ef4a0839ba8fa650560e1320600ffe2201d5567c3c6b22240f24439a2dc26"], 0x128}, 0x1, 0x0, 0x0, 0x4004054}, 0x44)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r6, @ANYBLOB="08000a00ca4a2143bd74d9b89d91e7a1894f7c92eb5f493332faad57bf9714b4282ac901105aaa2b726158d266ade010ca8807cf3bed70bde353a9ce0d85019bb4f1ec849c924113eb5826ba6df16565506c4b25182eca4e43e164059acbca4390eca573f2e670651635ef76d6251e80de51f104c485ce79fde718eb47e9251bac73bb757248ab1e6edba8e47ddfbf94309871267a1d1561d8958dc2b66a653467", @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1}}], 0x1, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x9, 0x0, 0xfffffffa}, {0x12, 0x91, 0x40, 0x1}]}, 0x10)

12.738786201s ago: executing program 2 (id=3325):
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast, <r0=>0x0}, &(0x7f0000000100)=0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x22, 0x2, 0x1)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2f)
sendmsg$tipc(r1, &(0x7f0000000e80)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040000}, 0x44000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100", 0x2a)
socket(0x11, 0x800000003, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000096547cb7040000000100020000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002100000000000000000000000000ccb00a689efbd8d4841b9c960000"], 0x1d)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0)
socket(0x2a, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c0001800600060008"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000440)={0xffffffffffffffff, r6, 0x7, 0x0, 0x0, 0x2, 0x19, 0x6, 0x4, 0x801, 0x3, 0x4352, 'syz1\x00'})
shutdown(r8, 0x0)
write(r8, 0x0, 0x0)
r10 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x80000002, 0x12)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x4008004)

12.43447465s ago: executing program 2 (id=3330):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000007c008500000022000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x40, 0x0, &(0x7f0000000040)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12.322909952s ago: executing program 3 (id=3081):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f72740000b9c13db387675a"], 0x4c}}, 0x10)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00)

5.431511732s ago: executing program 4 (id=3369):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc00000fff0000008000f0fffeffe809005300fff5dd00000010000100070c10000000000001400000", 0x58}], 0x1)

5.362818551s ago: executing program 4 (id=3370):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0xc, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x158a, @void, @value}, 0x94)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x6, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3fff}]}, @ssrr={0x89, 0x3, 0xce}, @ssrr={0x89, 0x3, 0x15}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

5.302236968s ago: executing program 4 (id=3371):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x8e, 0x1}, 0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000080), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @typedef, @fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x0, 0x6}]}, @ptr, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x0, 0x796}]}]}}, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, &(0x7f0000000340)="a9", 0x0}, 0x20)
socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_netdev_private(r4, 0x89f7, &(0x7f0000000000)="e7356623c68ac10b95129a261d2bfd8c2677de290797e16e86a08e144e7885844b3cc0eaadd640d9b28b2634abbb1cfc6660250f08a06adbe65e71d0dc9f1409ef9cf899503612")
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_MPU={0x8, 0xe, 0xfe}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x4c}}, 0x4080)

4.873624781s ago: executing program 4 (id=3374):
socket(0x11, 0x4, 0x9)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000005400)=ANY=[@ANYBLOB="18000000000010000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0x8, 0x4, 0x2, 0x2b, 0x20, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0xb, 0x7d, [@empty, @rand_addr=0x64010102]}]}}}}})
socket$inet6(0xa, 0x80003, 0xff)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0)
accept4$ax25(r4, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.170663298s ago: executing program 1 (id=3379):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x210, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa5, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xff], 'caif0\x00', 'pimreg\x00', {}, {0xff}, 0x0, 0x6, 0x7}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@ipvs={{}, {@ipv4=@loopback, [0xff, 0x0, 0xffffffff, 0xffffffff], 0x4e22, 0x3a, 0x5, 0x4e20, 0x4}}, @common=@hl={{0x28}, {0x1, 0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x405)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400cdff000008001b"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0x380, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

3.931531344s ago: executing program 1 (id=3380):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007910"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@cgroup=r2, r2, 0x2e, 0x30, 0x0, @void, @void, @void, @value}, 0x20)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4)
writev(r4, &(0x7f0000000c00), 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x608, 0x3, 0xa10, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x880, 0x8a8, 0x0, {0x36020000}, [@common=@unspec=@u32={{0x7e0, 'u32\x00', 0x2}}, @common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa70)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000bc0)='net_prio.prioidx\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000b80))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
r7 = socket(0x29, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
tee(r6, r6, 0x100000001, 0x6)
sendfile(r0, r5, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/198, 0xc6}], 0x1}, 0x7}], 0x1, 0x2030, 0x0)
getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000b00), &(0x7f0000000b40)=0x4)
socket$inet6(0xa, 0xa, 0x800)
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x9, 0x0, r5, 0x2, '\x00', 0x0, r5, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, [@map_val={0x18, 0x8, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6_sctp(0xa, 0x0, 0x84)
socket$key(0xf, 0x3, 0x2)

1.486400271s ago: executing program 1 (id=3385):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x5c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x48, 0xe, 0x0, 0x1, [@nested={0x44, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="d5938376f408f47c06aa365b797aafe2660b18ee45e48284a3b4ef398bc2fb7185b7604d553c3361c774288f"]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @multicast1, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x34}}, 0x4000)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@local, @in6=@mcast1, 0x4e22, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x87}, {@in=@remote, 0x0, 0x2b}, @in6=@ipv4={'\x00', '\xff\xff', @dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, 0xfffffffc, 0x0, 0xa, 0x4, 0x0, 0xb}}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r7, 0x89e6, &(0x7f0000000540)={0x1d})
r8 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x800)
ioctl$sock_x25_SIOCADDRT(r8, 0x890b, &(0x7f0000000480)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x4, 'macsec0\x00'})
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
close(r10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

1.462235555s ago: executing program 0 (id=3386):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000243a01801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e8014000180080001"], 0x88}}, 0x0)

1.270561087s ago: executing program 0 (id=3387):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x40000100)
close(r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
pwritev(r4, &(0x7f0000000480)=[{&(0x7f0000000240)="998e24c95c402375b5281f895bdebb9304000000af000000000000000000000000bc814c62585c1f72644789ee247d7ef4d1ff7c84d693dc06ce5d1e412ca7ce03e78fc10da258b9dabb1d117e479b7683af88832786a421c12ae2d872d863d22dd7610fe3db2edd3e9dd2ee5864b8a41c9ed4bb88490b3849c5ae6974a24f0ba262221a9614", 0x86}, {&(0x7f0000000780)="752b64e2b164b6a57830f2fda290f754347dbc27ae378276d56399634200401315ba5cb8482f9ced868a4c07763cb560906b5b4f520a5c96f79e49c1fe042280bdaf11021458492951f99e5c50714459bd5332eea7b1ea6ff7f209340cac76f81219254f513152e215c15287175e044e80ba8d5d1bbc2b0a894cc735bb5fbf867ea71e79212f5d3657fd311f04b3e0b629f014a1e762b564bfca99d06821d50be5ebd8ccf56d956950dfee62687f020d84ec33f853fa73a6333fb683c0d797f7fa20a0175fd22b27839a480a9c9f24514535", 0xd2}, {&(0x7f0000001240)="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", 0xea7}], 0x3, 0x9001, 0x7f)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000008000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000001d0000000000002a239450", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12)
socket$inet(0x2, 0x5, 0x7000000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000002010103000000000000000002000006300001802c0001"], 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x20040804)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8649, 0x8, 0x1}}]}]}]}, 0x54}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32, @ANYBLOB="0000000001000000b702000014000000b7030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94)

1.059074499s ago: executing program 0 (id=3388):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1600000076000d0b"], 0x20}}, 0x4000040)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000880)={'ipvlan1\x00', 0x100})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRESDEC=r3, @ANYRES64=0x0, @ANYRES16, @ANYRESOCT=r3, @ANYBLOB="2f96d196ecc7713e0e410f758e76db86388875e77365a2f8a7b34a1ec16e3f8a6a0f745b46e5c7c2d9f669e4dbeddaaf9ee8628221a205178a662148ad188da82daabb34558cb38c4f57492fb6c11e848d", @ANYBLOB="fb2eae4b924dd02ad8ea8add7d8aa039c63c138c49fbeb80346ff50aec1d60fba24dde4cba69d5087ec2307ebb20df57b2e3951f4cedde8e2b7bd1cc650680670d44072f855c0c3829e382364837a168c5013cfe4c6263cb3bcd3f9bfd955470defd04669f0315d4dc4938ae6266217e09b7d99e25493a77d33886731a97bfe0f11850f418136594ac0b885773dcdf0d41a63fcc29bbf0a27205baa842ed5376c4f03f2455f8573b58e43c7f0831e12714bbca3304369b8b54b0"], &(0x7f0000000280)='GPL\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x2)
ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x40000000})
r7 = socket(0x2, 0x3, 0xff)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r7, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10)
sendmsg$IPSET_CMD_HEADER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x20, 0x0, 0x0, 0x814}, 0x48844)
pwrite64(r5, &(0x7f00000000c0)="7906", 0x2, 0x9)
r8 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000200)=0x10000, 0x4)
sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
getsockname(r2, &(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000600)=0x80)
recvmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001500)=""/4073, 0xfe9}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2}, 0x40000020)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xa4, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x14, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x7]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0xb}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)

1.026403984s ago: executing program 1 (id=3389):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x9, 0x4)
setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x380, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

786.737702ms ago: executing program 1 (id=3390):
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
unshare(0x20000400)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x1, 0x3, 0x2}}, 0x26)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x12, 0x0, 0x4, 0x47, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x0, 0x0, 0x6}})
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x3, 0x4)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b0000000600000000", @ANYRES32], 0x20)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
socket$inet(0x2, 0x80002, 0x1) (async)
r5 = socket$inet(0x2, 0x80002, 0x1)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) (async)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)='5', 0x1}], 0x1}, 0x4003)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="8500000089000000040000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

560.518791ms ago: executing program 0 (id=3391):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0xfffffffd)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1}], 0x7)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x80008)
listen(r0, 0x8)
r4 = socket$inet(0xa, 0x801, 0x84)
listen(r4, 0x8)
r5 = socket$inet(0xa, 0x801, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r6=>0x0})
setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x45, 0x9, @vifc_lcl_ifindex=r6, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10)
listen(r5, 0x8)
listen(0xffffffffffffffff, 0x1)
unshare(0x22020600)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x2c, 0x2c, 0xd27, 0xf0bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff2}, {0x9}, {0x7, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20014090)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r8)

505.663295ms ago: executing program 1 (id=3392):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="d4e1d1b7f46441a4effc19c52ba760a28d2571ce9131a94875baa1df", 0x1c}, {&(0x7f0000000080)="d2b21a225f7f", 0x6}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000085c0), 0x0, 0x40)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in=@local, 0xce20, 0x1, 0x8000, 0x0, 0x2}, {0x4, 0xfffffffe, 0x3ffffffff, 0x0, 0x0, 0x80, 0x0, 0xe086}, {0x0, 0x0, 0x1}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x33}, 0xa, @in=@empty, 0x0, 0x5, 0x2, 0x3, 0x2000000}}, 0xe8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
accept4(r2, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x7}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x1ff}]}}}]}]}], {0x14}}, 0x84}}, 0x44810)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r6, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000)
ioctl$FICLONE(r0, 0x40049409, r3)
sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRES64=r2], 0x14}, 0x1, 0x0, 0x0, 0x40844}, 0x40000c0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
bind$xdp(r8, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6b}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000006c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)={0x5c, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fff}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @mcast1}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

393.752218ms ago: executing program 0 (id=3393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005"], 0x64}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102000000000000000002001a000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f28edd81ab64db88bebd7f17bd812f8f03ec54"], 0xfc}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
pipe(&(0x7f0000000080))

214.568511ms ago: executing program 4 (id=3394):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0xe4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

19.509607ms ago: executing program 4 (id=3395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xf4, r1, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0xff14}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0x1, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0x4004810)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r2, &(0x7f0000006200)=[{{&(0x7f00000004c0)=@l2, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x3, &(0x7f00000005c0)=""/30, 0x1e}, 0x3}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/155, 0x9b}], 0x1, &(0x7f00000009c0)=""/87, 0x57}, 0x400}, {{&(0x7f0000000a40)=@caif=@util, 0x80, &(0x7f0000003e00)=[{&(0x7f0000000ac0)=""/183, 0xb7}, {&(0x7f0000000b80)=""/176, 0xb0}, {&(0x7f0000003c80)=""/9, 0x9}, {&(0x7f0000003cc0)=""/199, 0xc7}, {&(0x7f0000003dc0)=""/3, 0x3}], 0x5}, 0x7f}, {{&(0x7f0000003e80)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003f00)=""/23, 0x17}, {&(0x7f0000003f40)=""/142, 0x8e}], 0x2, &(0x7f0000004040)=""/113, 0x71}}, {{0x0, 0x0, &(0x7f00000050c0), 0x0, &(0x7f0000005100)=""/43, 0x2b}, 0x9}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000005140)=""/93, 0x5d}], 0x1, &(0x7f0000005200)=""/4096, 0x1000}, 0x2}], 0x7, 0x10022, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_perm_addr={0x4b, 0x18, "43720738300000000200000000000000476f01284ee47168"}})

