last executing test programs:

9.398087606s ago: executing program 4 (id=3137):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'syzkaller1\x00', @remote})

9.260794834s ago: executing program 4 (id=3139):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2d, 0x3, {0x0, 0x0, 0x12, r1, {0xd, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x8, 0x4, 0xf843, 0x0, 0xffff, 0x0, 0x0, 0x7111], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

8.848101002s ago: executing program 4 (id=3143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f00000001c0))
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}}, 0x811)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='memory.numa_stat\x00', 0x0, 0x0)
r6 = openat$cgroup_pressure(r4, &(0x7f00000003c0)='cpu.pressure\x00', 0x2, 0x0)
r7 = openat$cgroup_type(r5, &(0x7f0000000400), 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r9, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x840)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r7, &(0x7f00000005c0)={0x10000000})
r11 = accept(r0, &(0x7f0000000600)=@x25, &(0x7f0000000680)=0x80)
ioctl$sock_bt_hci(r11, 0x400448de, &(0x7f00000006c0)="65b42fc3d0f4c1b406a3b4fe035efd995131f8f56dba6ff1217c9b469ab946b2365d")
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x3, 0x0, r5, 0x6, '\x00', 0x0, r5, 0x4, 0x5, 0x1}, 0x50)
getsockname$packet(r11, &(0x7f0000000900)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, <r14=>0xffffffffffffffff}, 0x4)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x0, 0x5, 0x5, 0x1, 0x580, r5, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50)
r16 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r5}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x16, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x21eefb72, 0x63, &(0x7f0000000880)=""/99, 0x41100, 0x2, '\x00', r13, 0x25, r5, 0x8, &(0x7f0000000980)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0xd, 0x913f, 0xfffff198}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[r5, r5, r14, r15, r5, r16], &(0x7f0000000b40)=[{0x1, 0x3, 0x10, 0x7}, {0x2, 0x2, 0x9}, {0x2, 0x4, 0xd}], 0x10, 0x2}, 0x94)
sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r9, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffffff8, 0x3e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14010}, 0x20000000)
r17 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000d40)={<r18=>r4, 0xb, 0x800000000000000, 0x7ae4})
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000d80)={0xf, 0x8, 0x7, 0x0, 0x0, [{{r6}, 0x8}, {{r0}, 0x9}, {{r17}, 0x2}, {{r15}, 0x6}, {{r2}, 0xd}, {{r5}, 0x9}, {{r18}, 0x1}]})

8.201669998s ago: executing program 4 (id=3145):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
r1 = socket(0x28, 0x5, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0)

8.004279719s ago: executing program 4 (id=3148):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r2, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x10) (async)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200)=0xb, 0x4)

7.806539478s ago: executing program 4 (id=3150):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c0000000001810400000000141a000002000000240001801400018008000100e000000508000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000f6070016"], 0x6c}}, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x3a) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpid()
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000340)='FREEZING\x00', 0x9)
sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @loopback}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x007\x00\x00\x00\x00*'], 0x58}}], 0x1, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "040088beffff0200"}}}}}, 0x0)
r6 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000000)=0xffff) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r7, 0x0, 0x0}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r9=>0xffffffffffffffff})
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES64=r9], 0x1c}}, 0x0) (async)
syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffa2aaaaaaaabb88a800008100000088fb"], 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="9500"/16], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)

5.470621862s ago: executing program 0 (id=3172):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x8b)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="6003169e58f4f15fe1da4741cb69937ad2435bf42ee684e21583aad79fe3", 0x1e}, {&(0x7f00000014c0)="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", 0xf2a}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0xd, 0x1, 'threaded\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r6], 0x38}}, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x80)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x2b, 0x0, &(0x7f0000000100))
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

3.296814752s ago: executing program 0 (id=3178):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r1, 0x1ad72f7)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pipe(&(0x7f00000001c0))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)
listen(r0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x9, 0x4, "2b2d1d4a"}})
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10)

3.154896825s ago: executing program 1 (id=3181):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @func_proto]}}, 0x0, 0x3e}, 0x20)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

3.00984155s ago: executing program 1 (id=3183):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) (async)
r1 = socket$inet(0x2, 0x2, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a32000000001400000011"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa110180c200000381004e00000d000000003c0600007d62fdddaf2485a695a3080983d6f675cdcfbbc527e1a0dc2120d9ba059c2ad8b2b2b92114d236ef4105bcbe5cf5e03ae35f69cbcaecdf484451817a2866f0fd"], 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000200)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000fd17e5ffff080004008e562a8a63c9cc68edb8a7cd135de4e2000000d04e347f180000000000000000df9743b8efef62d6", 0x2a}], 0x1) (async)
syz_genetlink_get_family_id$team(&(0x7f00000002c0), r4)
r5 = socket$tipc(0x1e, 0x2, 0x0)
getpeername$tipc(r5, &(0x7f0000000380)=@name, &(0x7f0000000440)=0x10) (async)
writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r4) (async)
socket$netlink(0x10, 0x3, 0x7)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async)
syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @private=0xa010101, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_int(r8, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) (async)
getsockopt$inet_tcp_buf(r8, 0x6, 0x18, 0x0, &(0x7f0000000340)) (async)
close(0x3) (async)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)

2.81423567s ago: executing program 3 (id=3186):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x800) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, <r4=>0x0}, &(0x7f0000000080)=0xc)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) (async)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r6, 0x107, 0x18, 0x0, &(0x7f0000000240))
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in=@private=0xa010101, 0x4e24, 0x0, 0x4e22, 0xf29, 0x2, 0x20, 0x20, 0x73, 0x0, r4}, {0x7ff, 0x1, 0x1, 0xffff, 0x7, 0x2, 0x0, 0xbdbb}, {0x5ad, 0x6d, 0x4, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x4d2, 0x2b}, 0x0, @in6=@private2, 0x3504, 0x3, 0x1, 0x1, 0x1, 0x4, 0x84}}, 0xe8) (async)
vmsplice(r0, &(0x7f0000000740)=[{&(0x7f0000000380)="fd553173a7ec919022d40826b8308173bcee139bd8c98fc4ffbc830753f9ed3d204fd56ae6a2081720284d344750fbf87e4c792ddcb31e870d79ccfd899a0a21fc8e9d3aa148f14d376ac06af88f4ef0cb23cd9522142bcd4505dadb7feaa123ea805c54232ec111b9c2aad44b3216b8d2d104a354e19736e84e5ae22bfa8b093a43783412ef932e0092b53057e89432b7ddeec64fba4f8047b2d4fe0c8af6f50297e0d8a06b37035796d8f4d050a9735dc050c718ab17a3120d3cf55499deaf85974982df6ca091403185d861f7a7004961c4dbe89748ea33e1", 0xda}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f0000000480)="91c48265707f0ad27d0ac062e35f4d5d14ab683817bb40200052b0ff16c379bea05de92ff2a32f63e71baca8cc7b17124c1046f6740c6d15bed52e638bf79b002efc2d3588ac5968d86ec6fda0216f92c98a662664c205023d058a5a6f22e1360502b245218ccc84431b23cf02be78b42434034f4ec48f98a9db41cb9cfa5454d50a2d9e5e3811334abc6c6286bd5d1b948f541db859716090e5972ee3b5694293345462826446dbbced61f244e80b7f5d9758f33535891a46ad67c660359e0e314f7c52e17c42bb5c173c1fc5d63b24d7806b8cc63fad35b0c148d7a026e4ef241c2920f6a88a47", 0xe8}, {&(0x7f0000000580)="2704e5aa3bea8f23695f6f3f731b6e55d16ad007f990f789153f7fcce032f66a7dbfa4daf90cad3866711b2f02ff6d9c58f595d7d8c72a5f08703574c88445617a94a341c73133b0a43c83177f181ac5b7cbe99766a22725ec9b253b99f086a92e30aaaa0aaf2413a2d5e6ac68b8a630ff4e4177cb42c0472be840667ba57a1a933c0295b181f88159aed25b71c317bf68876f5754896940035c64885e578e8bfc274771a15f6dd8261f4eed9685297cfc295387898563e5f2e50c", 0xbb}, {&(0x7f0000000640)="72a8c6b958675b69e6164a21d1230f20c82db9d5e374a335", 0x18}], 0x6, 0x4) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000200)=0x4, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000040)={r8, 0x1, 0x9}, 0x8) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x3, 0x4)