0s ago: executing program 0 (id=3396):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000248401801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e8014000180080001"], 0x88}}, 0x0)

kernel console output (not intermixed with test programs):

ond7: (slave vti0): The slave device specified does not support setting the MAC address
[  449.247303][T15111] bond7: (slave vti0): Error -95 calling set_mac_address
[  449.383820][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  450.029981][T15161] bridge_slave_0: entered promiscuous mode
[  450.049811][T15161] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  450.122510][T15175] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 1, id = 0
[  450.345056][  T409] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  450.424056][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  450.481993][T15189] IPVS: Error connecting to the multicast addr
[  450.774828][T15199] vxcan1 speed is unknown, defaulting to 1000
[  450.782457][T15205] __nla_validate_parse: 14 callbacks suppressed
[  450.782473][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2692'.
[  451.164235][T15216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2690'.
[  451.463603][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  451.932818][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2699'.
[  452.055019][T15233] netlink: 'syz.2.2698': attribute type 10 has an invalid length.
[  452.195711][T15235] netlink: 'syz.2.2698': attribute type 11 has an invalid length.
[  452.233582][T15235] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2698'.
[  452.503299][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  453.362785][T15224] syz.3.2697: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  453.383694][T15224] CPU: 1 UID: 0 PID: 15224 Comm: syz.3.2697 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  453.383722][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  453.383733][T15224] Call Trace:
[  453.383741][T15224]  <TASK>
[  453.383749][T15224]  dump_stack_lvl+0x189/0x250
[  453.383793][T15224]  ? __pfx_dump_stack_lvl+0x10/0x10
[  453.383819][T15224]  ? __pfx__printk+0x10/0x10
[  453.383839][T15224]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  453.383858][T15224]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  453.383881][T15224]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  453.383903][T15224]  warn_alloc+0x214/0x310
[  453.383935][T15224]  ? __pfx_warn_alloc+0x10/0x10
[  453.383971][T15224]  ? __get_vm_area_node+0x28f/0x300
[  453.384002][T15224]  __vmalloc_node_range_noprof+0x5f2/0x12c0
[  453.384027][T15224]  ? __asan_memset+0x22/0x50
[  453.384048][T15224]  ? __x64_sys_sendmsg+0x19b/0x260
[  453.384092][T15224]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  453.384117][T15224]  ? __kasan_kmalloc_large+0x1a/0xa0
[  453.384143][T15224]  ? rcu_is_watching+0x15/0xb0
[  453.384163][T15224]  ? veth_dev_init+0x363/0x570
[  453.384185][T15224]  ? veth_dev_init+0x363/0x570
[  453.384204][T15224]  __kvmalloc_node_noprof+0x3a0/0x5e0
[  453.384228][T15224]  ? veth_dev_init+0x363/0x570
[  453.384259][T15224]  veth_dev_init+0x363/0x570
[  453.384290][T15224]  register_netdevice+0x6bf/0x1ae0
[  453.384329][T15224]  ? snprintf+0xda/0x120
[  453.384358][T15224]  ? __pfx_register_netdevice+0x10/0x10
[  453.384383][T15224]  ? __pfx_snprintf+0x10/0x10
[  453.384409][T15224]  ? __asan_memset+0x22/0x50
[  453.384428][T15224]  ? dev_addr_mod+0x2ce/0x3d0
[  453.384461][T15224]  veth_newlink+0x5cc/0xa50
[  453.384487][T15224]  ? __pfx_veth_newlink+0x10/0x10
[  453.384509][T15224]  ? percpu_ref_get_many+0x19/0x140
[  453.384610][T15224]  ? validate_linkmsg+0x765/0x950
[  453.384642][T15224]  ? __pfx_veth_newlink+0x10/0x10
[  453.384666][T15224]  rtnl_newlink_create+0x30d/0xb00
[  453.384698][T15224]  ? __pfx_aa_get_newest_label+0x10/0x10
[  453.384724][T15224]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  453.384746][T15224]  ? rtnl_newlink+0x8db/0x1c70
[  453.384777][T15224]  ? __pfx___mutex_lock+0x10/0x10
[  453.384811][T15224]  ? ns_capable+0x8a/0xf0
[  453.384836][T15224]  rtnl_newlink+0x16d6/0x1c70
[  453.384876][T15224]  ? __pfx_rtnl_newlink+0x10/0x10
[  453.384898][T15224]  ? __lock_acquire+0xaac/0xd20
[  453.385005][T15224]  ? aa_get_newest_label+0xf7/0x5d0
[  453.385027][T15224]  ? __lock_acquire+0xaac/0xd20
[  453.385079][T15224]  ? __pfx_rtnl_newlink+0x10/0x10
[  453.385100][T15224]  rtnetlink_rcv_msg+0x7cc/0xb70
[  453.385121][T15224]  ? kasan_save_track+0x4f/0x80
[  453.385144][T15224]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  453.385165][T15224]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  453.385189][T15224]  ? __lock_acquire+0xaac/0xd20
[  453.385229][T15224]  netlink_rcv_skb+0x21c/0x490
[  453.385254][T15224]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  453.385279][T15224]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  453.385326][T15224]  ? netlink_deliver_tap+0x2e/0x1b0
[  453.385348][T15224]  ? netlink_deliver_tap+0x2e/0x1b0
[  453.385379][T15224]  netlink_unicast+0x758/0x8d0
[  453.385414][T15224]  netlink_sendmsg+0x805/0xb30
[  453.385449][T15224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.385477][T15224]  ? aa_sock_msg_perm+0x94/0x160
[  453.385500][T15224]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  453.385522][T15224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.385546][T15224]  __sock_sendmsg+0x219/0x270
[  453.385571][T15224]  ____sys_sendmsg+0x505/0x830
[  453.385603][T15224]  ? __pfx_____sys_sendmsg+0x10/0x10
[  453.385639][T15224]  ? import_iovec+0x74/0xa0
[  453.385668][T15224]  ___sys_sendmsg+0x21f/0x2a0
[  453.385697][T15224]  ? __pfx____sys_sendmsg+0x10/0x10
[  453.385772][T15224]  ? __fget_files+0x2a/0x420
[  453.385794][T15224]  ? __fget_files+0x3a0/0x420
[  453.385830][T15224]  __x64_sys_sendmsg+0x19b/0x260
[  453.385859][T15224]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  453.385904][T15224]  ? do_syscall_64+0xba/0x210
[  453.385929][T15224]  do_syscall_64+0xf6/0x210
[  453.385952][T15224]  ? clear_bhb_loop+0x60/0xb0
[  453.385975][T15224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.385993][T15224] RIP: 0033:0x7f5a72b8e969
[  453.386011][T15224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.386027][T15224] RSP: 002b:00007f5a73989038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  453.386047][T15224] RAX: ffffffffffffffda RBX: 00007f5a72db5fa0 RCX: 00007f5a72b8e969
[  453.386061][T15224] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000003
[  453.386073][T15224] RBP: 00007f5a72c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  453.386086][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.386097][T15224] R13: 0000000000000000 R14: 00007f5a72db5fa0 R15: 00007ffff4168d08
[  453.386130][T15224]  </TASK>
[  453.386149][T15224] Mem-Info:
[  453.545597][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  453.875102][T15224] active_anon:6904 inactive_anon:0 isolated_anon:0
[  453.875102][T15224]  active_file:1767 inactive_file:39970 isolated_file:0
[  453.875102][T15224]  unevictable:768 dirty:223 writeback:0
[  453.875102][T15224]  slab_reclaimable:11237 slab_unreclaimable:157777
[  453.875102][T15224]  mapped:33398 shmem:1361 pagetables:690
[  453.875102][T15224]  sec_pagetables:0 bounce:0
[  453.875102][T15224]  kernel_misc_reclaimable:0
[  453.875102][T15224]  free:1277889 free_pcp:456 free_cma:0
[  453.921655][T15224] Node 0 active_anon:27616kB inactive_anon:0kB active_file:7068kB inactive_file:159676kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133592kB dirty:892kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11088kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  453.956090][T15224] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  453.987778][T15224] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  454.015184][T15224] lowmem_reserve[]: 0 2503 2503 2503 2503
[  454.020971][T15224] Node 0 DMA32 free:1188348kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:27608kB inactive_anon:0kB active_file:7068kB inactive_file:159584kB unevictable:1536kB writepending:900kB present:3129332kB managed:2563984kB mlocked:0kB bounce:0kB free_pcp:1892kB local_pcp:464kB free_cma:0kB
[  454.051725][T15224] lowmem_reserve[]: 0 0 0 0 0
[  454.056505][T15224] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  454.083708][T15224] lowmem_reserve[]: 0 0 0 0 0
[  454.088472][T15224] Node 1 Normal free:3907756kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  454.117897][T15224] lowmem_reserve[]: 0 0 0 0 0
[  454.122682][T15224] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  454.135630][T15224] Node 0 DMA32: 341*4kB (UME) 1425*8kB (UE) 842*16kB (UME) 202*32kB (UME) 837*64kB (UME) 434*128kB (UME) 162*256kB (UM) 77*512kB (UME) 59*1024kB (UM) 4*2048kB (UM) 219*4096kB (UM) = 1188348kB
[  454.155408][T15224] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  454.167094][T15224] Node 1 Normal: 207*4kB (UME) 68*8kB (UME) 45*16kB (UME) 236*32kB (UME) 96*64kB (UME) 32*128kB (UME) 11*256kB (UM) 8*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3907756kB
[  454.185618][T15224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  454.195227][T15224] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  454.204544][T15224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  454.214440][T15224] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  454.223936][T15224] 43097 total pagecache pages
[  454.228615][T15224] 0 pages in swap cache
[  454.232761][T15224] Free swap  = 124996kB
[  454.236987][T15224] Total swap = 124996kB
[  454.241162][T15224] 2097051 pages RAM
[  454.245347][T15224] 0 pages HighMem/MovableOnly
[  454.250025][T15224] 424397 pages reserved
[  454.254210][T15224] 0 pages cma reserved
[  454.583271][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  455.520166][T15233] veth1_macvtap: left promiscuous mode
[  455.537069][T15233] team0: Device veth1_macvtap failed to register rx_handler
[  455.623811][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  455.647535][T15225] vxcan1 speed is unknown, defaulting to 1000
[  456.091796][T15255] bridge2: the hash_elasticity option has been deprecated and is always 16
[  456.376215][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2710'.
[  456.404788][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'.
[  456.663257][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  457.703660][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  457.782547][T15302] netlink: 'syz.3.2719': attribute type 4 has an invalid length.
[  457.966921][T15306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2721'.
[  457.999742][T15308] bridge3: entered promiscuous mode
[  458.029457][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2721'.
[  458.142393][T15313] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2724'.
[  458.210192][T15318] netlink: 'syz.1.2726': attribute type 12 has an invalid length.
[  458.301685][T15319] sit0: left promiscuous mode
[  458.330357][T15319] macsec1: left promiscuous mode
[  458.346173][T15319] macsec1: left allmulticast mode
[  458.365629][T15319] vlan2: left promiscuous mode
[  458.370453][T15319] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  458.403954][T15319] vlan2: left allmulticast mode
[  458.431911][T15319] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  458.451617][T15319] bond3: left promiscuous mode
[  458.459757][T15319] batadv1: left promiscuous mode
[  458.471468][T15319] batadv1: left allmulticast mode
[  458.472405][T15327] xt_hashlimit: size too large, truncated to 1048576
[  458.479301][T15319] tipc: Resetting bearer <eth:syzkaller0>
[  458.502424][T15319] vxlan0: left promiscuous mode
[  458.507643][T15319] vxlan0: left allmulticast mode
[  458.532323][T15319] ipvlan2: left promiscuous mode
[  458.547904][T15319] ipvlan2: left allmulticast mode
[  458.552990][T15319] macvlan0: left allmulticast mode
[  458.593613][T15319] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.611101][T15319] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.620531][T15319] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.662829][T15319] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.682114][T15319] geneve2: left allmulticast mode
[  458.743383][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  458.926506][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'.
[  459.051523][T15344] vxcan1 speed is unknown, defaulting to 1000
[  459.174532][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2736'.
[  459.201792][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'.
[  459.255518][T15360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'.
[  459.295698][T15360] xt_hashlimit: size too large, truncated to 1048576
[  459.417245][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2741'.
[  459.464049][T15368] netlink: 'syz.3.2740': attribute type 1 has an invalid length.
[  459.509840][T15368] syzkaller0: refused to change device tx_queue_len
[  459.783732][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  459.875095][T15386] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  459.979329][T15395] netlink: 'syz.3.2744': attribute type 1 has an invalid length.
[  459.991312][T15386] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[  460.033689][T15395] netlink: 'syz.3.2744': attribute type 2 has an invalid length.
[  460.823436][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  461.174700][T15428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  461.441693][T15436] __nla_validate_parse: 6 callbacks suppressed
[  461.441711][T15436] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2758'.
[  461.473429][T15439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2762'.
[  461.482426][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2762'.
[  461.677749][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'.
[  461.774218][T15453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2766'.
[  461.863652][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  461.891189][T15457] : entered promiscuous mode
[  461.998154][T15457] vxcan1 speed is unknown, defaulting to 1000
[  462.015607][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'.
[  462.038346][T15460] netlink: 'syz.2.2767': attribute type 5 has an invalid length.
[  462.047007][T15463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'.
[  462.064326][T15468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.074417][T15463] netlink: 'syz.1.2768': attribute type 14 has an invalid length.
[  462.082267][T15463] netlink: 'syz.1.2768': attribute type 11 has an invalid length.
[  462.124957][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2770'.
[  462.298548][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2771'.
[  462.343459][T15473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.584667][T15485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2776'.
[  462.744221][T15492] netlink: 'syz.1.2778': attribute type 1 has an invalid length.
[  462.903279][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  463.257266][T15517] bpq0: entered promiscuous mode
[  463.262269][T15517] bpq0: entered allmulticast mode
[  463.395454][T15538] netlink: 'syz.3.2789': attribute type 1 has an invalid length.
[  463.492611][T15542] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000
[  463.943659][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  464.232170][T15580] netlink: 'syz.1.2799': attribute type 1 has an invalid length.
[  464.244790][T15580] netlink: 'syz.1.2799': attribute type 1 has an invalid length.
[  464.263716][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  464.265418][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[  464.812274][T15616] bridge3: entered promiscuous mode
[  464.817681][T15616] bridge3: entered allmulticast mode
[  464.827006][T15617] dummy0: entered promiscuous mode
[  464.969845][T15626] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20002
[  464.983351][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  465.289488][T15631] vxcan1 speed is unknown, defaulting to 1000
[  465.374935][   T30] audit: type=1800 audit(1747673402.772:10): pid=15648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2823" name="memory.events" dev="tmpfs" ino=2830 res=0 errno=0
[  465.428033][T15648] tipc: Cannot configure node identity twice
[  465.463388][   T30] audit: type=1804 audit(1747673402.832:11): pid=15648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2823" name="memory.events" dev="tmpfs" ino=2830 res=1 errno=0