2.683389944s ago: executing program 1 (id=3187):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1e, 0x81, 0x37}, {@rand_addr=0x64010105, 0x4e23, 0x0, 0xc3, 0x3, 0x12d5c}}, 0x44) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvtap0\x00', <r4=>0x0}) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x2, 0x801)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000980)=0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, <r8=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r8}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0)
r9 = getgid() (async)
r10 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r10, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) (async, rerun: 32)
r11 = getgid() (rerun: 32)
r12 = gettid()
r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r14 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r13}, 0x8)
close(r14)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r12, r14, 0x0, 0x0, 0x0}, 0x30)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000009c0)=<r15=>0x0) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, <r16=>0x0}, &(0x7f0000000a40)=0xc)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000400)="2db908181b7d39f6a3a9f14cefb4e41baf87c140751a4070196c134222222753559941c35396e5dfa2e87ac84ba807f6c58a44f79eeaa94d72e9647ab0fe6f3c5d986777c78be3932c312dc16da4ad1a52cbb6b5785df0ea6bdf470836b2541a118c6fcd59742a77d2c84c12f64c3187f6f4afaef8a9207f2927d054d9f5e1da98a65329783972f81b7a1e0184e86d05b3beb66c06a196", 0x97}, {&(0x7f00000004c0)="338b0c2e0d15f5730be0905065c057d1f441300874f6033e4596dbd9c6aafcdc72cc47fb0531e8b83a4c3f13fb074b530782bae5bafd3c4fe6da9b55f62f3ccd4e1ef3aa8633cc709305a755212e423779f734c3cbdf2741b8541b2fee47518fe2d8cbd572bb499f385a7e99efd786c571f05fa5d5aa5ba8af0342cc5a8420c1a8a38bc50587692e27abe9b658096c4b9e077bdfa12545cf28989685af8caceb41518d2a5d602a630254eb8a95f35fa4051bcfacba7b752709073e234ecf9a87ed467bd9b64de21e899e457c345ea65c53887e70d2", 0xd5}, {&(0x7f00000005c0)="2272a1fbf87d863ed8b3e617006ee77e0dd184e4f846b438087535a1e61824b36553b893c945b3c9b7d0351f6a99380f74a26288e963cc5e35fcd9c019c4cf62f513b52cb5781624ba224daa2b3e584c78deba7849497c73e87f3364039dfc9a904290e4647ac92aecde62b9bcc2498981ccfbbbddd1d7af95718c87ab4c017fb55393e14ae9828fce5c1f943907a1299d6970aebc1bea4aa0058f5547279c5fd90cbc", 0xa3}, {&(0x7f0000000680)="853c9ac22fd797aaebf5a505bf035e77568c777e01b7fa1a4da5078b2153645baf7128ba5fb5016574acda12aaba7270a875b14f33060e3a9a641ace34454919514e9455e50344e8357e3f24857819f1798cd4ddfa5ff466d5a35efeb985ed4dcaba9f75aba6c4285c6567760887db9a650006235bed0ec5f92b75acbc2e326b2f18b3b873a5de43b08c2a2cdf9c27f576e18b2575e33abc65eec5edff5372544214666cae2dda2b513f2f4e88e0a388416237b16f7e31223308fb7088daf872714dc7c275153f9b4350c4087b02", 0xce}, {&(0x7f0000000780)="e72c71c7d0bf708100f6876e92703ca70b3ba19f999ca0c00c5f45a4f9a2a1bb77d0fe65938b3d45e6c078433758b9f85c17e80095862fdfd6ab1820b78932218cbf55a8ead4d4fad1cf405bb5329a44a5aa6a2887ebc68be1aaafe04281a69228695d7e2a9528a62c01f6429902c3ff8a4d7c25a5c157dad2be9867231dcfdfc33ff3fbbaaea090e58182f0e0fc39b3222f5fa200e75e94fc4f48b5128f599969c21a554ccc09f784fefdfbb7138786a652944eb94e3829fb8061375121910f353482652e21536aba94684f2d6bc27d642707fe2b311cdbef8c0b6933b119b1969de5dd81f0ffce74b1d04a805d2ac61a151dc8", 0xf4}], 0x5, &(0x7f0000000a80)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r15, r16}}}], 0xc8, 0x40000}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x1) (async)
r17 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r17, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000280005000100070000000900020073797a31000000000c00078005001400750000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)

2.61311797s ago: executing program 1 (id=3188):
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000a80)={{r0}, "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"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
sendfile(r2, r2, 0x0, 0x1)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900442b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2)

2.278651748s ago: executing program 3 (id=3190):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008271643dffff86dd60ecff80004d1100fc000000000000000000000000000000ff02000000000000000000000000000100004e220018637729468a5a3f4328c67690780300000000f3d44d8fedc48a45c3769f8f00000000"], 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r3=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000000000000c000000040001804800018008000100", @ANYRES32=r2, @ANYBLOB="082731000600", @ANYRES32=r3, @ANYBLOB="08000300020000000800030002000000140002007663616e30000000000000000000000008000300000000000800030001000000"], 0x60}}, 0x0)
sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xf4, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xd6e, @mcast2, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x48}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x40001)

2.261061753s ago: executing program 2 (id=3191):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x208002, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

2.204033962s ago: executing program 0 (id=3192):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@expire={0x104, 0x18, 0x2, 0x0, 0x80000, {{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, {@in6=@mcast2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x400}, {}, 0x0, 0x400}}, [@mark={0xc}]}, 0x104}}, 0x0)
select(0x40, &(0x7f0000000000)={0x7, 0x200000000000, 0x0, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})

2.082682053s ago: executing program 2 (id=3193):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x80000001}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x71}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.079645501s ago: executing program 0 (id=3194):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
listen(r1, 0x0)
r2 = socket(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="81c7e24fa5dde3a573b05fbf8fcae40302742cd6a4a1be390c5f8f8a66a48d629b62377417e5f7eeaa413affc0e2f552373804a4e52a18e998a88061ce183f8d5fce26c8ecdb2e76e573e084a9e8a479", 0x0, 0x0, 0xa}, 0x50)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x46c, 0x24, 0x100, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x43c, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0xc295}, @TCA_GRED_LIMIT={0x8, 0x5, 0x1000}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x5}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x46c}}, 0x0)
sendto$packet(r4, &(0x7f0000000580)='\x00', 0x1, 0x400c005, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r3, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r2}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r3, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r2}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r7, &(0x7f0000000080)="034011a716c5", 0x6, 0x40880, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) (async)
sendto$inet(r7, &(0x7f0000000080)="034011a716c5", 0x6, 0x40880, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000001c40)=@bpq0, 0x10) (async)
setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000001c40)=@bpq0, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

1.989422107s ago: executing program 2 (id=3195):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.882734319s ago: executing program 3 (id=3196):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r9=>0x0})
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_TIOCOUTQ(r10, 0x5411, &(0x7f0000000200)) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x0)

1.766503788s ago: executing program 2 (id=3197):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r1, 0x104, 0x2, &(0x7f0000000100)=0xffffffff, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{0x0}], 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa080045000014000000000002907800000000f60000011100907800000000"], 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb2, 0x5}, 0xc)
connect$bt_l2cap(r5, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7020e7c186eef4455f00", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r9, @ANYRES32=r10, @ANYBLOB="d98d010008200200200012800e0001006970366772657461700000000c000280060010004e240000"], 0x40}}, 0x40084)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020603000000000000000000040000000c00078008000640000000060900020073797a32000000000500040000000000050005000a000000050001000600000011000300686173683a6e65742c6e657400000000"], 0x58}}, 0x80)
r12 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r12, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000520001000200edcaf499"], 0x1c}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.659666492s ago: executing program 0 (id=3198):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000023b800000000000000000000850000006100000018410000000000000000000000950000000000000000000034038e36b50475a7e7e1d3c3700f43a9f8cfa6288f5562d4a213a57696a343217692dd2de71a9fe996cff6d5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xd5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x28, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', <r6=>r3, 0x20, 0x10, 0x4, 0xffff, {{0x3c, 0x4, 0x0, 0x3a, 0xf0, 0x65, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@generic={0x44, 0xf, "10d9d1a84e80a0850d4a3f7c4f"}, @timestamp={0x44, 0x14, 0x6f, 0x0, 0x8, [0xd, 0xb, 0x2, 0xffff0000]}, @lsrr={0x83, 0x1b, 0x67, [@local, @broadcast, @multicast2, @remote, @remote, @multicast1]}, @ssrr={0x89, 0x23, 0x86, [@local, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @multicast1, @broadcast]}, @end, @lsrr={0x83, 0x2b, 0x16, [@dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0xd8, 0x1, 0x5, [{@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x3}, {@remote, 0xe}, {@local, 0x956}, {@remote, 0x1}, {@empty, 0x80}, {@empty, 0x1}]}, @generic={0x88, 0x11, "68af89d01ced2d17f44304e8e99c52"}]}}}}})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x40040)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=<r9=>r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0, @ANYBLOB="08001c"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r8, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x706d9}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x12)
sendmsg$nl_route_sched(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000940)=ANY=[@ANYBLOB="f4060000", @ANYRESDEC=r12, @ANYRES16=r1, @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001", @ANYRES64=r6, @ANYRES64=r12, @ANYRES64=r9, @ANYRES8=r5], 0x6f4}, 0x1, 0x0, 0x0, 0x40001}, 0x40d1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x0)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r13, &(0x7f00000000c0)={0x0, 0x60, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x80}, 0x8000)

1.540108867s ago: executing program 3 (id=3199):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004b00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32, @ANYBLOB="140004006e736376663000000000000101000000080005"], 0x50}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local}}}}}}}, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, @random="5788a3a2cad7"}, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000240007800c00040000000000000000000c00"], 0x38}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000006110200000000000950000000000000066be9d7439e9195f3fb9d82db58deb9312f3a21effc030e86166879a8b6605932ea06230fb511fe282b52eda7c0416c4a3f6cde1d4fa106bc1a6aa09ebb9fe8400a8efdeefe9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90)

1.327095248s ago: executing program 1 (id=3200):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x32, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}]}, 0x28}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10a02, 0x0) (async)
unshare(0x20000400) (async)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, 0x0, 0x48)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async)
r8 = socket$kcm(0x2, 0x1, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x4a, &(0x7f0000000040), 0x4) (async)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}}, 0x0)

1.319142497s ago: executing program 3 (id=3201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x200, 0x70bd26, 0x11, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc1)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

1.241206944s ago: executing program 3 (id=3202):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r1], 0x50)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r3, &(0x7f0000000240)=[{&(0x7f0000000380)="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", 0x1000}], 0x1)
write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551075c0165ff", 0xd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000040)={0x0}, 0x10) (async)
syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x2, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @empty, {[@timestamp_prespec={0x44, 0x24, 0x6a, 0x3, 0xf, [{@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f37}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x6}]}, @timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x5, [{@multicast2}]}]}}}}}}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000001380)={0x2b4, r6, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xcc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9158}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2aa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x1b0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x524}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x553e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3e}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x717}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x765e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa0000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b4b}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20)

1.062850802s ago: executing program 2 (id=3203):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48885, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

973.399372ms ago: executing program 2 (id=3204):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x8}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7)
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r11, 0x2, 0xb9c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48005}, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40004)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x90)
sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="87a23ab535620ca5ad6c9d9e7d4d2329890fb48ddd5ab6d60191e2300b67a35e217e0eee7cd479cf02fb8fba7a696b3fc7364d70d9451366dab6df12b79f6915622dfba478c2709ed5ee71cdb1431f7afd1fa42a97b5d38ebc6f34", @ANYRES16=r4, @ANYBLOB="010200000000000000000300260008000400ac35000114000600736974300000000000000000000000001400070000000000000000000000ffffac1414000800050000000000"], 0x4c}, 0x8, 0x3000000000002}, 0x0)

396.107µs ago: executing program 0 (id=3205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000002c0)={0x1d, r5, 0x2, {0x0, 0xff, 0x6}, 0xff}, 0x18)
sendmsg$sock(r4, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)="d70843", 0x3}], 0x1}, 0x4000040)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
r6 = accept4(r2, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x24004800)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffe8ff08004500091c00000000fb02907800000000e000030000009078006400d2"], 0x0)
recvmmsg(r6, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0xa}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x4000010)
r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000300)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000180))

0s ago: executing program 1 (id=3206):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40080) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x80)

kernel console output (not intermixed with test programs):