[  465.530256][T15650] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.601303][T15650] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.702671][T15650] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.766062][T15650] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.854873][T15650] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.878476][T15650] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.902523][T15650] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.922245][T15650] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.932816][T15661] veth0_to_bond: entered promiscuous mode
[  465.994544][T15661] veth0_to_bond: left promiscuous mode
[  466.023854][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  466.194564][T15670] netlink: 'syz.4.2830': attribute type 1 has an invalid length.
[  466.307014][T15678] x_tables: ip6_tables: cgroup match: used from hooks FORWARD, but only valid from INPUT/OUTPUT/POSTROUTING
[  466.647660][T15691] vxcan1 speed is unknown, defaulting to 1000
[  467.063278][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  467.233368][T15708] __nla_validate_parse: 25 callbacks suppressed
[  467.233387][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'.
[  467.404788][T15716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.502914][T15716] syzkaller0: entered promiscuous mode
[  467.508621][T15716] syzkaller0: entered allmulticast mode
[  467.515085][T15720] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2841'.
[  467.524952][T15716] tipc: Resetting bearer <eth:syzkaller0>
[  467.562117][T15722] syzkaller0: entered promiscuous mode
[  467.572542][T15722] syzkaller0: entered allmulticast mode
[  467.897198][T15728] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2847'.
[  467.915281][T15728] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2847'.
[  468.067150][T15709] tipc: Resetting bearer <eth:syzkaller0>
[  468.103597][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  468.168361][T15734] netlink: 'syz.4.2849': attribute type 1 has an invalid length.
[  468.483776][ T3401] tipc: Node number set to 2946300766
[  469.143426][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  470.186742][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  471.189277][T15709] tipc: Disabling bearer <eth:syzkaller0>
[  471.201857][T15734] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  471.202991][T15738] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  471.223604][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  471.228707][T15736] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  471.724526][T15764] netlink: 'syz.0.2857': attribute type 42 has an invalid length.
[  471.729476][T15765] vxcan1 speed is unknown, defaulting to 1000
[  472.033512][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'.
[  472.263755][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  472.386963][T15784] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  472.414438][T15784] CPU: 1 UID: 0 PID: 15784 Comm: syz.0.2863 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  472.414469][T15784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  472.414481][T15784] Call Trace:
[  472.414490][T15784]  <TASK>
[  472.414499][T15784]  dump_stack_lvl+0x189/0x250
[  472.414531][T15784]  ? lockdep_hardirqs_on+0x9c/0x150
[  472.414556][T15784]  ? __pfx_dump_stack_lvl+0x10/0x10
[  472.414579][T15784]  ? __pfx__printk+0x10/0x10
[  472.414598][T15784]  ? kernfs_path_from_node+0x2b/0x260
[  472.414624][T15784]  ? kernfs_path_from_node+0x216/0x260
[  472.414649][T15784]  sysfs_warn_dup+0x8e/0xa0
[  472.414672][T15784]  sysfs_do_create_link_sd+0xc0/0x110
[  472.414698][T15784]  device_add_class_symlinks+0x1cf/0x240
[  472.414726][T15784]  device_add+0x475/0xb50
[  472.414753][T15784]  wiphy_register+0x199a/0x26b0
[  472.414794][T15784]  ? __pfx_wiphy_register+0x10/0x10
[  472.414816][T15784]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  472.414851][T15784]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  472.414883][T15784]  ieee80211_register_hw+0x33e1/0x4120
[  472.414922][T15784]  ? ieee80211_register_hw+0x1491/0x4120
[  472.414950][T15784]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  472.414972][T15784]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  472.415011][T15784]  ? __hrtimer_setup+0x187/0x210
[  472.415036][T15784]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  472.415061][T15784]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  472.415119][T15784]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  472.415137][T15784]  ? trace_kmalloc+0x1f/0xd0
[  472.415156][T15784]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  472.415178][T15784]  ? kstrndup+0xbf/0x160
[  472.415211][T15784]  hwsim_new_radio_nl+0xea4/0x1b10
[  472.415234][T15784]  ? __pfx___nla_validate_parse+0x10/0x10
[  472.415275][T15784]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  472.415312][T15784]  ? __nla_parse+0x40/0x60
[  472.415340][T15784]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  472.415372][T15784]  genl_family_rcv_msg_doit+0x215/0x300
[  472.415400][T15784]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  472.415449][T15784]  ? bpf_lsm_capable+0x9/0x20
[  472.415474][T15784]  ? security_capable+0x7e/0x2e0
[  472.415504][T15784]  genl_rcv_msg+0x60e/0x790
[  472.415532][T15784]  ? __pfx_genl_rcv_msg+0x10/0x10
[  472.415551][T15784]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  472.415589][T15784]  netlink_rcv_skb+0x21c/0x490
[  472.415614][T15784]  ? __pfx_genl_rcv_msg+0x10/0x10
[  472.415635][T15784]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  472.415689][T15784]  ? down_read+0x1ad/0x2e0
[  472.415713][T15784]  genl_rcv+0x28/0x40
[  472.415730][T15784]  netlink_unicast+0x758/0x8d0
[  472.415766][T15784]  netlink_sendmsg+0x805/0xb30
[  472.415800][T15784]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.415827][T15784]  ? aa_sock_msg_perm+0x94/0x160
[  472.415851][T15784]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  472.415869][T15784]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.415893][T15784]  __sock_sendmsg+0x219/0x270
[  472.415916][T15784]  ____sys_sendmsg+0x505/0x830
[  472.415948][T15784]  ? __pfx_____sys_sendmsg+0x10/0x10
[  472.415993][T15784]  ? import_iovec+0x74/0xa0
[  472.416029][T15784]  ___sys_sendmsg+0x21f/0x2a0
[  472.416057][T15784]  ? __pfx____sys_sendmsg+0x10/0x10
[  472.416129][T15784]  ? __fget_files+0x2a/0x420
[  472.416151][T15784]  ? __fget_files+0x3a0/0x420
[  472.416184][T15784]  __x64_sys_sendmsg+0x19b/0x260
[  472.416211][T15784]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  472.416254][T15784]  ? do_syscall_64+0xba/0x210
[  472.416281][T15784]  do_syscall_64+0xf6/0x210
[  472.416301][T15784]  ? clear_bhb_loop+0x60/0xb0
[  472.416325][T15784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.416341][T15784] RIP: 0033:0x7f8a4db8e969
[  472.416358][T15784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.416376][T15784] RSP: 002b:00007f8a4ea86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  472.416395][T15784] RAX: ffffffffffffffda RBX: 00007f8a4ddb5fa0 RCX: 00007f8a4db8e969
[  472.416409][T15784] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  472.416420][T15784] RBP: 00007f8a4dc10ab1 R08: 0000000000000000 R09: 0000000000000000
[  472.416430][T15784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  472.416440][T15784] R13: 0000000000000000 R14: 00007f8a4ddb5fa0 R15: 00007ffcfddb9b78
[  472.416471][T15784]  </TASK>
[  472.933817][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  472.952625][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  472.961153][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  472.973772][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  472.982614][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  473.054127][T15796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2866'.
[  473.083323][T15793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2865'.
[  473.213031][T15790] vxcan1 speed is unknown, defaulting to 1000
[  473.303259][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  473.432489][T15807] xt_bpf: check failed: parse error
[  473.529957][T15814] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2871'.
[  473.757437][T15821] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2874'.
[  473.788138][T15823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2873'.
[  473.798593][T15823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2873'.
[  473.825785][T15821] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  473.841957][T15821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2874'.
[  473.984412][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2875'.
[  474.153695][T15828] batman_adv: batadv0: Adding interface: ip6gretap3
[  474.160558][T15828] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.200248][T15830] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2876'.
[  474.210321][T15828] batman_adv: batadv0: Interface activated: ip6gretap3
[  474.298951][T15790] chnl_net:caif_netlink_parms(): no params data found
[  474.343905][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  474.587590][T15848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2879'.
[  474.640166][T15844] batadv0: left promiscuous mode
[  474.663319][T15844] batadv0: left allmulticast mode
[  474.826865][T15850] tipc: Disabling bearer <eth:team0>
[  474.861700][T15790] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.869121][T15790] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.876662][T15790] bridge_slave_0: entered allmulticast mode
[  474.884560][T15790] bridge_slave_0: entered promiscuous mode
[  474.892746][T15847] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  474.915338][T15847] CPU: 0 UID: 0 PID: 15847 Comm: syz.2.2881 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  474.915365][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  474.915376][T15847] Call Trace:
[  474.915384][T15847]  <TASK>
[  474.915393][T15847]  dump_stack_lvl+0x189/0x250
[  474.915423][T15847]  ? lockdep_hardirqs_on+0x9c/0x150
[  474.915445][T15847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  474.915470][T15847]  ? __pfx__printk+0x10/0x10
[  474.915493][T15847]  ? kernfs_path_from_node+0x2b/0x260
[  474.915520][T15847]  ? kernfs_path_from_node+0x216/0x260
[  474.915544][T15847]  sysfs_warn_dup+0x8e/0xa0
[  474.915566][T15847]  sysfs_do_create_link_sd+0xc0/0x110
[  474.915591][T15847]  device_add_class_symlinks+0x1cf/0x240
[  474.915616][T15847]  device_add+0x475/0xb50
[  474.915642][T15847]  wiphy_register+0x199a/0x26b0
[  474.915681][T15847]  ? __pfx_wiphy_register+0x10/0x10
[  474.915702][T15847]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  474.915733][T15847]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  474.915760][T15847]  ieee80211_register_hw+0x33e1/0x4120
[  474.915806][T15847]  ? ieee80211_register_hw+0x1491/0x4120
[  474.915832][T15847]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  474.915854][T15847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  474.915882][T15847]  ? __hrtimer_setup+0x187/0x210
[  474.915908][T15847]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  474.915930][T15847]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  474.915983][T15847]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  474.916000][T15847]  ? trace_kmalloc+0x1f/0xd0
[  474.916019][T15847]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  474.916040][T15847]  ? kstrndup+0xbf/0x160
[  474.916069][T15847]  hwsim_new_radio_nl+0xea4/0x1b10
[  474.916092][T15847]  ? __pfx___nla_validate_parse+0x10/0x10
[  474.916131][T15847]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  474.916166][T15847]  ? __nla_parse+0x40/0x60
[  474.916192][T15847]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  474.916221][T15847]  genl_family_rcv_msg_doit+0x215/0x300
[  474.916249][T15847]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  474.916285][T15847]  ? bpf_lsm_capable+0x9/0x20
[  474.916306][T15847]  ? security_capable+0x7e/0x2e0
[  474.916333][T15847]  genl_rcv_msg+0x60e/0x790
[  474.916363][T15847]  ? __pfx_genl_rcv_msg+0x10/0x10
[  474.916382][T15847]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  474.916420][T15847]  netlink_rcv_skb+0x21c/0x490
[  474.916445][T15847]  ? __pfx_genl_rcv_msg+0x10/0x10
[  474.916467][T15847]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  474.916517][T15847]  ? down_read+0x1ad/0x2e0
[  474.916541][T15847]  genl_rcv+0x28/0x40
[  474.916557][T15847]  netlink_unicast+0x758/0x8d0
[  474.916593][T15847]  netlink_sendmsg+0x805/0xb30
[  474.916629][T15847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  474.916657][T15847]  ? aa_sock_msg_perm+0x94/0x160
[  474.916680][T15847]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  474.916700][T15847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  474.916724][T15847]  __sock_sendmsg+0x219/0x270
[  474.916748][T15847]  ____sys_sendmsg+0x505/0x830
[  474.916780][T15847]  ? __pfx_____sys_sendmsg+0x10/0x10
[  474.916829][T15847]  ? import_iovec+0x74/0xa0
[  474.916858][T15847]  ___sys_sendmsg+0x21f/0x2a0
[  474.916885][T15847]  ? __pfx____sys_sendmsg+0x10/0x10
[  474.916953][T15847]  ? __fget_files+0x2a/0x420
[  474.916976][T15847]  ? __fget_files+0x3a0/0x420
[  474.917011][T15847]  __x64_sys_sendmsg+0x19b/0x260
[  474.917037][T15847]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  474.917083][T15847]  ? do_syscall_64+0xba/0x210
[  474.917109][T15847]  do_syscall_64+0xf6/0x210
[  474.917130][T15847]  ? clear_bhb_loop+0x60/0xb0
[  474.917154][T15847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.917171][T15847] RIP: 0033:0x7f2be598e969
[  474.917189][T15847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  474.917205][T15847] RSP: 002b:00007f2be6732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  474.917224][T15847] RAX: ffffffffffffffda RBX: 00007f2be5bb5fa0 RCX: 00007f2be598e969
[  474.917237][T15847] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  474.917248][T15847] RBP: 00007f2be5a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  474.917259][T15847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.917270][T15847] R13: 0000000000000000 R14: 00007f2be5bb5fa0 R15: 00007ffdbce37c78
[  474.917303][T15847]  </TASK>
[  474.924255][T15790] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.066277][ T5848] Bluetooth: hci0: command tx timeout
[  475.361364][T15790] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.368997][T15790] bridge_slave_1: entered allmulticast mode
[  475.376917][T15790] bridge_slave_1: entered promiscuous mode
[  475.383355][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  475.475564][T15790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.510819][T15790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  475.706507][T15790] team0: Port device team_slave_0 added
[  475.754787][T15790] team0: Port device team_slave_1 added
[  475.944517][T15790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.970445][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.020189][T15790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.058392][T15790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.073807][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.148084][T15790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.312891][T15790] hsr_slave_0: entered promiscuous mode
[  476.321451][T15790] hsr_slave_1: entered promiscuous mode
[  476.423561][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  476.932229][T15914] vxcan1 speed is unknown, defaulting to 1000
[  476.940231][T15917] bond6: left allmulticast mode
[  476.953620][T15917] bond6: left promiscuous mode
[  476.969035][T15917] bridge0: port 1(bond6) entered disabled state
[  477.144495][ T5848] Bluetooth: hci0: command tx timeout
[  477.381305][T15790] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  477.427317][T15790] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  477.463391][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  477.464069][T15790] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  477.553317][T15790] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  477.999952][T15790] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.046005][T15790] 8021q: adding VLAN 0 to HW filter on device team0
[  478.066780][T15954] __nla_validate_parse: 10 callbacks suppressed
[  478.066800][T15954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2912'.
[  478.076232][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.089165][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.135129][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.142341][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.503713][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  478.549306][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2914'.
[  478.768404][T15790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.821516][T15977] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2917'.