30838][T11652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1663'.
[  416.860993][T11652] netlink: 'syz.0.1663': attribute type 64 has an invalid length.
[  416.871935][T11652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1663'.
[  417.581468][T11688] 8021q: VLANs not supported on ip6tnl0
[  417.611761][T11690] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  417.628967][T11688] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  417.662922][T11694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'.
[  417.891013][T11711] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1684'.
[  417.941741][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1685'.
[  418.015464][T11716] 8021q: adding VLAN 0 to HW filter on device bond7
[  418.027955][T11719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1686'.
[  418.053800][T11720] veth0_to_bond: left promiscuous mode
[  418.059340][T11720] veth0_to_bond: left allmulticast mode
[  418.111565][T11720] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  418.177955][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'.
[  418.297940][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'.
[  418.361143][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1689'.
[  418.386664][T11728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1689'.
[  419.520179][T11808] netlink: 'syz.1.1710': attribute type 29 has an invalid length.
[  419.693591][T11814] openvswitch: netlink: IP tunnel dst address not specified
[  419.753679][T11815] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  435.713846][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  440.197776][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  440.684515][ T1142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  441.201467][T11824] __nla_validate_parse: 7 callbacks suppressed
[  441.201489][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'.
[  441.238067][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1715'.
[  441.254938][T11829] lo: entered allmulticast mode
[  441.263735][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'.
[  441.272648][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1715'.
[  441.288383][T11829] gre0: entered allmulticast mode
[  441.348304][T11829] gretap0: entered allmulticast mode
[  441.375415][T11829] erspan0: entered allmulticast mode
[  441.411101][T11829] ip_vti0: entered allmulticast mode
[  441.427656][T11829] ip6_vti0: entered allmulticast mode
[  441.450669][T11829] sit0: entered allmulticast mode
[  441.462448][T11829] ip6tnl0: entered allmulticast mode
[  441.481537][T11829] ip6gre0: entered allmulticast mode
[  441.498568][T11829] ip6gretap0: entered allmulticast mode
[  441.513064][T11829] bridge0: entered allmulticast mode
[  441.523049][T11829] vcan0: entered allmulticast mode
[  441.532410][T11829] bond0: entered allmulticast mode
[  441.537689][T11829] bond_slave_0: entered allmulticast mode
[  441.544736][T11829] bond_slave_1: entered allmulticast mode
[  441.550490][T11829] bridge_slave_1: entered allmulticast mode
[  441.563123][T11829] team0: entered allmulticast mode
[  441.572897][T11829] team_slave_0: entered allmulticast mode
[  441.579029][T11829] team_slave_1: entered allmulticast mode
[  441.591640][T11829] nlmon0: entered allmulticast mode
[  441.602883][T11829] caif0: entered allmulticast mode
[  441.617264][T11829] vxcan0: entered allmulticast mode
[  441.625796][T11829] vxcan1: entered allmulticast mode
[  441.634585][T11829] veth0: entered allmulticast mode
[  441.645745][T11829] veth1: entered allmulticast mode
[  441.656325][T11829] wg0: entered allmulticast mode
[  441.666481][T11829] wg1: entered allmulticast mode
[  441.678730][T11829] wg2: entered allmulticast mode
[  441.687976][T11829] veth0_to_bridge: entered allmulticast mode
[  441.703047][T11829] veth1_to_bridge: entered allmulticast mode
[  441.717480][T11829] veth0_to_bond: entered allmulticast mode
[  441.727052][T11829] veth1_to_bond: entered allmulticast mode
[  441.741963][T11829] veth0_to_team: entered allmulticast mode
[  441.755221][T11829] veth1_to_team: entered allmulticast mode
[  441.770357][T11829] veth0_to_batadv: entered allmulticast mode
[  441.780234][T11829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  441.788845][T11829] batadv_slave_0: entered allmulticast mode
[  441.800876][T11829] veth1_to_batadv: entered allmulticast mode
[  441.811861][T11829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  441.820623][T11829] batadv_slave_1: entered allmulticast mode
[  441.829958][T11829] xfrm0: entered allmulticast mode
[  441.839908][T11829] veth0_to_hsr: entered allmulticast mode
[  441.850540][T11829] hsr_slave_0: entered allmulticast mode
[  441.861223][T11829] veth1_to_hsr: entered allmulticast mode
[  441.872235][T11829] hsr_slave_1: entered allmulticast mode
[  441.881516][T11829] hsr0: entered allmulticast mode
[  441.891470][T11829] veth1_virt_wifi: entered allmulticast mode
[  441.901128][T11829] veth0_virt_wifi: entered allmulticast mode
[  441.911827][T11829] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  441.923247][T11829] veth0_vlan: entered allmulticast mode
[  441.944022][T11829] vlan0: entered allmulticast mode
[  441.949417][T11829] vlan1: entered allmulticast mode
[  441.961929][T11829] macvlan1: entered allmulticast mode
[  441.971473][T11829] ipvlan0: entered allmulticast mode
[  441.977565][T11829] ipvlan1: entered allmulticast mode
[  441.984787][T11829] veth1_macvtap: entered allmulticast mode
[  441.995307][T11829] veth0_macvtap: entered allmulticast mode
[  442.007580][T11829] macvtap0: entered allmulticast mode
[  442.018560][T11829] macsec0: entered allmulticast mode
[  442.026087][T11829] geneve0: entered allmulticast mode
[  442.036237][T11829] geneve1: entered allmulticast mode
[  442.046928][T11829] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  442.059628][T11829] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[  442.071154][T11829] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  442.082833][T11829] netdevsim netdevsim4 netdevsim3: entered allmulticast mode
[  442.102267][T11829] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  442.120735][T11829] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  442.131402][T11829] bond1: entered allmulticast mode
[  442.137557][T11829] ipvlan2: entered allmulticast mode
[  442.148040][T11829] veth2: entered allmulticast mode
[  442.155786][T11829] veth3: entered allmulticast mode
[  442.161244][T11829] team1: left promiscuous mode
[  442.167808][T11829] bond2: entered allmulticast mode
[  442.174808][T11829] sit1: entered allmulticast mode
[  442.206099][T11829] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode
[  442.213552][T11829] bond3: entered allmulticast mode
[  442.220362][T11829] bridge1: entered allmulticast mode
[  442.238219][T11829] sit2: entered allmulticast mode
[  442.271556][T11829] vxlan0: entered allmulticast mode
[  442.279694][T11829] macsec1: entered allmulticast mode
[  442.286926][T11829] bridge2: entered allmulticast mode
[  442.295356][T11829] ip6gre1: entered allmulticast mode
[  442.300760][T11829] syztnl1: entered allmulticast mode
[  442.306676][T11829] ipip0: entered allmulticast mode
[  442.311932][T11829] macvlan2: entered allmulticast mode
[  442.318213][T11829] ipip1: entered allmulticast mode
[  442.325959][T11829] bridge3: entered allmulticast mode
[  442.333741][T11829] macvlan3: entered allmulticast mode
[  442.339298][T11829] ip6tnl1: entered allmulticast mode
[  442.346433][T11829] vxlan1: entered allmulticast mode
[  442.354085][T11829] bond4: left promiscuous mode
[  442.359842][T11829] bond5: entered allmulticast mode
[  442.368558][T11829] gretap1: entered allmulticast mode
[  442.375985][T11829] gre1: entered allmulticast mode
[  442.384768][T11829] bond6: entered allmulticast mode
[  442.389919][T11829] geneve2: entered allmulticast mode
[  442.399345][T11829] geneve3: left promiscuous mode
[  442.411028][T11829] bridge4: entered allmulticast mode
[  442.420119][T11829] veth4: entered allmulticast mode
[  442.426578][T11829] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  442.435318][T11829] geneve4: entered allmulticast mode
[  442.442709][T11829] bond7: entered allmulticast mode
[  442.512654][ T6715] wg1 speed is unknown, defaulting to 1000
[  442.522465][   T59] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.540439][ T6715] syz2: Port: 1 Link DOWN
[  442.547498][   T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.562073][   T59] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  442.572133][   T59] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.608179][   T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.623517][   T59] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  442.689994][   T59] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.733093][   T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.767235][   T59] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  442.792951][   T59] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  442.807332][   T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  442.825462][T11862] netlink: 'syz.2.1727': attribute type 1 has an invalid length.
[  442.842896][   T59] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  443.281622][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'.
[  443.439454][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1740'.
[  443.558312][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'.
[  443.802820][T11915] netlink: 'syz.4.1744': attribute type 10 has an invalid length.
[  443.821398][T11915] veth1_macvtap: left allmulticast mode
[  443.833002][T11915] veth1_macvtap: left promiscuous mode
[  443.841751][T11915] team0: Device veth1_macvtap failed to register rx_handler
[  443.869025][T11919] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1746'.
[  443.870093][T11911] netlink: 'syz.4.1744': attribute type 2 has an invalid length.
[  443.894959][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'.
[  443.931799][T11911] netlink: 'syz.4.1744': attribute type 2 has an invalid length.
[  443.955694][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'.
[  444.501004][T11948] netlink: 'syz.2.1754': attribute type 2 has an invalid length.
[  444.530562][T11948] netlink: 'syz.2.1754': attribute type 1 has an invalid length.
[  444.550990][T11954] bridge0: left allmulticast mode
[  444.556045][T11948] netlink: 'syz.2.1754': attribute type 2 has an invalid length.
[  445.109055][T11985] netlink: 'syz.0.1764': attribute type 3 has an invalid length.
[  445.282724][T12001] IPv6: NLM_F_CREATE should be specified when creating new route
[  445.650460][T12020] IPv6: sit2: Disabled Multicast RS
[  445.669770][T12020] sit2: entered allmulticast mode
[  446.052258][T12033] wg1 speed is unknown, defaulting to 1000
[  446.248347][T12056] netlink: 'syz.1.1780': attribute type 11 has an invalid length.
[  446.274990][T12058] siw: device registration error -23
[  446.430012][T12070] __nla_validate_parse: 10 callbacks suppressed
[  446.430035][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'.
[  446.553647][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1784'.
[  446.881174][T12090] "syz.2.1788" (12090) uses obsolete ecb(arc4) skcipher
[  447.017353][T12097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.085328][T12102] wg1 speed is unknown, defaulting to 1000
[  447.262021][T12111] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  447.308593][T12111] netlink: 'syz.2.1796': attribute type 2 has an invalid length.
[  448.125178][T12118] infiniband syz0: set down
[  448.145318][T12118] infiniband syz0: added ipvlan1
[  448.155977][T12155] syzkaller0: entered promiscuous mode
[  448.162203][T12155] syzkaller0: entered allmulticast mode
[  448.228805][T12118] RDS/IB: syz0: added
[  448.236494][T12118] smc: adding ib device syz0 with port count 1
[  448.243072][T12118] smc:    ib device syz0 port 1 has pnetid 
[  448.252382][T12161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1812'.
[  448.293419][T12161] C: entered allmulticast mode
[  448.490221][T12166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'.
[  448.518433][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'.
[  448.542620][T12167] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  448.645837][T12166] validate_nla: 2 callbacks suppressed
[  448.645861][T12166] netlink: 'syz.3.1814': attribute type 18 has an invalid length.
[  448.702533][T12175] netlink: 'syz.1.1817': attribute type 5 has an invalid length.
[  448.835470][T12178] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1818'.
[  449.206264][T12194] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.1822'.
[  449.281513][T12197] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1823'.
[  449.471116][T12201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1825'.
[  449.656279][T12209] netlink: 'syz.3.1826': attribute type 12 has an invalid length.
[  450.035260][   T13] wlan1: Trigger new scan to find an IBSS to join
[  450.197436][T12229] netlink: 'syz.1.1834': attribute type 8 has an invalid length.
[  450.715021][T12259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1844'.
[  450.826375][T12265] sctp: [Deprecated]: syz.3.1845 (pid 12265) Use of struct sctp_assoc_value in delayed_ack socket option.
[  450.826375][T12265] Use struct sctp_sack_info instead
[  451.081682][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027471000: rx timeout, send abort
[  451.091695][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027471000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  451.106425][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805a3af400: rx timeout, send abort
[  451.116565][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a3af400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  451.491440][T12284] team0 (unregistering): Port device team_slave_0 removed
[  451.501975][T12284] team0 (unregistering): Port device team_slave_1 removed
[  451.750677][T12314] openvswitch: netlink: Flow actions attr not present in new flow.
[  452.028747][T12322] mac80211_hwsim hwsim17 syzkaller0: Caught tx_queue_len zero misconfig
[  452.046047][T12328] __nla_validate_parse: 2 callbacks suppressed
[  452.046066][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'.
[  452.071232][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'.
[  452.320479][T12343] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1870'.
[  452.363526][T12343] openvswitch: netlink: Actions may not be safe on all matching packets
[  452.386719][T12343] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1870'.
[  452.400169][T12341] vlan4: entered promiscuous mode
[  452.406265][T12341] bond0: entered promiscuous mode
[  452.412671][T12341] bond_slave_0: entered promiscuous mode
[  452.421110][T12341] bond_slave_1: entered promiscuous mode
[  452.438636][T12341] dummy0: entered promiscuous mode
[  452.448799][T12350] block nbd1: not configured, cannot reconfigure
[  452.499298][T12350] netlink: 'syz.1.1873': attribute type 83 has an invalid length.
[  452.623533][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'.
[  452.647750][T12354] bridge_slave_0: left promiscuous mode
[  452.659768][T12354] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.738200][T12368] netlink: 'syz.0.1878': attribute type 1 has an invalid length.
[  452.771085][T12373] openvswitch: netlink: Unknown key attributes 2
[  452.931727][T12380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'.
[  452.943585][T12379] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.956352][T12379] syzkaller0: entered promiscuous mode
[  452.961990][T12379] syzkaller0: entered allmulticast mode
[  452.979648][T12379] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  452.990845][T12380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'.
[  453.074519][ T1168] wlan1: Trigger new scan to find an IBSS to join
[  453.182313][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1883'.
[  453.184207][T12379] tipc: Resetting bearer <eth:syzkaller0>
[  453.193427][T12386] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1883'.
[  453.247814][T12378] tipc: Resetting bearer <eth:syzkaller0>
[  453.327163][T12378] tipc: Disabling bearer <eth:syzkaller0>
[  453.379796][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1885'.
[  453.415543][T12399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  453.423828][T12399] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode
[  453.431469][T12399] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode
[  453.457126][T12399] tipc: Resetting bearer <eth:syzkaller0>
[  453.515434][T12399] tipc: Resetting bearer <eth:syzkaller0>
[  453.532921][T12399] netlink: 'syz.3.1886': attribute type 1 has an invalid length.
[  453.577329][   T13] tipc: Resetting bearer <eth:syzkaller0>
[  453.744578][T12425] wg1 speed is unknown, defaulting to 1000
[  454.130638][T12440] netlink: 'syz.3.1896': attribute type 12 has an invalid length.
[  454.416860][ T6707] tipc: Node number set to 90673384
[  454.452243][T12445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  454.476971][T12450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  454.492595][T12454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  454.756287][T12468] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  454.790053][T12468] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  455.006743][T12478] netlink: 'syz.2.1907': attribute type 83 has an invalid length.
[  455.463926][T12489] team0 (unregistering): Port device team_slave_0 removed
[  455.472968][T12489] team0 (unregistering): Port device team_slave_1 removed
[  455.514729][T12495] tipc: Enabled bearer <udp:syz0>, priority 10
[  455.679569][T12503] 8021q: VLANs not supported on lo
[  455.816948][T12505] 8021q: adding VLAN 0 to HW filter on device bond1
[  455.993234][T12505] 8021q: adding VLAN 0 to HW filter on device bond2
[  456.034352][ T3528] wlan1: Trigger new scan to find an IBSS to join
[  456.127209][   T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  456.150599][T12517] dvmrp0: entered allmulticast mode
[  456.157720][T12531] netlink: 'syz.4.1920': attribute type 12 has an invalid length.
[  456.250063][   T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  456.287190][   T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  456.300823][   T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  456.478770][T12542] netlink: 'syz.3.1924': attribute type 1 has an invalid length.
[  456.582014][T12546] bond4: (slave gretap1): making interface the new active one
[  456.592027][T12546] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  456.727428][T12558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.874427][T12564] netlink: 'syz.4.1932': attribute type 12 has an invalid length.
[  456.947489][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.276400][T12588] __nla_validate_parse: 3 callbacks suppressed
[  457.276423][T12588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1941'.
[  457.448240][T12601] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1940'.