[  478.862902][T15977] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2917'.
[  478.913808][T15969] vxcan1 speed is unknown, defaulting to 1000
[  479.066994][T15790] veth0_vlan: entered promiscuous mode
[  479.116171][T15790] veth1_vlan: entered promiscuous mode
[  479.190184][T15790] veth0_macvtap: entered promiscuous mode
[  479.215875][T15790] veth1_macvtap: entered promiscuous mode
[  479.223713][ T5848] Bluetooth: hci0: command tx timeout
[  479.265848][T15790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.360379][T15992] x_tables: duplicate underflow at hook 2
[  479.543367][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  479.611922][T15790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  479.653639][T15790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.677706][T15790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.696201][T15790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.717656][T15790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.819464][T15997] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2921'.
[  480.005180][T15995] bond0: (slave team0): Releasing backup interface
[  480.362645][T16011] lo speed is unknown, defaulting to 1000
[  480.385243][T16011] lo speed is unknown, defaulting to 1000
[  480.402448][T16011] lo speed is unknown, defaulting to 1000
[  480.431631][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2925'.
[  480.448851][T16014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2926'.
[  480.488087][T16011] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  480.517213][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.575272][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.583607][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  480.593984][T16011] lo speed is unknown, defaulting to 1000
[  480.626638][T16011] lo speed is unknown, defaulting to 1000
[  480.635731][T16011] lo speed is unknown, defaulting to 1000
[  480.649454][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.651938][T16011] lo speed is unknown, defaulting to 1000
[  480.665224][T16011] lo speed is unknown, defaulting to 1000
[  480.669493][T16020] netlink: 'syz.3.2927': attribute type 10 has an invalid length.
[  480.672724][T16011] lo speed is unknown, defaulting to 1000
[  480.694024][T16011] lo speed is unknown, defaulting to 1000
[  480.698544][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  480.881892][T16024] netem: incorrect gi model size
[  480.921714][T16024] netem: change failed
[  481.316066][ T5848] Bluetooth: hci0: command tx timeout
[  481.564472][T16051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2936'.
[  481.623301][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  481.899429][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  481.915083][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  481.924212][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  481.934480][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  481.942235][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  482.149223][T16054] vxcan1 speed is unknown, defaulting to 1000
[  482.344380][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  482.518595][T16077] : entered promiscuous mode
[  482.663633][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  482.678392][T16054] lo speed is unknown, defaulting to 1000
[  482.875154][T16058] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  482.934838][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'.
[  483.034060][T16093] netlink: 'syz.0.2947': attribute type 3 has an invalid length.
[  483.058276][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2947'.
[  483.457868][T16054] chnl_net:caif_netlink_parms(): no params data found
[  483.688891][T16123] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  483.698760][T16054] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.708166][T16054] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.713329][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  483.715514][T16054] bridge_slave_0: entered allmulticast mode
[  483.730497][T16054] bridge_slave_0: entered promiscuous mode
[  483.743413][T16054] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.750664][T16054] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.758594][T16054] bridge_slave_1: entered allmulticast mode
[  483.775594][T16054] bridge_slave_1: entered promiscuous mode
[  483.919184][T16054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.986840][T16054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.024598][ T5848] Bluetooth: hci5: command tx timeout
[  484.108609][T16054] team0: Port device team_slave_0 added
[  484.127396][T16054] team0: Port device team_slave_1 added
[  484.136996][T16137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2957'.
[  484.224189][T16133] vxcan1 speed is unknown, defaulting to 1000
[  484.247734][T16141] netlink: 'syz.2.2958': attribute type 83 has an invalid length.
[  484.275139][T16140] netlink: 'syz.2.2958': attribute type 83 has an invalid length.
[  484.309620][T16054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.339196][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.405735][T16054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.449707][T16054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.461884][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.528705][T16054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.546868][T16156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2962'.
[  484.569651][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'.
[  484.736783][T16054] hsr_slave_0: entered promiscuous mode
[  484.743784][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  484.758233][T16054] hsr_slave_1: entered promiscuous mode
[  484.775266][T16054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  484.793132][T16054] Cannot create hsr debugfs directory
[  484.985828][T16175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2968'.
[  485.031002][T16133] lo speed is unknown, defaulting to 1000
[  485.062443][T16158] lo speed is unknown, defaulting to 1000
[  485.086882][T16158] lo speed is unknown, defaulting to 1000
[  485.107051][T16158] lo speed is unknown, defaulting to 1000
[  485.149887][T16158] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  485.273621][T16158] lo speed is unknown, defaulting to 1000
[  485.309679][T16183] netlink: 'syz.2.2970': attribute type 1 has an invalid length.
[  485.312859][T16158] lo speed is unknown, defaulting to 1000
[  485.318563][T16183] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2970'.
[  485.349924][T16158] lo speed is unknown, defaulting to 1000
[  485.452858][T16054] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.483673][T16158] lo speed is unknown, defaulting to 1000
[  485.506091][T16158] lo speed is unknown, defaulting to 1000
[  485.529107][T16158] lo speed is unknown, defaulting to 1000
[  485.546518][T16054] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.571465][T16158] lo speed is unknown, defaulting to 1000
[  485.583047][T16158] lo speed is unknown, defaulting to 1000
[  485.623473][T16054] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.766653][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2975'.
[  485.783365][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  485.795262][T16054] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.813086][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'.
[  486.103543][ T5848] Bluetooth: hci5: command tx timeout
[  486.189361][T16054] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  486.326683][T16054] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  486.459609][T16054] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  486.502314][T16054] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  486.616904][T16224] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  486.634176][T16224] CPU: 0 UID: 0 PID: 16224 Comm: syz.3.2983 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  486.634208][T16224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  486.634218][T16224] Call Trace:
[  486.634227][T16224]  <TASK>
[  486.634236][T16224]  dump_stack_lvl+0x189/0x250
[  486.634267][T16224]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.634288][T16224]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.634312][T16224]  ? __pfx__printk+0x10/0x10
[  486.634339][T16224]  ? kernfs_path_from_node+0x2b/0x260
[  486.634368][T16224]  ? kernfs_path_from_node+0x216/0x260
[  486.634393][T16224]  sysfs_warn_dup+0x8e/0xa0
[  486.634418][T16224]  sysfs_do_create_link_sd+0xc0/0x110
[  486.634445][T16224]  device_add_class_symlinks+0x1cf/0x240
[  486.634474][T16224]  device_add+0x475/0xb50
[  486.634501][T16224]  wiphy_register+0x199a/0x26b0
[  486.634546][T16224]  ? __pfx_wiphy_register+0x10/0x10
[  486.634567][T16224]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  486.634599][T16224]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  486.634627][T16224]  ieee80211_register_hw+0x33e1/0x4120
[  486.634661][T16224]  ? ieee80211_register_hw+0x1491/0x4120
[  486.634687][T16224]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  486.634707][T16224]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  486.634732][T16224]  ? __hrtimer_setup+0x187/0x210
[  486.634762][T16224]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  486.634786][T16224]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  486.634839][T16224]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  486.634853][T16224]  ? trace_kmalloc+0x1f/0xd0
[  486.634872][T16224]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  486.634893][T16224]  ? kstrndup+0xbf/0x160
[  486.634925][T16224]  hwsim_new_radio_nl+0xea4/0x1b10
[  486.634946][T16224]  ? __pfx___nla_validate_parse+0x10/0x10
[  486.634982][T16224]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  486.635017][T16224]  ? __nla_parse+0x40/0x60
[  486.635043][T16224]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  486.635082][T16224]  genl_family_rcv_msg_doit+0x215/0x300
[  486.635110][T16224]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  486.635193][T16224]  ? bpf_lsm_capable+0x9/0x20
[  486.635219][T16224]  ? security_capable+0x7e/0x2e0
[  486.635249][T16224]  genl_rcv_msg+0x60e/0x790
[  486.635276][T16224]  ? __pfx_genl_rcv_msg+0x10/0x10
[  486.635293][T16224]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  486.635329][T16224]  netlink_rcv_skb+0x21c/0x490
[  486.635355][T16224]  ? __pfx_genl_rcv_msg+0x10/0x10
[  486.635374][T16224]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  486.635428][T16224]  ? down_read+0x1ad/0x2e0
[  486.635454][T16224]  genl_rcv+0x28/0x40
[  486.635471][T16224]  netlink_unicast+0x758/0x8d0
[  486.635509][T16224]  netlink_sendmsg+0x805/0xb30
[  486.635546][T16224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  486.635575][T16224]  ? aa_sock_msg_perm+0x94/0x160
[  486.635598][T16224]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  486.635619][T16224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  486.635643][T16224]  __sock_sendmsg+0x219/0x270
[  486.635669][T16224]  ____sys_sendmsg+0x505/0x830
[  486.635701][T16224]  ? __pfx_____sys_sendmsg+0x10/0x10
[  486.635737][T16224]  ? import_iovec+0x74/0xa0
[  486.635766][T16224]  ___sys_sendmsg+0x21f/0x2a0
[  486.635792][T16224]  ? __pfx____sys_sendmsg+0x10/0x10
[  486.635862][T16224]  ? __fget_files+0x2a/0x420
[  486.635890][T16224]  ? __fget_files+0x3a0/0x420
[  486.635928][T16224]  __x64_sys_sendmsg+0x19b/0x260
[  486.635957][T16224]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  486.636005][T16224]  ? do_syscall_64+0xba/0x210
[  486.636031][T16224]  do_syscall_64+0xf6/0x210
[  486.636059][T16224]  ? clear_bhb_loop+0x60/0xb0
[  486.636083][T16224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.636101][T16224] RIP: 0033:0x7f5a72b8e969
[  486.636119][T16224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  486.636134][T16224] RSP: 002b:00007f5a73989038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  486.636154][T16224] RAX: ffffffffffffffda RBX: 00007f5a72db5fa0 RCX: 00007f5a72b8e969
[  486.636167][T16224] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  486.636178][T16224] RBP: 00007f5a72c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  486.636190][T16224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  486.636201][T16224] R13: 0000000000000000 R14: 00007f5a72db5fa0 R15: 00007ffff4168d08
[  486.636234][T16224]  </TASK>
[  486.835146][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  486.975234][T16054] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.208256][T16232] x_tables: ip_tables: icmp match: only valid for protocol 1
[  487.234232][T16054] 8021q: adding VLAN 0 to HW filter on device team0
[  487.292101][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.299310][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  487.365521][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.372810][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  487.619185][T16254] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.627849][T16254] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.636386][T16254] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.645596][T16254] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.713530][T16260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2994'.
[  487.863259][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  487.935447][T16054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  487.983016][T16270] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  488.011175][T16270] CPU: 0 UID: 0 PID: 16270 Comm: syz.3.2996 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  488.011204][T16270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  488.011215][T16270] Call Trace:
[  488.011223][T16270]  <TASK>
[  488.011232][T16270]  dump_stack_lvl+0x189/0x250
[  488.011262][T16270]  ? lockdep_hardirqs_on+0x9c/0x150
[  488.011285][T16270]  ? __pfx_dump_stack_lvl+0x10/0x10
[  488.011307][T16270]  ? __pfx__printk+0x10/0x10
[  488.011328][T16270]  ? kernfs_path_from_node+0x2b/0x260
[  488.011353][T16270]  ? kernfs_path_from_node+0x216/0x260
[  488.011379][T16270]  sysfs_warn_dup+0x8e/0xa0
[  488.011402][T16270]  sysfs_do_create_link_sd+0xc0/0x110
[  488.011428][T16270]  device_add_class_symlinks+0x1cf/0x240
[  488.011454][T16270]  device_add+0x475/0xb50
[  488.011482][T16270]  wiphy_register+0x199a/0x26b0
[  488.011523][T16270]  ? __pfx_wiphy_register+0x10/0x10
[  488.011544][T16270]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  488.011577][T16270]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  488.011607][T16270]  ieee80211_register_hw+0x33e1/0x4120
[  488.011643][T16270]  ? ieee80211_register_hw+0x1491/0x4120
[  488.011682][T16270]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  488.011706][T16270]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  488.011735][T16270]  ? __hrtimer_setup+0x187/0x210
[  488.011760][T16270]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  488.011785][T16270]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  488.011842][T16270]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  488.011858][T16270]  ? trace_kmalloc+0x1f/0xd0
[  488.011877][T16270]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  488.011899][T16270]  ? kstrndup+0xbf/0x160
[  488.011930][T16270]  hwsim_new_radio_nl+0xea4/0x1b10
[  488.011953][T16270]  ? __pfx___nla_validate_parse+0x10/0x10
[  488.011994][T16270]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  488.012018][T16270]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  488.012049][T16270]  ? __nla_parse+0x40/0x60
[  488.012074][T16270]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  488.012103][T16270]  genl_family_rcv_msg_doit+0x215/0x300
[  488.012131][T16270]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  488.012166][T16270]  ? bpf_lsm_capable+0x9/0x20
[  488.012188][T16270]  ? security_capable+0x7e/0x2e0
[  488.012216][T16270]  genl_rcv_msg+0x60e/0x790
[  488.012241][T16270]  ? __pfx_genl_rcv_msg+0x10/0x10
[  488.012259][T16270]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  488.012295][T16270]  netlink_rcv_skb+0x21c/0x490
[  488.012321][T16270]  ? __pfx_genl_rcv_msg+0x10/0x10
[  488.012343][T16270]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  488.012395][T16270]  ? down_read+0x1ad/0x2e0
[  488.012420][T16270]  genl_rcv+0x28/0x40
[  488.012436][T16270]  netlink_unicast+0x758/0x8d0
[  488.012473][T16270]  netlink_sendmsg+0x805/0xb30
[  488.012508][T16270]  ? __pfx_netlink_sendmsg+0x10/0x10
[  488.012536][T16270]  ? aa_sock_msg_perm+0x94/0x160
[  488.012560][T16270]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  488.012580][T16270]  ? __pfx_netlink_sendmsg+0x10/0x10
[  488.012605][T16270]  __sock_sendmsg+0x219/0x270