[  457.493565][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1942'.
[  457.923703][T12621] netlink: 'syz.2.1949': attribute type 11 has an invalid length.
[  457.940773][T12621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1949'.
[  457.959107][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1948'.
[  458.155750][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1952'.
[  458.288936][T12645] netlink: 'syz.2.1956': attribute type 15 has an invalid length.
[  458.312718][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'.
[  458.384961][ T1142] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  458.398827][T12645] netlink: 'syz.2.1956': attribute type 15 has an invalid length.
[  458.421505][ T1142] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  458.423510][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'.
[  458.460874][ T1142] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  458.486537][T12660] netlink: 'syz.4.1958': attribute type 12 has an invalid length.
[  458.509006][   T36] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  458.801996][T12689] geneve2: entered promiscuous mode
[  458.832538][T12689] geneve2: entered allmulticast mode
[  458.861339][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.906779][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.940428][T12711] openvswitch: netlink: IPv4 tun info is not correct
[  458.948471][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'.
[  458.962078][T12710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1964'.
[  458.984217][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  459.005431][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.030571][T12717] netlink: 'syz.2.1967': attribute type 1 has an invalid length.
[  459.138677][T12723] netlink: 'syz.2.1970': attribute type 1 has an invalid length.
[  459.162528][T12726] bridge: RTM_NEWNEIGH with invalid ether address
[  459.171515][T12726] bridge: RTM_NEWNEIGH with invalid ether address
[  459.184283][T12726] netlink: 'syz.0.1971': attribute type 12 has an invalid length.
[  459.206414][T12723] netlink: 'syz.2.1970': attribute type 2 has an invalid length.
[  459.282656][T12733] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  459.454244][T12740] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  459.701843][T12759] netlink: 'syz.0.1978': attribute type 8 has an invalid length.
[  459.760397][T12759] netlink: 'syz.0.1978': attribute type 8 has an invalid length.
[  459.776691][T12759] netlink: 'syz.0.1978': attribute type 8 has an invalid length.
[  459.808099][T12759] netlink: 'syz.0.1978': attribute type 8 has an invalid length.
[  460.737627][T12821] ip6tnl0: left allmulticast mode
[  461.126923][T12834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.185471][T12834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  461.208925][T12834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.328613][T12834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.348415][T12834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  461.368446][T12834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.466270][T12834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.480456][T12834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  461.521055][T12834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.622383][T12834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  461.634920][T12834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  461.653948][T12834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.797023][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  461.815857][T12872] batman_adv: batadv0: Removing interface: batadv_slave_0
[  461.838161][T12872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  461.855733][T12872] batman_adv: batadv0: Removing interface: batadv_slave_1
[  461.977481][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  461.994566][   T13] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0
[  462.008429][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.046633][ T3528] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  462.074877][ T3528] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0
[  462.099967][ T3528] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.109248][T12885] netlink: 'syz.1.2019': attribute type 1 has an invalid length.
[  462.170318][ T3528] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  462.186943][ T3528] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0
[  462.197078][ T3528] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.240761][ T1142] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  462.274866][ T1142] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0
[  462.283094][ T1142] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.423023][T12899] netlink: 'syz.1.2023': attribute type 7 has an invalid length.
[  462.424140][T12898] __nla_validate_parse: 14 callbacks suppressed
[  462.424157][T12898] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2022'.
[  462.455533][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2024'.
[  462.654932][T12908] wg1 speed is unknown, defaulting to 1000
[  462.794342][T12920] openvswitch: netlink: Unknown key attributes 2
[  462.819264][T12920] netlink: 'syz.0.2029': attribute type 4 has an invalid length.
[  462.904847][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'.
[  462.941415][T12924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  462.995160][T12924] syzkaller0: entered promiscuous mode
[  463.023439][T12924] syzkaller0: entered allmulticast mode
[  463.046172][T12933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.099706][T12924] tipc: Resetting bearer <eth:syzkaller0>
[  463.154562][T12922] tipc: Resetting bearer <eth:syzkaller0>
[  463.192255][T12922] tipc: Disabling bearer <eth:syzkaller0>
[  463.207534][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2036'.
[  463.388072][T12951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2038'.
[  463.406086][T12951] batadv_slave_0: Caught tx_queue_len zero misconfig
[  463.692066][T12964] geneve3: entered promiscuous mode
[  463.740657][T12960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  463.810392][T12960] syzkaller0: entered promiscuous mode
[  463.820008][T12960] syzkaller0: entered allmulticast mode
[  463.834872][T12960] tipc: Resetting bearer <eth:syzkaller0>
[  463.869197][T12977] sctp: [Deprecated]: syz.3.2044 (pid 12977) Use of int in max_burst socket option deprecated.
[  463.869197][T12977] Use struct sctp_assoc_value instead
[  465.567390][T12965] tipc: Resetting bearer <eth:syzkaller0>
[  465.575721][T12979] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  465.577054][T12969] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  465.618500][T12983] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  465.646746][T12982] veth9: entered promiscuous mode
[  465.686141][   T59] tipc: Resetting bearer <eth:syzkaller0>
[  465.698435][T12959] tipc: Resetting bearer <eth:syzkaller0>
[  465.767077][T12959] tipc: Disabling bearer <eth:syzkaller0>
[  465.906796][T12999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.932638][T12999] tipc: Resetting bearer <eth:syzkaller0>
[  466.032767][T13004] IPv6: sit1: Disabled Multicast RS
[  466.056080][T13004] sit1: entered allmulticast mode
[  466.166768][T12998] tipc: Disabling bearer <eth:syzkaller0>
[  466.474510][T13031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2058'.
[  466.485348][T13041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2061'.
[  466.498301][T13030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2058'.
[  466.664800][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'.
[  467.034525][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2071'.
[  467.298953][T13092] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  467.638807][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2078'.
[  467.676089][T13109] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2078'.
[  467.685742][T13104] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2078'.
[  467.835771][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2080'.
[  467.920802][T13117] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2082'.
[  468.041407][T13122] bond0: (slave bond_slave_0): Releasing backup interface
[  468.104551][T13122] bond0: (slave bond_slave_1): Releasing backup interface
[  468.110084][T13129] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2086'.
[  468.166006][T13122] team0: Port device team_slave_0 removed
[  468.229278][T13122] team0: Port device team_slave_1 removed
[  468.274697][T13137] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2088'.
[  468.314490][T13122] team0: Port device veth1_macvtap removed
[  468.347010][T13122] bond0: (slave wlan1): Releasing backup interface
[  468.414752][T13122] bond1: (slave gretap1): Releasing active interface
[  468.456519][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'.
[  468.700184][T13136] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2087'.
[  469.083132][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2096'.
[  469.119204][T13160] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  469.299786][T13177] validate_nla: 1 callbacks suppressed
[  469.299807][T13177] netlink: 'syz.0.2099': attribute type 1 has an invalid length.
[  470.256540][T13242] bridge: RTM_NEWNEIGH with invalid ether address
[  471.178113][T13293] netlink: 'syz.3.2133': attribute type 1 has an invalid length.
[  471.308675][T13302] netlink: 'syz.1.2139': attribute type 10 has an invalid length.
[  471.318590][T13302] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  471.382103][T13303] netlink: 'syz.4.2136': attribute type 12 has an invalid length.
[  471.488095][T13316] vcan0: entered allmulticast mode
[  471.608498][ T1142] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  471.643118][T13320] wg1 speed is unknown, defaulting to 1000
[  471.818029][T13331] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  472.766251][T13368] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy�ڇv���[�D�w��zR'
[  472.785379][T13368] CPU: 1 UID: 0 PID: 13368 Comm: syz.3.2154 Not tainted syzkaller #0 PREEMPT(full) 
[  472.785409][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  472.785421][T13368] Call Trace:
[  472.785429][T13368]  <TASK>
[  472.785438][T13368]  dump_stack_lvl+0x189/0x250
[  472.785474][T13368]  ? __pfx_dump_stack_lvl+0x10/0x10
[  472.785498][T13368]  ? __pfx__printk+0x10/0x10
[  472.785532][T13368]  ? kernfs_path_from_node+0x2f/0x290
[  472.785554][T13368]  ? kernfs_path_from_node+0x250/0x290
[  472.785572][T13368]  ? kernfs_path_from_node+0x2f/0x290
[  472.785599][T13368]  sysfs_warn_dup+0x8e/0xa0
[  472.785620][T13368]  sysfs_do_create_link_sd+0xc0/0x110
[  472.785646][T13368]  device_add_class_symlinks+0x1cf/0x240
[  472.785676][T13368]  device_add+0x475/0xb50
[  472.785705][T13368]  wiphy_register+0x1ba6/0x28d0
[  472.785749][T13368]  ? __pfx_wiphy_register+0x10/0x10
[  472.785769][T13368]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  472.785805][T13368]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  472.785836][T13368]  ieee80211_register_hw+0x3484/0x4100
[  472.785883][T13368]  ? ieee80211_register_hw+0x1421/0x4100
[  472.785922][T13368]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  472.785954][T13368]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  472.786000][T13368]  ? __hrtimer_setup+0x187/0x210
[  472.786018][T13368]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  472.786043][T13368]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  472.786110][T13368]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  472.786136][T13368]  ? trace_kmalloc+0x1f/0xd0
[  472.786159][T13368]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  472.786184][T13368]  ? kstrndup+0xbf/0x160
[  472.786219][T13368]  hwsim_new_radio_nl+0xea4/0x1b10
[  472.786251][T13368]  ? __pfx___nla_validate_parse+0x10/0x10
[  472.786299][T13368]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  472.786341][T13368]  ? __nla_parse+0x40/0x60
[  472.786364][T13368]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  472.786400][T13368]  genl_family_rcv_msg_doit+0x212/0x300
[  472.786435][T13368]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  472.786476][T13368]  ? bpf_lsm_capable+0x9/0x20
[  472.786499][T13368]  ? security_capable+0x7e/0x2e0
[  472.786534][T13368]  genl_rcv_msg+0x60e/0x790
[  472.786567][T13368]  ? __pfx_genl_rcv_msg+0x10/0x10
[  472.786589][T13368]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  472.786633][T13368]  netlink_rcv_skb+0x208/0x470
[  472.786650][T13368]  ? __lock_acquire+0xab9/0xd20
[  472.786677][T13368]  ? __pfx_genl_rcv_msg+0x10/0x10
[  472.786703][T13368]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  472.786746][T13368]  ? down_read+0x1ad/0x2e0
[  472.786771][T13368]  genl_rcv+0x28/0x40
[  472.786792][T13368]  netlink_unicast+0x82f/0x9e0
[  472.786831][T13368]  ? __pfx_netlink_unicast+0x10/0x10
[  472.786862][T13368]  ? netlink_sendmsg+0x642/0xb30
[  472.786879][T13368]  ? skb_put+0x11b/0x210
[  472.786906][T13368]  netlink_sendmsg+0x805/0xb30
[  472.786937][T13368]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.786961][T13368]  ? aa_sock_msg_perm+0xf1/0x1d0
[  472.786981][T13368]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  472.786998][T13368]  ? __pfx_netlink_sendmsg+0x10/0x10
[  472.787016][T13368]  __sock_sendmsg+0x219/0x270
[  472.787043][T13368]  ____sys_sendmsg+0x505/0x830
[  472.787070][T13368]  ? __pfx_____sys_sendmsg+0x10/0x10
[  472.787100][T13368]  ? import_iovec+0x74/0xa0
[  472.787125][T13368]  ___sys_sendmsg+0x21f/0x2a0
[  472.787148][T13368]  ? __pfx____sys_sendmsg+0x10/0x10
[  472.787208][T13368]  ? __fget_files+0x2a/0x420
[  472.787221][T13368]  ? __fget_files+0x3a0/0x420
[  472.787246][T13368]  __x64_sys_sendmsg+0x19b/0x260
[  472.787276][T13368]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  472.787307][T13368]  ? rcu_is_watching+0x15/0xb0
[  472.787329][T13368]  ? do_syscall_64+0xbe/0x3b0
[  472.787351][T13368]  do_syscall_64+0xfa/0x3b0
[  472.787367][T13368]  ? lockdep_hardirqs_on+0x9c/0x150
[  472.787383][T13368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.787398][T13368]  ? clear_bhb_loop+0x60/0xb0
[  472.787418][T13368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.787433][T13368] RIP: 0033:0x7f990af8eec9
[  472.787448][T13368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.787462][T13368] RSP: 002b:00007f990be63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  472.787481][T13368] RAX: ffffffffffffffda RBX: 00007f990b1e5fa0 RCX: 00007f990af8eec9
[  472.787492][T13368] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  472.787502][T13368] RBP: 00007f990b011f91 R08: 0000000000000000 R09: 0000000000000000
[  472.787512][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  472.787521][T13368] R13: 00007f990b1e6038 R14: 00007f990b1e5fa0 R15: 00007fff96624698
[  472.787551][T13368]  </TASK>
[  473.640623][T13388] netlink: 'syz.2.2161': attribute type 4 has an invalid length.
[  473.660778][T13385] netlink: 'syz.3.2160': attribute type 12 has an invalid length.
[  473.832291][T13398] __nla_validate_parse: 11 callbacks suppressed
[  473.832315][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'.
[  474.016310][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2166'.
[  474.467192][T13426] netlink: 'syz.0.2169': attribute type 1 has an invalid length.
[  474.554085][T13430] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  474.615070][T13435] netlink: 'syz.0.2169': attribute type 1 has an invalid length.
[  474.642235][   T30] audit: type=1107 audit(1758832223.587:3): pid=13428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً�5����%��U�A����٠�0���l�t�ݕ/�� �6򊨊�'
[  474.685626][T13426] bond4 (unregistering): Released all slaves
[  474.860667][T13444] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  474.895703][T13431] ip6tnl1: entered promiscuous mode
[  474.954767][T13431] ip6tnl1: entered allmulticast mode
[  475.451400][T13464] netlink: 'syz.4.2175': attribute type 12 has an invalid length.
[  475.659221][T13473] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2179'.
[  475.665521][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2180'.
[  475.763896][T13481] 8021q: VLANs not supported on ip6tnl0
[  476.014017][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'.
[  476.112062][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2185'.
[  476.530175][T13522] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2191'.
[  476.805570][T13533] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2195'.
[  477.186555][T13552] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  477.309941][T13559] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2203'.
[  477.410896][T13564] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  477.421296][T13564] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  477.471766][T13564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2205'.
[  477.525234][T13569] erspan0: mtu less than device minimum
[  477.675555][T13579] openvswitch: netlink: Actions may not be safe on all matching packets
[  477.693000][T13577] nbd: must specify an index to disconnect
[  477.871230][T13587] netlink: 'syz.3.2211': attribute type 75 has an invalid length.
[  477.980676][T13593] batadv_slave_1: entered promiscuous mode
[  478.018050][T13592] veth0_to_team: entered promiscuous mode
[  478.582829][T13603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  478.600134][T13603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  478.612212][T13603] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  478.625878][T13603] bond0 (unregistering): Released all slaves
[  478.728009][T13641] bridge5: entered promiscuous mode
[  478.766431][T13641] bridge5: entered allmulticast mode
[  478.873848][T13653] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  479.109794][T13669] __nla_validate_parse: 5 callbacks suppressed
[  479.109816][T13669] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.164463][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.174479][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.184326][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.195035][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.209288][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.236111][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.259328][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.282394][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.302152][T13669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2234'.
[  479.537312][T13684] 
: renamed from bridge_slave_0
[  479.728493][T13698] gre2: entered promiscuous mode
[  479.737338][T13698] gre2: entered allmulticast mode
[  479.966657][T13712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  480.120887][T13718] siw: device registration error -23
[  480.237035][T13726] netlink: 'syz.3.2251': attribute type 10 has an invalid length.
[  480.271112][T13726] team0: Device ipvlan1 failed to register rx_handler