[  488.012631][T16270]  ____sys_sendmsg+0x505/0x830
[  488.012672][T16270]  ? __pfx_____sys_sendmsg+0x10/0x10
[  488.012709][T16270]  ? import_iovec+0x74/0xa0
[  488.012740][T16270]  ___sys_sendmsg+0x21f/0x2a0
[  488.012768][T16270]  ? __pfx____sys_sendmsg+0x10/0x10
[  488.012838][T16270]  ? __fget_files+0x2a/0x420
[  488.012859][T16270]  ? __fget_files+0x3a0/0x420
[  488.012894][T16270]  __x64_sys_sendmsg+0x19b/0x260
[  488.012922][T16270]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  488.012968][T16270]  ? do_syscall_64+0xba/0x210
[  488.012993][T16270]  do_syscall_64+0xf6/0x210
[  488.013015][T16270]  ? clear_bhb_loop+0x60/0xb0
[  488.013039][T16270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.013057][T16270] RIP: 0033:0x7f5a72b8e969
[  488.013075][T16270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  488.013088][T16270] RSP: 002b:00007f5a73989038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  488.013107][T16270] RAX: ffffffffffffffda RBX: 00007f5a72db5fa0 RCX: 00007f5a72b8e969
[  488.013121][T16270] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  488.013133][T16270] RBP: 00007f5a72c10ab1 R08: 0000000000000000 R09: 0000000000000000
[  488.013145][T16270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  488.013156][T16270] R13: 0000000000000000 R14: 00007f5a72db5fa0 R15: 00007ffff4168d08
[  488.013186][T16270]  </TASK>
[  488.483940][ T5848] Bluetooth: hci5: command tx timeout
[  488.815250][T16291] netlink: 'syz.2.3001': attribute type 29 has an invalid length.
[  488.854376][T16291] netlink: 'syz.2.3001': attribute type 29 has an invalid length.
[  488.860981][T16296] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  488.903756][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  488.918120][T16291] netlink: 492 bytes leftover after parsing attributes in process `syz.2.3001'.
[  489.170205][T16054] veth0_vlan: entered promiscuous mode
[  489.217519][T16054] veth1_vlan: entered promiscuous mode
[  489.266648][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3005'.
[  489.320966][T16054] veth0_macvtap: entered promiscuous mode
[  489.351179][T16054] veth1_macvtap: entered promiscuous mode
[  489.411265][T16054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  489.449988][T16054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.500144][T16054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.530847][T16054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.561259][T16054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.574829][T16054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.621521][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3006'.
[  489.804346][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  489.827034][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.921784][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  489.943435][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  489.966693][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.128071][T16329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3010'.
[  490.197013][T16333] vxcan1 speed is unknown, defaulting to 1000
[  490.200742][T16329] tap0: tun_chr_ioctl cmd 1074025677
[  490.233718][T16329] tap0: linktype set to 780
[  490.503413][ T5848] Bluetooth: hci5: command tx timeout
[  490.524185][T16333] lo speed is unknown, defaulting to 1000
[  490.531868][T16333] lo speed is unknown, defaulting to 1000
[  490.538438][T16341] nbd: device at index 3 is going down
[  490.763681][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'.
[  490.772600][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'.
[  490.993598][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  491.018555][T16337] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  491.153506][T16358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3016'.
[  491.162489][T16358] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3016'.
[  491.533021][T16367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3018'.
[  491.583979][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  491.593504][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  491.601906][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  491.610024][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  491.617792][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  491.721819][T16368] vxcan1 speed is unknown, defaulting to 1000
[  491.942139][T16380] netlink: 'syz.4.3022': attribute type 11 has an invalid length.
[  492.023457][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  492.433576][T16368] lo speed is unknown, defaulting to 1000
[  492.465864][T16368] lo speed is unknown, defaulting to 1000
[  492.584473][ T5848] Bluetooth: hci5: command tx timeout
[  492.610896][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3024'.
[  493.063739][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  493.080640][T16368] chnl_net:caif_netlink_parms(): no params data found
[  493.135976][T16408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3030'.
[  493.320188][T16404] xt_CT: No such helper "pptp"
[  493.562573][T16368] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.576037][T16368] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.595764][T16368] bridge_slave_0: entered allmulticast mode
[  493.614358][T16368] bridge_slave_0: entered promiscuous mode
[  493.657250][T16368] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.678895][T16368] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.696833][T16368] bridge_slave_1: entered allmulticast mode
[  493.704061][ T5848] Bluetooth: hci3: command tx timeout
[  493.734808][T16368] bridge_slave_1: entered promiscuous mode
[  493.909359][T16368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.934596][T16433] ip6tnl1: entered promiscuous mode
[  493.940190][T16433] ip6tnl1: entered allmulticast mode
[  493.982852][T16368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  494.103439][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  494.142889][T16453] xt_bpf: check failed: parse error
[  494.149223][T16368] team0: Port device team_slave_0 added
[  494.180609][T16368] team0: Port device team_slave_1 added
[  494.375184][T16462] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  494.408231][T16368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.433511][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.481946][T16469] __nla_validate_parse: 3 callbacks suppressed
[  494.481963][T16469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3043'.
[  494.513577][T16368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.591232][T16368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.611020][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.643995][T16368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.794772][T16368] hsr_slave_0: entered promiscuous mode
[  494.806319][T16483] netlink: 'syz.1.3049': attribute type 13 has an invalid length.
[  494.809349][T16368] hsr_slave_1: entered promiscuous mode
[  494.828235][T16368] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  494.842191][T16368] Cannot create hsr debugfs directory
[  494.853150][T16481] netlink: 'syz.2.3048': attribute type 12 has an invalid length.
[  495.050434][T16483] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.058168][T16483] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.144628][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  495.240705][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.273070][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  495.410075][T16483] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.420758][T16483] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.430258][T16483] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.439908][T16483] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.512959][T16495] macvtap1: entered allmulticast mode
[  495.535016][T16495] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  495.577336][T16498] macvtap2: entered allmulticast mode
[  495.685972][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3053'.
[  495.775737][T16516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3056'.
[  495.785688][ T5848] Bluetooth: hci3: command tx timeout
[  495.885813][T16518] sctp: [Deprecated]: syz.4.3057 (pid 16518) Use of int in maxseg socket option.
[  495.885813][T16518] Use struct sctp_assoc_value instead
[  495.907480][T16525] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3059'.
[  496.193343][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  496.350648][T16543] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:20003
[  496.496877][T16549] openvswitch: netlink: Tunnel attr 7 has unexpected len 8 expected 0
[  496.508290][T16544] wireguard1: entered promiscuous mode
[  496.829627][T16368] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  496.863919][T16368] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  496.891505][T16368] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  496.920696][T16368] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  496.976006][T16568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3069'.
[  497.199864][T16368] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.223745][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  497.258783][T16368] 8021q: adding VLAN 0 to HW filter on device team0
[  497.296973][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.304192][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.355666][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.362856][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  497.812619][T16595] netlink: 'syz.4.3077': attribute type 2 has an invalid length.
[  497.867775][ T5848] Bluetooth: hci3: command tx timeout
[  497.877137][T16595] þ: entered promiscuous mode
[  498.021243][T16598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.057068][T16368] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.131756][T16603] netlink: 'syz.4.3080': attribute type 10 has an invalid length.
[  498.139592][T16598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.191340][T16598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.216098][T16603] veth0_vlan: left promiscuous mode
[  498.244218][T16603] veth0_vlan: entered promiscuous mode
[  498.263327][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  498.286312][T16603] team0: Device veth0_vlan failed to register rx_handler
[  498.356987][T16368] veth0_vlan: entered promiscuous mode
[  498.390173][T16368] veth1_vlan: entered promiscuous mode
[  498.503790][T16368] veth0_macvtap: entered promiscuous mode
[  498.515294][T16368] veth1_macvtap: entered promiscuous mode
[  498.554539][T16368] batman_adv: batadv0: Interface activated: batadv_slave_0
[  498.600331][T16368] batman_adv: batadv0: Interface activated: batadv_slave_1
[  498.631474][T16368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.659348][T16368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  498.679041][T16368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  498.703450][T16368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.013366][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.043351][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.141995][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.171121][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.236306][T16617] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3084'.
[  499.246371][T16617] nbd: socks must be embedded in a SOCK_ITEM attr
[  499.303651][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  499.509350][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  499.522268][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  499.544994][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  499.560599][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  499.574054][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  499.647284][T16626] vxcan1 speed is unknown, defaulting to 1000
[  499.918898][T16634] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  499.943368][ T5848] Bluetooth: hci3: command tx timeout
[  500.215114][T16626] lo speed is unknown, defaulting to 1000
[  500.232877][T16626] lo speed is unknown, defaulting to 1000
[  500.343256][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  500.369765][T16647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3092'.
[  500.872434][T16664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3095'.
[  501.055287][T16626] chnl_net:caif_netlink_parms(): no params data found
[  501.383725][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  501.531941][T16626] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.550254][T16626] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.581618][T16626] bridge_slave_0: entered allmulticast mode
[  501.591526][T16626] bridge_slave_0: entered promiscuous mode
[  501.623858][ T5848] Bluetooth: hci2: command tx timeout
[  501.658527][T16669] netlink: 'syz.2.3097': attribute type 1 has an invalid length.
[  501.842444][T16626] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.861782][T16626] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.886716][T16626] bridge_slave_1: entered allmulticast mode
[  501.903783][T16626] bridge_slave_1: entered promiscuous mode
[  501.956825][T16685] vxcan1 speed is unknown, defaulting to 1000
[  502.150464][T16626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.187897][T16626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.245657][T16685] lo speed is unknown, defaulting to 1000
[  502.251478][T16626] team0: Port device team_slave_0 added
[  502.257888][T16685] lo speed is unknown, defaulting to 1000
[  502.260612][T16626] team0: Port device team_slave_1 added
[  502.367828][T16626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.375084][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.413754][T16626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  502.424401][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  502.491866][T16626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  502.503765][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  502.553426][T16626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  502.772524][T16626] hsr_slave_0: entered promiscuous mode
[  502.785840][T16697] sctp: [Deprecated]: syz.2.3105 (pid 16697) Use of int in max_burst socket option.
[  502.785840][T16697] Use struct sctp_assoc_value instead
[  502.790701][T16626] hsr_slave_1: entered promiscuous mode
[  502.827099][T16626] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  502.843309][T16626] Cannot create hsr debugfs directory
[  502.869747][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'.
[  502.888071][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3105'.
[  502.936227][T16698] ip6tnl1: entered promiscuous mode
[  502.959465][T16698] ip6tnl1: entered allmulticast mode
[  503.464322][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  503.704488][ T5848] Bluetooth: hci2: command tx timeout
[  503.737238][T16719] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:19999
[  503.824451][T16723] netlink: 'syz.4.3110': attribute type 1 has an invalid length.
[  503.839944][T16723] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3110'.
[  503.975733][T16626] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  504.011515][T16626] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  504.028472][T16626] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  504.039626][T16726] vxcan1 speed is unknown, defaulting to 1000
[  504.039890][T16626] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  504.259122][T16626] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.315744][T16626] 8021q: adding VLAN 0 to HW filter on device team0
[  504.367300][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.374532][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  504.387663][T16729] netlink: 816 bytes leftover after parsing attributes in process `syz.4.3113'.
[  504.409900][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.417094][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  504.503273][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  504.543881][T16731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'.
[  504.756312][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3115'.
[  504.780548][T16726] lo speed is unknown, defaulting to 1000
[  504.805522][T16726] lo speed is unknown, defaulting to 1000
[  505.184897][T16626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.458522][T16744] vxcan1 speed is unknown, defaulting to 1000
[  505.491498][T16626] veth0_vlan: entered promiscuous mode
[  505.543744][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  505.633557][T16626] veth1_vlan: entered promiscuous mode
[  505.751155][T16626] veth0_macvtap: entered promiscuous mode
[  505.783513][ T5848] Bluetooth: hci2: command tx timeout
[  505.804567][T16626] veth1_macvtap: entered promiscuous mode
[  505.923137][T16752] vxcan1 speed is unknown, defaulting to 1000
[  505.930640][T16744] lo speed is unknown, defaulting to 1000
[  505.952617][T16744] lo speed is unknown, defaulting to 1000
[  505.973162][T16626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.001065][T16626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.090385][T16626] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  506.112356][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'.
[  506.133443][T16626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  506.147510][T16626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.168427][T16626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.444488][T16752] lo speed is unknown, defaulting to 1000
[  506.492201][T16752] lo speed is unknown, defaulting to 1000
[  506.516102][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'.
[  506.583357][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  506.843915][T16774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3128'.
[  506.951126][ T7964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  506.959785][ T7964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.063262][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.072502][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.084350][T16778] sysfs: cannot create duplicate filename '/class/ieee80211/!å'
[  507.097931][T16778] CPU: 1 UID: 0 PID: 16778 Comm: syz.2.3129 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  507.097974][T16778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  507.097989][T16778] Call Trace:
[  507.097997][T16778]  <TASK>
[  507.098004][T16778]  dump_stack_lvl+0x189/0x250
[  507.098033][T16778]  ? lockdep_hardirqs_on+0x9c/0x150
[  507.098055][T16778]  ? __pfx_dump_stack_lvl+0x10/0x10
[  507.098077][T16778]  ? __pfx__printk+0x10/0x10
[  507.098102][T16778]  ? kernfs_path_from_node+0x2b/0x260
[  507.098131][T16778]  ? kernfs_path_from_node+0x216/0x260
[  507.098170][T16778]  sysfs_warn_dup+0x8e/0xa0
[  507.098195][T16778]  sysfs_do_create_link_sd+0xc0/0x110
[  507.098225][T16778]  device_add_class_symlinks+0x1cf/0x240
[  507.098253][T16778]  device_add+0x475/0xb50
[  507.098281][T16778]  wiphy_register+0x199a/0x26b0
[  507.098325][T16778]  ? __pfx_wiphy_register+0x10/0x10
[  507.098348][T16778]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  507.098384][T16778]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  507.098415][T16778]  ieee80211_register_hw+0x33e1/0x4120
[  507.098452][T16778]  ? ieee80211_register_hw+0x1491/0x4120
[  507.098481][T16778]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  507.098505][T16778]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  507.098534][T16778]  ? __hrtimer_setup+0x187/0x210
[  507.098560][T16778]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  507.098585][T16778]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  507.098644][T16778]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  507.098662][T16778]  ? trace_kmalloc+0x1f/0xd0
[  507.098681][T16778]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  507.098703][T16778]  ? kstrndup+0xbf/0x160
[  507.098733][T16778]  hwsim_new_radio_nl+0xea4/0x1b10
[  507.098755][T16778]  ? __pfx___nla_validate_parse+0x10/0x10
[  507.098794][T16778]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  507.098827][T16778]  ? __nla_parse+0x40/0x60
[  507.098853][T16778]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  507.098883][T16778]  genl_family_rcv_msg_doit+0x215/0x300
[  507.098909][T16778]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  507.098945][T16778]  ? bpf_lsm_capable+0x9/0x20
[  507.098972][T16778]  ? security_capable+0x7e/0x2e0
[  507.099002][T16778]  genl_rcv_msg+0x60e/0x790
[  507.099031][T16778]  ? __pfx_genl_rcv_msg+0x10/0x10
[  507.099049][T16778]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  507.099088][T16778]  netlink_rcv_skb+0x21c/0x490
[  507.099114][T16778]  ? __pfx_genl_rcv_msg+0x10/0x10
[  507.099135][T16778]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  507.099195][T16778]  ? down_read+0x1ad/0x2e0
[  507.099221][T16778]  genl_rcv+0x28/0x40
[  507.099238][T16778]  netlink_unicast+0x758/0x8d0
[  507.099275][T16778]  netlink_sendmsg+0x805/0xb30
[  507.099312][T16778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.099338][T16778]  ? aa_sock_msg_perm+0x94/0x160
[  507.099357][T16778]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  507.099377][T16778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  507.099401][T16778]  __sock_sendmsg+0x219/0x270
[  507.099426][T16778]  ____sys_sendmsg+0x505/0x830
[  507.099459][T16778]  ? __pfx_____sys_sendmsg+0x10/0x10
[  507.099497][T16778]  ? import_iovec+0x74/0xa0
[  507.099527][T16778]  ___sys_sendmsg+0x21f/0x2a0
[  507.099556][T16778]  ? __pfx____sys_sendmsg+0x10/0x10
[  507.099630][T16778]  ? __fget_files+0x2a/0x420
[  507.099652][T16778]  ? __fget_files+0x3a0/0x420
[  507.099689][T16778]  __x64_sys_sendmsg+0x19b/0x260
[  507.099717][T16778]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  507.099764][T16778]  ? do_syscall_64+0xba/0x210
[  507.099790][T16778]  do_syscall_64+0xf6/0x210
[  507.099811][T16778]  ? clear_bhb_loop+0x60/0xb0
[  507.099836][T16778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.099854][T16778] RIP: 0033:0x7f2be598e969
[  507.099871][T16778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.099887][T16778] RSP: 002b:00007f2be6732038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  507.099907][T16778] RAX: ffffffffffffffda RBX: 00007f2be5bb5fa0 RCX: 00007f2be598e969
[  507.099921][T16778] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  507.099933][T16778] RBP: 00007f2be5a10ab1 R08: 0000000000000000 R09: 0000000000000000
[  507.099945][T16778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  507.099955][T16778] R13: 0000000000000000 R14: 00007f2be5bb5fa0 R15: 00007ffdbce37c78
[  507.099990][T16778]  </TASK>
[  507.623653][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  507.691810][T16780] bridge_slave_0: left allmulticast mode
[  507.706934][T16780] bridge_slave_0: left promiscuous mode
[  507.712658][T16780] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.854769][T16780] bridge_slave_1: left allmulticast mode
[  507.861424][T16780] bridge_slave_1: left promiscuous mode
[  507.871487][T16780] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.909576][T16780] bond0: (slave bond_slave_0): Releasing backup interface
[  507.951649][T16780] bond0: (slave bond_slave_1): Releasing backup interface
[  507.969925][T16780] team0: Port device team_slave_0 removed
[  507.990388][T16780] team0: Port device team_slave_1 removed
[  507.996845][T16780] batman_adv: batadv0: Removing interface: batadv_slave_0
[  508.005813][T16780] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.292144][T16802] xt_connbytes: Forcing CT accounting to be enabled
[  508.334759][T16802] --map-set only usable from mangle table
[  508.348139][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  508.666921][T16813] vxcan1 speed is unknown, defaulting to 1000
[  508.673298][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  508.987401][T16820] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3140'.
[  509.007210][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.397093][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.448034][T16820] syzkaller1: entered promiscuous mode
[  509.454115][T16820] syzkaller1: entered allmulticast mode
[  509.619389][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.703694][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  509.820815][T16813] lo speed is unknown, defaulting to 1000
[  509.834458][T16835] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3143'.
[  509.850831][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  509.853842][T16835] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  509.894660][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  509.918615][T16813] lo speed is unknown, defaulting to 1000
[  509.918674][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  509.937213][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  509.947775][T16832] vxcan1 speed is unknown, defaulting to 1000
[  509.957208][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  510.196525][T16842] netlink: 'syz.0.3145': attribute type 30 has an invalid length.
[  510.316413][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3144'.
[  510.361380][T16832] lo speed is unknown, defaulting to 1000
[  510.378461][   T13] bridge_slave_1: left allmulticast mode
[  510.388502][   T13] bridge_slave_1: left promiscuous mode
[  510.396260][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3144'.
[  510.402962][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.450450][   T13] bridge_slave_0: left allmulticast mode
[  510.461854][   T13] bridge_slave_0: left promiscuous mode
[  510.480694][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.749557][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  510.988003][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  510.999878][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  511.011210][   T13] bond0 (unregistering): Released all slaves
[  511.028475][T16836] vxcan1 speed is unknown, defaulting to 1000
[  511.028511][T16832] lo speed is unknown, defaulting to 1000
[  511.545889][T16836] lo speed is unknown, defaulting to 1000
[  511.560936][T16836] lo speed is unknown, defaulting to 1000
[  511.592615][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3151'.
[  511.786103][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  511.949174][T16870] block nbd0: NBD_DISCONNECT
[  511.995753][T16870] block nbd0: Send disconnect failed -32
[  512.023517][ T5841] Bluetooth: hci2: command tx timeout
[  512.033019][T16870] block nbd0: shutting down sockets
[  512.407566][   T13] hsr_slave_0: left promiscuous mode
[  512.434423][   T13] hsr_slave_1: left promiscuous mode
[  512.441040][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  512.503934][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  512.520514][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  512.534270][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  512.599384][   T13] veth1_macvtap: left promiscuous mode
[  512.613570][   T13] veth0_macvtap: left promiscuous mode
[  512.619382][   T13] veth1_vlan: left promiscuous mode
[  512.634310][   T13] veth0_vlan: left promiscuous mode
[  512.674492][ T5848] block nbd4: Receive control failed (result -104)
[  512.823327][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  513.048892][T16882] netlink: 'syz.0.3154': attribute type 4 has an invalid length.
[  513.241255][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'.
[  513.529649][   T13] team0 (unregistering): Port device team_slave_1 removed
[  513.579285][   T13] team0 (unregistering): Port device team_slave_0 removed
[  513.864078][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  514.110108][ T5848] Bluetooth: hci2: command tx timeout
[  514.128850][T16897] vxcan1 speed is unknown, defaulting to 1000
[  514.182832][T16836] chnl_net:caif_netlink_parms(): no params data found
[  514.344141][ T1155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  514.408682][T16904] netlink: 'syz.2.3159': attribute type 29 has an invalid length.
[  514.424616][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'.
[  514.481321][T16901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'.
[  514.624980][T16836] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.643853][T16836] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.651133][T16836] bridge_slave_0: entered allmulticast mode
[  514.685544][T16836] bridge_slave_0: entered promiscuous mode
[  514.706070][T16836] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.714312][T16836] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.734125][T16836] bridge_slave_1: entered allmulticast mode
[  514.742913][T16836] bridge_slave_1: entered promiscuous mode
[  514.772326][T16897] lo speed is unknown, defaulting to 1000
[  514.845881][T16897] lo speed is unknown, defaulting to 1000
[  514.893660][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3163'.
[  514.903278][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  514.921573][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3163'.
[  514.942376][T16922] netlink: 'syz.2.3163': attribute type 19 has an invalid length.
[  514.982149][T16836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  515.164614][T16836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  515.330500][T16934] hsr0: entered promiscuous mode
[  515.342533][T16934] macvtap1: entered promiscuous mode
[  515.373909][T16934] macvtap1: entered allmulticast mode
[  515.390519][T16934] hsr0: entered allmulticast mode
[  515.398781][T16934] hsr_slave_0: entered allmulticast mode
[  515.429047][T16934] hsr_slave_1: entered allmulticast mode
[  515.460661][T16934] hsr0: left allmulticast mode
[  515.506347][T16945] netlink: 'syz.1.3166': attribute type 16 has an invalid length.
[  515.514428][T16945] netlink: 'syz.1.3166': attribute type 17 has an invalid length.
[  515.526727][T16934] hsr_slave_0: left allmulticast mode
[  515.542335][T16934] hsr_slave_1: left allmulticast mode
[  515.618618][T16836] team0: Port device team_slave_0 added
[  515.688499][T16945] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.696825][T16945] 8021q: adding VLAN 0 to HW filter on device team0
[  515.709042][T16945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  515.789803][T16836] team0: Port device team_slave_1 added
[  515.939921][T16836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  515.947495][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  515.967229][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.010714][T16836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  516.079278][T16836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  516.088670][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  516.136710][T16836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  516.193630][ T5848] Bluetooth: hci2: command tx timeout
[  516.269325][T16836] hsr_slave_0: entered promiscuous mode
[  516.285248][T16836] hsr_slave_1: entered promiscuous mode
[  516.299884][T16836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  516.319327][T16836] Cannot create hsr debugfs directory
[  516.342949][T16959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3173'.
[  516.717613][T16972] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  516.745281][T16973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.760592][T16972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.983250][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  517.283323][T17006] netlink: 'syz.4.3184': attribute type 4 has an invalid length.
[  517.492424][T16836] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  517.561309][T16836] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  517.625643][T16836] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  517.657631][T16836] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  517.750593][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3190'.
[  518.023571][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  518.087914][T16836] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.176580][T16836] 8021q: adding VLAN 0 to HW filter on device team0
[  518.211287][T17041] pim6reg9: entered allmulticast mode
[  518.230105][  T409] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.237303][  T409] bridge0: port 1(bridge_slave_0) entered forwarding state
[  518.261923][T17043] netlink: 'syz.2.3199': attribute type 1 has an invalid length.
[  518.270221][ T5848] Bluetooth: hci2: command tx timeout
[  518.310815][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.318041][ T7964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  518.391965][T17045] 8021q: VLANs not supported on wg1
[  518.455417][T17044] : entered promiscuous mode
[  518.564751][T17045] vxcan1 speed is unknown, defaulting to 1000
[  518.665710][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'.
[  518.778216][T17045] lo speed is unknown, defaulting to 1000
[  518.790490][T17045] lo speed is unknown, defaulting to 1000
[  519.017789][T17079] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3206'.
[  519.063303][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  519.377711][T16836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.443774][T17092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3210'.
[  519.501115][T16836] veth0_vlan: entered promiscuous mode
[  519.586515][T16836] veth1_vlan: entered promiscuous mode
[  519.715812][T17103] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3213'.
[  519.720358][T16836] veth0_macvtap: entered promiscuous mode
[  519.781716][T16836] veth1_macvtap: entered promiscuous mode
[  519.865565][T17109] netlink: 'syz.1.3214': attribute type 7 has an invalid length.
[  519.896960][T16836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.949382][T16836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.991463][T16836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.010291][T16836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.020598][T16836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.030299][T16836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.104063][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  520.120511][T17116] netlink: 'syz.1.3216': attribute type 29 has an invalid length.
[  520.170997][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.184228][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.271540][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.291208][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.458961][T17128] netlink: 'syz.4.3220': attribute type 1 has an invalid length.
[  520.557987][T17128] bond1: entered promiscuous mode
[  520.574969][T17136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'.
[  520.599000][T17128] 8021q: adding VLAN 0 to HW filter on device bond1
[  520.938547][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'.
[  521.143308][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  521.537289][ T7964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.669768][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3232'.
[  521.717332][ T7964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.790939][T17177] vxcan1 speed is unknown, defaulting to 1000
[  521.867986][ T7964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.930312][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3234'.
[  521.952315][T17180] bridge_slave_1: left allmulticast mode
[  521.964798][T17180] bridge_slave_1: left promiscuous mode
[  521.978489][T17180] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.022138][T17180] bridge_slave_0: left allmulticast mode
[  522.053771][T17180] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.183752][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  522.233319][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  522.242763][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  522.262589][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  522.277161][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  522.286073][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  522.316687][ T7964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.365168][T17177] lo speed is unknown, defaulting to 1000
[  522.386367][T17177] lo speed is unknown, defaulting to 1000
[  522.432598][T17193] vxcan1 speed is unknown, defaulting to 1000
[  522.684432][T17204] syz_tun: entered allmulticast mode
[  522.729275][T17204] dvmrp1: entered allmulticast mode
[  522.885487][T17193] lo speed is unknown, defaulting to 1000
[  522.920555][T17193] lo speed is unknown, defaulting to 1000
[  522.998980][ T7964] bridge_slave_1: left allmulticast mode
[  523.024010][ T7964] bridge_slave_1: left promiscuous mode
[  523.029815][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.056191][ T7964] bridge_slave_0: left allmulticast mode
[  523.062047][ T7964] bridge_slave_0: left promiscuous mode
[  523.064685][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3245'.
[  523.072402][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.223425][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  523.569229][ T7964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.581474][ T7964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.595249][ T7964] bond0 (unregistering): Released all slaves
[  523.622322][T17203] syz_tun: left allmulticast mode
[  523.695552][T17227] vxcan1 speed is unknown, defaulting to 1000
[  524.057935][   T30] audit: type=1800 audit(1747673461.462:12): pid=17242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3251" name="xffffffffffffffff00000000000000000000003" dev="tmpfs" ino=275 res=0 errno=0
[  524.153370][T17237] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.161060][T17237] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.274333][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  524.349544][ T5848] Bluetooth: hci2: command tx timeout
[  524.369863][T17237] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  524.392780][T17237] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  524.438829][T17237] hsr0: left promiscuous mode
[  524.537615][T17237] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.548242][T17237] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.563319][T17237] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.582563][T17237] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  524.730751][T17227] lo speed is unknown, defaulting to 1000
[  524.803765][T17227] lo speed is unknown, defaulting to 1000
[  524.897371][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'.
[  524.908406][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3255'.
[  525.203839][T17193] chnl_net:caif_netlink_parms(): no params data found
[  525.303330][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  525.478978][ T7964] hsr_slave_0: left promiscuous mode
[  525.521388][ T7964] hsr_slave_1: left promiscuous mode
[  525.536022][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  525.571441][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  525.603508][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  525.610935][T17285] netlink: 'syz.4.3260': attribute type 16 has an invalid length.
[  525.610957][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  525.623231][T17285] netlink: 'syz.4.3260': attribute type 17 has an invalid length.
[  525.694438][ T7964] veth1_macvtap: left promiscuous mode
[  525.700060][ T7964] veth0_macvtap: left promiscuous mode
[  525.706232][ T7964] veth1_vlan: left promiscuous mode
[  525.713416][ T7964] veth0_vlan: left promiscuous mode
[  526.355777][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  526.376140][ T7964] team0 (unregistering): Port device team_slave_1 removed
[  526.425675][ T5848] Bluetooth: hci2: command tx timeout
[  526.432548][ T7964] team0 (unregistering): Port device team_slave_0 removed
[  526.899446][T17285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  527.146068][T17193] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.173672][T17193] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.195958][T17193] bridge_slave_0: entered allmulticast mode
[  527.218898][T17193] bridge_slave_0: entered promiscuous mode
[  527.277375][T17193] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.291505][T17193] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.305348][T17193] bridge_slave_1: entered allmulticast mode
[  527.320118][T17193] bridge_slave_1: entered promiscuous mode
[  527.385149][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  527.540009][T17193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.572356][T17193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  527.710805][T17193] team0: Port device team_slave_0 added
[  527.726516][T17193] team0: Port device team_slave_1 added
[  527.831333][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3273'.
[  527.883786][T17193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  527.890783][T17193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.938240][T17193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.067411][T17193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.078282][T17193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.105811][T17193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  528.325737][T17352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3278'.
[  528.423947][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  528.504193][ T5848] Bluetooth: hci2: command tx timeout
[  528.589872][T17362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3281'.
[  528.766963][T17193] hsr_slave_0: entered promiscuous mode
[  528.783111][T17193] hsr_slave_1: entered promiscuous mode
[  528.796435][T17193] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  528.821105][T17193] Cannot create hsr debugfs directory
[  528.966402][T17373] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3284'.
[  529.011392][T17374] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3285'.
[  529.109233][T17376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3287'.
[  529.278103][T17389] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3290'.
[  529.306140][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'.
[  529.463361][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  529.668541][T17399] netlink: 'syz.2.3293': attribute type 4 has an invalid length.
[  529.710527][T17399] netlink: 'syz.2.3293': attribute type 4 has an invalid length.
[  529.824107][T17193] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  529.848867][T17193] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  529.887331][T17193] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  529.908217][T17193] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  530.057517][T17405] openvswitch: netlink: Message has 8 unknown bytes.
[  530.118678][T17193] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.161895][T17407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'.
[  530.177781][T17193] 8021q: adding VLAN 0 to HW filter on device team0
[  530.243716][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.250940][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  530.305558][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.312752][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.503744][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  530.588593][ T5848] Bluetooth: hci2: command tx timeout
[  530.623118][T17421] bond0: (slave wlan1): Releasing backup interface
[  530.723963][T17414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3298'.
[  530.882132][T17421] team0: Mode changed to "loadbalance"
[  530.978132][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3304'.
[  531.156058][T17442] vxcan1 speed is unknown, defaulting to 1000
[  531.333477][T17193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.401386][T17453] sctp: [Deprecated]: syz.1.3306 (pid 17453) Use of struct sctp_assoc_value in delayed_ack socket option.
[  531.401386][T17453] Use struct sctp_sack_info instead
[  531.543390][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  531.721361][T17460] pim6reg1: entered promiscuous mode
[  531.727476][T17460] pim6reg1: entered allmulticast mode
[  531.745202][T17193] veth0_vlan: entered promiscuous mode
[  531.901423][T17464] syzkaller0: left promiscuous mode
[  531.911089][T17464] syzkaller0: left allmulticast mode
[  531.958978][T17193] veth1_vlan: entered promiscuous mode
[  532.079433][T17193] veth0_macvtap: entered promiscuous mode
[  532.121770][T17442] lo speed is unknown, defaulting to 1000
[  532.125073][T17193] veth1_macvtap: entered promiscuous mode
[  532.157122][T17442] lo speed is unknown, defaulting to 1000
[  532.360808][T17193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.384340][T17490] Bluetooth: MGMT ver 1.23
[  532.437121][T17193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.482990][T17193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.549227][T17193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.563365][T17492] xt_CT: No such helper "pptp"
[  532.573593][T17193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.583803][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  532.603343][T17193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.651217][T17497] xt_hashlimit: size too large, truncated to 1048576
[  533.174594][T17504] sctp: [Deprecated]: syz.2.3321 (pid 17504) Use of struct sctp_assoc_value in delayed_ack socket option.
[  533.174594][T17504] Use struct sctp_sack_info instead
[  533.202354][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.219528][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.313864][T17505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  533.326590][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.356700][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.617559][T17514] __nla_validate_parse: 12 callbacks suppressed
[  533.617578][T17514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3325'.
[  533.632942][T17514] openvswitch: netlink: Missing key (keys=40, expected=80)
[  533.633423][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  533.688452][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3327'.
[  533.716289][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'.
[  533.738561][T17516] veth3: entered promiscuous mode
[  534.052343][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3332'.
[  534.063465][T17537] xt_hashlimit: size too large, truncated to 1048576
[  534.176324][   T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.558163][   T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.663852][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  534.717087][   T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.779704][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  534.791503][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  534.808803][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  534.818475][   T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.842352][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  534.850139][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  534.884867][T17540] vxcan1 speed is unknown, defaulting to 1000
[  535.013165][   T36] bridge_slave_1: left allmulticast mode
[  535.021548][   T36] bridge_slave_1: left promiscuous mode
[  535.050637][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.086413][   T36] bridge_slave_0: left allmulticast mode
[  535.092107][   T36] bridge_slave_0: left promiscuous mode
[  535.136458][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.241046][T17551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3334'.
[  535.516496][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  535.534035][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  535.544308][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  535.554621][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  535.562349][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  535.704813][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  535.864332][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  535.878952][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  535.889857][   T36] bond0 (unregistering): Released all slaves
[  535.906335][T17544] netlink: 'syz.4.3336': attribute type 11 has an invalid length.
[  535.922440][T17549] macsec1: entered promiscuous mode
[  535.929239][T17549] macsec1: entered allmulticast mode
[  535.934971][T17540] lo speed is unknown, defaulting to 1000
[  535.935203][T17554] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  535.964012][T17554] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  536.004128][T17540] lo speed is unknown, defaulting to 1000
[  536.175498][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3339'.
[  536.196052][T17569] FAULT_INJECTION: forcing a failure.
[  536.196052][T17569] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  536.196737][T17559] vxcan1 speed is unknown, defaulting to 1000
[  536.224147][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'.
[  536.255191][T17569] CPU: 1 UID: 0 PID: 17569 Comm: syz.4.3340 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  536.255219][T17569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  536.255230][T17569] Call Trace:
[  536.255237][T17569]  <TASK>
[  536.255246][T17569]  dump_stack_lvl+0x189/0x250
[  536.255279][T17569]  ? __pfx_dump_stack_lvl+0x10/0x10
[  536.255303][T17569]  ? __pfx__printk+0x10/0x10
[  536.255343][T17569]  should_fail_ex+0x414/0x560
[  536.255368][T17569]  _copy_to_user+0x31/0xb0
[  536.255395][T17569]  simple_read_from_buffer+0xe1/0x170
[  536.255423][T17569]  proc_fail_nth_read+0x1df/0x250
[  536.255451][T17569]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  536.255479][T17569]  ? rw_verify_area+0x258/0x650
[  536.255499][T17569]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  536.255524][T17569]  vfs_read+0x1fd/0x980
[  536.255551][T17569]  ? __pfx___mutex_lock+0x10/0x10
[  536.255572][T17569]  ? __pfx_vfs_read+0x10/0x10
[  536.255593][T17569]  ? __fget_files+0x2a/0x420
[  536.255620][T17569]  ? __fget_files+0x3a0/0x420
[  536.255641][T17569]  ? __fget_files+0x2a/0x420
[  536.255673][T17569]  ksys_read+0x145/0x250
[  536.255697][T17569]  ? __pfx_ksys_read+0x10/0x10
[  536.255720][T17569]  ? do_syscall_64+0xba/0x210
[  536.255745][T17569]  do_syscall_64+0xf6/0x210
[  536.255765][T17569]  ? clear_bhb_loop+0x60/0xb0
[  536.255788][T17569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.255804][T17569] RIP: 0033:0x7ff95c78d37c
[  536.255821][T17569] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  536.255836][T17569] RSP: 002b:00007ff95a5f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  536.255855][T17569] RAX: ffffffffffffffda RBX: 00007ff95c9b6080 RCX: 00007ff95c78d37c
[  536.255868][T17569] RDX: 000000000000000f RSI: 00007ff95a5f60a0 RDI: 0000000000000003
[  536.255880][T17569] RBP: 00007ff95a5f6090 R08: 0000000000000000 R09: 0000000000000000
[  536.255890][T17569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  536.255900][T17569] R13: 0000000000000000 R14: 00007ff95c9b6080 R15: 00007fffa291d208
[  536.255931][T17569]  </TASK>
[  536.743809][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  536.913638][ T5841] Bluetooth: hci1: command tx timeout
[  536.945562][T17585] netlink: 'syz.4.3345': attribute type 3 has an invalid length.
[  537.040487][T17589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'.
[  537.082589][T17589] xt_hashlimit: size too large, truncated to 1048576
[  537.138602][T17591] netlink: 'syz.4.3346': attribute type 1 has an invalid length.
[  537.191426][T17559] lo speed is unknown, defaulting to 1000
[  537.201276][T17591] netlink: 'syz.4.3346': attribute type 2 has an invalid length.
[  537.232658][T17594] netlink: 'syz.4.3346': attribute type 1 has an invalid length.
[  537.238681][T17540] chnl_net:caif_netlink_parms(): no params data found
[  537.280473][T17594] netlink: 'syz.4.3346': attribute type 2 has an invalid length.
[  537.317134][T17559] lo speed is unknown, defaulting to 1000
[  537.571002][T17598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3347'.
[  537.623416][ T5841] Bluetooth: hci2: command tx timeout
[  537.793342][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  537.861989][T17618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3351'.
[  537.907979][   T36] hsr_slave_0: left promiscuous mode
[  537.932668][   T36] hsr_slave_1: left promiscuous mode
[  537.932748][T17620] siw: device registration error -23
[  537.946964][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.982081][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  537.995181][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  538.023011][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  538.078074][   T36] veth1_macvtap: left promiscuous mode
[  538.087870][   T36] veth0_macvtap: left promiscuous mode
[  538.094740][   T36] veth1_vlan: left promiscuous mode
[  538.101447][T17629] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  538.123446][   T36] veth0_vlan: left promiscuous mode
[  538.766159][   T36] team0 (unregistering): Port device team_slave_1 removed
[  538.810250][   T36] team0 (unregistering): Port device team_slave_0 removed
[  538.829218][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  538.983493][ T5841] Bluetooth: hci1: command tx timeout
[  539.217189][T17641] __nla_validate_parse: 3 callbacks suppressed
[  539.217203][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'.
[  539.243042][T17641] IPv6: NLM_F_REPLACE set, but no existing node found!
[  539.262747][T17641] xt_hashlimit: size too large, truncated to 1048576
[  539.370739][T17540] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.385004][T17540] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.392347][T17540] bridge_slave_0: entered allmulticast mode
[  539.401401][T17540] bridge_slave_0: entered promiscuous mode
[  539.424288][T17540] bridge0: port 2(bridge_slave_1) entered blocking state
[  539.431458][T17540] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.441393][T17540] bridge_slave_1: entered allmulticast mode
[  539.449490][T17540] bridge_slave_1: entered promiscuous mode
[  539.538038][T17540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  539.568209][T17540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  539.705507][ T5841] Bluetooth: hci2: command tx timeout
[  539.719662][T17540] team0: Port device team_slave_0 added
[  539.749127][T17647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3358'.
[  539.766633][T17649] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  539.775353][T17540] team0: Port device team_slave_1 added
[  539.784877][T17647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3358'.
[  539.863358][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  539.941329][T17559] chnl_net:caif_netlink_parms(): no params data found
[  539.996459][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3361'.
[  540.041106][T17540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  540.083098][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  540.124290][T17540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  540.147524][T17540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  540.154819][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  540.181890][T17540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  540.252183][T17665] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3363'.
[  540.792966][T17540] hsr_slave_0: entered promiscuous mode
[  540.825953][T17540] hsr_slave_1: entered promiscuous mode
[  540.844300][T17540] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  540.851912][T17540] Cannot create hsr debugfs directory
[  540.903751][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  541.006575][T17559] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.020046][T17559] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.032008][T17559] bridge_slave_0: entered allmulticast mode
[  541.042556][T17559] bridge_slave_0: entered promiscuous mode
[  541.051435][T17559] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.059406][T17559] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.066625][ T5848] Bluetooth: hci1: command tx timeout
[  541.073456][T17559] bridge_slave_1: entered allmulticast mode
[  541.094093][T17559] bridge_slave_1: entered promiscuous mode
[  541.125480][T17690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3371'.
[  541.138490][T17690] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  541.247001][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3372'.
[  541.309815][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'.
[  541.321857][T17696] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3373'.
[  541.335952][T17559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.371562][T17559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.529653][T17559] team0: Port device team_slave_0 added
[  541.578579][T17559] team0: Port device team_slave_1 added
[  541.592769][T17702] vlan2: entered allmulticast mode
[  541.602159][T17702] bond0: entered allmulticast mode
[  541.607580][T17702] bond_slave_0: entered allmulticast mode
[  541.613989][T17702] bond_slave_1: entered allmulticast mode
[  541.782643][T17707] FAULT_INJECTION: forcing a failure.
[  541.782643][T17707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  541.796752][ T5848] Bluetooth: hci2: command tx timeout
[  541.809462][T17707] CPU: 0 UID: 0 PID: 17707 Comm: syz.1.3377 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  541.809489][T17707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  541.809501][T17707] Call Trace:
[  541.809509][T17707]  <TASK>
[  541.809518][T17707]  dump_stack_lvl+0x189/0x250
[  541.809545][T17707]  ? __lock_acquire+0xaac/0xd20
[  541.809573][T17707]  ? __pfx_dump_stack_lvl+0x10/0x10
[  541.809596][T17707]  ? __pfx__printk+0x10/0x10
[  541.809616][T17707]  ? __might_fault+0xb0/0x130
[  541.809651][T17707]  should_fail_ex+0x414/0x560
[  541.809677][T17707]  _copy_from_user+0x2d/0xb0
[  541.809702][T17707]  __sys_bpf+0x1ed/0x860
[  541.809728][T17707]  ? __pfx___sys_bpf+0x10/0x10
[  541.809764][T17707]  ? ksys_write+0x1f0/0x250
[  541.809799][T17707]  __x64_sys_bpf+0x7c/0x90
[  541.809820][T17707]  do_syscall_64+0xf6/0x210
[  541.809842][T17707]  ? clear_bhb_loop+0x60/0xb0
[  541.809864][T17707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.809882][T17707] RIP: 0033:0x7f102138e969
[  541.809905][T17707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  541.809921][T17707] RSP: 002b:00007f10222c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  541.809942][T17707] RAX: ffffffffffffffda RBX: 00007f10215b5fa0 RCX: 00007f102138e969
[  541.809955][T17707] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a
[  541.809967][T17707] RBP: 00007f10222c9090 R08: 0000000000000000 R09: 0000000000000000
[  541.809978][T17707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.809990][T17707] R13: 0000000000000000 R14: 00007f10215b5fa0 R15: 00007ffefd228af8
[  541.810021][T17707]  </TASK>
[  541.963736][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  542.000881][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  542.012090][T17559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.019795][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.046148][T17559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.061328][T17559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.068450][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.094868][T17559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.100020][T17710] netlink: 'syz.0.3378': attribute type 39 has an invalid length.
[  542.149055][T17699] vxcan1 speed is unknown, defaulting to 1000
[  542.154694][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'.
[  542.418905][T17559] hsr_slave_0: entered promiscuous mode
[  542.447541][T17559] hsr_slave_1: entered promiscuous mode
[  542.454456][T17559] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  542.462125][T17559] Cannot create hsr debugfs directory
[  542.764849][T17699] lo speed is unknown, defaulting to 1000
[  542.819739][T17699] lo speed is unknown, defaulting to 1000
[  542.918358][T17727] netlink: 'syz.0.3382': attribute type 1 has an invalid length.
[  542.983292][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  543.161388][ T5841] Bluetooth: hci1: command tx timeout
[  543.869696][ T5841] Bluetooth: hci2: command tx timeout
[  544.023271][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  544.641023][   T36] bond0 (unregistering): Released all slaves
[  544.655380][   T36] bond1 (unregistering): Released all slaves
[  544.673780][   T36] bond2 (unregistering): Released all slaves
[  544.848184][   T36] : left promiscuous mode
[  544.874155][T17738] __nla_validate_parse: 2 callbacks suppressed
[  544.874175][T17738] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3386'.
[  545.009423][T17740] syzkaller1: entered promiscuous mode
[  545.015198][T17740] syzkaller1: entered allmulticast mode
[  545.021918][   T36] tipc: Disabling bearer <udp:syz2>
[  545.030128][   T36] tipc: Left network mode
[  545.064158][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  545.073119][   T36] IPVS: stopping backup sync thread 15175 ...
[  545.110261][T17742] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  545.118727][T17742] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  545.322283][T17745] ipvlan1: entered promiscuous mode
[  545.623091][T17540] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  545.713296][T17540] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  545.749569][T17540] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  545.806375][T17540] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  545.978770][T17763] netlink: 'syz.0.3393': attribute type 5 has an invalid length.
[  546.008058][T17758] netlink: 'syz.1.3392': attribute type 1 has an invalid length.
[  546.113330][    C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  546.141366][T17763] ip6erspan0: entered promiscuous mode
[  546.344163][ T7964] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  546.347058][   T36] ------------[ cut here ]------------
[  546.360062][   T36] kernel BUG at net/8021q/vlan.c:99!
[  546.368469][T17768] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3395'.
[  546.394170][T17770] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3396'.
[  546.406358][   T36] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  546.412625][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc6-syzkaller-01215-ga8ae8a0e848e #0 PREEMPT(full) 
[  546.424610][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  546.434677][   T36] Workqueue: netns cleanup_net
[  546.439468][   T36] RIP: 0010:unregister_vlan_dev+0x4da/0x4e0
[  546.445377][   T36] Code: f7 e8 0a f7 8f f7 e9 e7 fe ff ff e8 90 fd 2d f7 48 c7 c7 a0 db 50 8f 4c 89 ee e8 41 08 5c fa e9 c4 fd ff ff e8 77 fd 2d f7 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  546.464994][   T36] RSP: 0018:ffffc90000ad77f8 EFLAGS: 00010293
[  546.471076][   T36] RAX: ffffffff8a91f479 RBX: ffff88807b6dc000 RCX: ffff8881412b1e00
[  546.479048][   T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  546.487002][   T36] RBP: 0000000000000001 R08: ffffffff8f2f7c27 R09: 1ffffffff1e5ef84
[  546.494968][   T36] R10: dffffc0000000000 R11: fffffbfff1e5ef85 R12: ffff88807f9a4000
[  546.502937][   T36] R13: ffffc90000ad7900 R14: ffff88807b6dc428 R15: 0000000000000000
[  546.510906][   T36] FS:  0000000000000000(0000) GS:ffff8881261b6000(0000) knlGS:0000000000000000
[  546.519832][   T36] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  546.526403][   T36] CR2: 0000000000000000 CR3: 000000005f742000 CR4: 00000000003526f0
[  546.534370][   T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  546.542326][   T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  546.550285][   T36] Call Trace:
[  546.553553][   T36]  <TASK>
[  546.556475][   T36]  ? __pfx_unregister_vlan_dev+0x10/0x10
[  546.562100][   T36]  default_device_exit_batch+0x766/0x890
[  546.567729][   T36]  ? __pfx___might_resched+0x10/0x10
[  546.573001][   T36]  ? __pfx_default_device_exit_batch+0x10/0x10
[  546.579146][   T36]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  546.584595][   T36]  ? net_generic+0x1e/0x240
[  546.589091][   T36]  ? __pfx_default_device_exit_batch+0x10/0x10
[  546.595233][   T36]  ops_undo_list+0x525/0x990
[  546.599816][   T36]  ? __pfx_ops_undo_list+0x10/0x10
[  546.604919][   T36]  cleanup_net+0x4c5/0x8a0
[  546.609325][   T36]  ? __pfx_cleanup_net+0x10/0x10
[  546.614249][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  546.619435][   T36]  ? process_scheduled_works+0x9ec/0x17a0
[  546.625142][   T36]  ? process_scheduled_works+0x9ec/0x17a0
[  546.630844][   T36]  process_scheduled_works+0xade/0x17a0
[  546.636383][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  546.642354][   T36]  worker_thread+0x8a0/0xda0
[  546.646937][   T36]  kthread+0x711/0x8a0
[  546.650994][   T36]  ? __pfx_worker_thread+0x10/0x10
[  546.656087][   T36]  ? __pfx_kthread+0x10/0x10
[  546.660666][   T36]  ? __pfx_kthread+0x10/0x10
[  546.665242][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  546.670431][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  546.675615][   T36]  ? __pfx_kthread+0x10/0x10
[  546.680190][   T36]  ret_from_fork+0x4b/0x80
[  546.684591][   T36]  ? __pfx_kthread+0x10/0x10
[  546.689170][   T36]  ret_from_fork_asm+0x1a/0x30
[  546.693928][   T36]  </TASK>
[  546.696942][   T36] Modules linked in:
[  546.702355][   T36] ---[ end trace 0000000000000000 ]---
[  546.733306][   T36] RIP: 0010:unregister_vlan_dev+0x4da/0x4e0
[  546.739306][   T36] Code: f7 e8 0a f7 8f f7 e9 e7 fe ff ff e8 90 fd 2d f7 48 c7 c7 a0 db 50 8f 4c 89 ee e8 41 08 5c fa e9 c4 fd ff ff e8 77 fd 2d f7 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  546.790822][   T36] RSP: 0018:ffffc90000ad77f8 EFLAGS: 00010293
[  546.797330][   T36] RAX: ffffffff8a91f479 RBX: ffff88807b6dc000 RCX: ffff8881412b1e00
[  546.806578][   T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  546.819552][   T36] RBP: 0000000000000001 R08: ffffffff8f2f7c27 R09: 1ffffffff1e5ef84
[  546.827962][   T36] R10: dffffc0000000000 R11: fffffbfff1e5ef85 R12: ffff88807f9a4000
[  546.835994][   T36] R13: ffffc90000ad7900 R14: ffff88807b6dc428 R15: 0000000000000000
[  546.844015][   T36] FS:  0000000000000000(0000) GS:ffff8881261b6000(0000) knlGS:0000000000000000
[  546.852949][   T36] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  546.861191][   T36] CR2: 0000001b2cc1eff8 CR3: 000000000dd38000 CR4: 00000000003526f0
[  546.869322][   T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  546.877506][   T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  546.886048][   T36] Kernel panic - not syncing: Fatal exception
[  546.892377][   T36] Kernel Offset: disabled
[  546.896692][   T36] Rebooting in 86400 seconds..