[  480.768768][T13755] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  480.785593][T13755] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  480.999308][T13768] bond2: left allmulticast mode
[  481.008405][T13768] 8021q: adding VLAN 0 to HW filter on device bond2
[  481.017697][T13773] 8021q: VLANs not supported on ip_vti0
[  481.031316][T13775] syz.2.2263: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  481.032674][T13773] netlink: 'syz.0.2266': attribute type 1 has an invalid length.
[  481.082723][T13775] CPU: 0 UID: 0 PID: 13775 Comm: syz.2.2263 Not tainted syzkaller #0 PREEMPT(full) 
[  481.082754][T13775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  481.082767][T13775] Call Trace:
[  481.082775][T13775]  <TASK>
[  481.082785][T13775]  dump_stack_lvl+0x189/0x250
[  481.082820][T13775]  ? __pfx_dump_stack_lvl+0x10/0x10
[  481.082845][T13775]  ? __pfx__printk+0x10/0x10
[  481.082875][T13775]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  481.082900][T13775]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  481.082928][T13775]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  481.082955][T13775]  warn_alloc+0x214/0x310
[  481.082988][T13775]  ? stack_depot_save_flags+0x40/0x860
[  481.083019][T13775]  ? __pfx_warn_alloc+0x10/0x10
[  481.083052][T13775]  ? kasan_save_track+0x4f/0x80
[  481.083079][T13775]  ? xskq_create+0x56/0x170
[  481.083097][T13775]  ? xsk_init_queue+0xb0/0x110
[  481.083112][T13775]  ? xsk_setsockopt+0x4dc/0x8d0
[  481.083139][T13775]  ? do_sock_setsockopt+0x179/0x1b0
[  481.083160][T13775]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  481.083181][T13775]  ? do_syscall_64+0xfa/0x3b0
[  481.083202][T13775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.083231][T13775]  __vmalloc_node_range_noprof+0x125/0x12f0
[  481.083295][T13775]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  481.083333][T13775]  ? __kasan_kmalloc+0x93/0xb0
[  481.083363][T13775]  vmalloc_user_noprof+0xad/0xf0
[  481.083393][T13775]  ? xskq_create+0xbf/0x170
[  481.083414][T13775]  xskq_create+0xbf/0x170
[  481.083437][T13775]  xsk_init_queue+0xb0/0x110
[  481.083459][T13775]  xsk_setsockopt+0x4dc/0x8d0
[  481.083500][T13775]  ? __pfx_xsk_setsockopt+0x10/0x10
[  481.083529][T13775]  ? __pfx_aa_sk_perm+0x10/0x10
[  481.083564][T13775]  ? aa_sock_opt_perm+0xff/0x1b0
[  481.083588][T13775]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  481.083609][T13775]  ? __pfx_xsk_setsockopt+0x10/0x10
[  481.083640][T13775]  do_sock_setsockopt+0x179/0x1b0
[  481.083670][T13775]  __x64_sys_setsockopt+0x13f/0x1b0
[  481.083701][T13775]  do_syscall_64+0xfa/0x3b0
[  481.083722][T13775]  ? lockdep_hardirqs_on+0x9c/0x150
[  481.083742][T13775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.083759][T13775]  ? clear_bhb_loop+0x60/0xb0
[  481.083784][T13775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.083803][T13775] RIP: 0033:0x7f43a1b8eec9
[  481.083822][T13775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.083838][T13775] RSP: 002b:00007f43a2a9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  481.083859][T13775] RAX: ffffffffffffffda RBX: 00007f43a1de6090 RCX: 00007f43a1b8eec9
[  481.083874][T13775] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  481.083886][T13775] RBP: 00007f43a1c11f91 R08: 0000000000000004 R09: 0000000000000000
[  481.083899][T13775] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  481.083911][T13775] R13: 00007f43a1de6128 R14: 00007f43a1de6090 R15: 00007ffd506b8c08
[  481.083947][T13775]  </TASK>
[  481.407974][T13775] Mem-Info:
[  481.420358][T13775] active_anon:4784 inactive_anon:0 isolated_anon:0
[  481.420358][T13775]  active_file:3336 inactive_file:39966 isolated_file:0
[  481.420358][T13775]  unevictable:768 dirty:82 writeback:0
[  481.420358][T13775]  slab_reclaimable:11939 slab_unreclaimable:105830
[  481.420358][T13775]  mapped:29164 shmem:1408 pagetables:1147
[  481.420358][T13775]  sec_pagetables:0 bounce:0
[  481.420358][T13775]  kernel_misc_reclaimable:0
[  481.420358][T13775]  free:1319962 free_pcp:12649 free_cma:0
[  481.432548][T13782] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  481.467044][T13775] Node 0 active_anon:18836kB inactive_anon:0kB active_file:13344kB inactive_file:159664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116656kB dirty:324kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12856kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  481.528320][T13775] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  481.560331][T13775] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  481.617829][T13775] lowmem_reserve[]: 0 2497 2499 2499 2499
[  481.628255][T13775] Node 0 DMA32 free:1362836kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19188kB inactive_anon:0kB active_file:13344kB inactive_file:158076kB unevictable:1536kB writepending:324kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:39084kB local_pcp:19164kB free_cma:0kB
[  481.712629][T13775] lowmem_reserve[]: 0 0 1 1 1
[  481.751068][T13775] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  481.852096][T13775] lowmem_reserve[]: 0 0 0 0 0
[  481.864824][T13775] Node 1 Normal free:3901324kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11680kB local_pcp:9344kB free_cma:0kB
[  481.919338][T13775] lowmem_reserve[]: 0 0 0 0 0
[  481.924845][T13775] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  481.941119][T13775] Node 0 DMA32: 844*4kB (UM) 514*8kB (UME) 282*16kB (UME) 422*32kB (UME) 760*64kB (UME) 157*128kB (UME) 5*256kB (UM) 11*512kB (UME) 6*1024kB (UM) 3*2048kB (UME) 305*4096kB (UM) = 1362720kB
[  481.972156][T13775] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  481.987471][T13775] Node 1 Normal: 203*4kB (UE) 56*8kB (UME) 44*16kB (UME) 151*32kB (UME) 38*64kB (UME) 5*128kB (UME) 5*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 0*2048kB 948*4096kB (M) = 3901324kB
[  482.008907][T13775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  482.021374][T13775] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  482.031282][T13775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  482.042062][T13775] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  482.052464][T13775] 44707 total pagecache pages
[  482.059432][T13775] 0 pages in swap cache
[  482.064094][T13775] Free swap  = 124996kB
[  482.069331][T13775] Total swap = 124996kB
[  482.077636][T13775] 2097051 pages RAM
[  482.081813][T13775] 0 pages HighMem/MovableOnly
[  482.087900][T13775] 425672 pages reserved
[  482.092136][T13775] 0 pages cma reserved
[  482.167652][T13805] veth19: entered allmulticast mode
[  482.173545][T13806] bridge: RTM_NEWNEIGH with invalid ether address
[  482.187713][T13807] bridge: RTM_NEWNEIGH with invalid ether address
[  482.195069][T13809] netlink: 'syz.0.2273': attribute type 12 has an invalid length.
[  482.791678][T13857] netlink: 'syz.0.2287': attribute type 4 has an invalid length.
[  482.835154][T13863] netlink: 'syz.2.2288': attribute type 12 has an invalid length.
[  482.852309][T13866] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  482.892247][T13867] veth1_to_bond: entered allmulticast mode
[  482.919378][T13862] veth1_to_bond: left allmulticast mode
[  483.392319][T13894] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  483.921414][T13920] netlink: 'syz.3.2305': attribute type 12 has an invalid length.
[  484.014790][T13922] netlink: 'syz.2.2307': attribute type 11 has an invalid length.
[  484.065389][T13633] IPVS: starting estimator thread 0...
[  484.078622][T13922] IPVS: nq: FWM 3 0x00000003 - no destination available
[  484.141686][T13925] __nla_validate_parse: 72 callbacks suppressed
[  484.141708][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2308'.
[  484.194512][T13927] IPVS: using max 30 ests per chain, 72000 per kthread
[  484.319228][T13933] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  484.622440][T13944] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2315'.
[  484.667536][T13937] netlink: 'syz.2.2313': attribute type 10 has an invalid length.
[  484.823119][T13949] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2316'.
[  484.926502][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2316'.
[  484.937321][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2316'.
[  485.018250][T13957] bridge3: entered promiscuous mode
[  485.047022][T13957] bridge3: entered allmulticast mode
[  485.091611][T13935] wg1 speed is unknown, defaulting to 1000
[  485.289343][T13962] netlink: 'syz.1.2319': attribute type 12 has an invalid length.
[  485.403751][T13964] netlink: 'syz.2.2320': attribute type 11 has an invalid length.
[  485.452405][T13964] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2320'.
[  485.595001][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'.
[  485.725001][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2325'.
[  485.914147][T13992] syzkaller1: entered promiscuous mode
[  485.921332][T13992] syzkaller1: entered allmulticast mode
[  485.983183][T13997] netlink: 'syz.0.2328': attribute type 12 has an invalid length.
[  486.041341][T13997] sctp: [Deprecated]: syz.0.2328 (pid 13997) Use of struct sctp_assoc_value in delayed_ack socket option.
[  486.041341][T13997] Use struct sctp_sack_info instead
[  486.197498][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'.
[  486.232888][T14005] netlink: 'syz.0.2330': attribute type 11 has an invalid length.
[  486.241419][T14005] netlink: 'syz.0.2330': attribute type 11 has an invalid length.
[  486.269639][T14007] netlink: 'syz.2.2331': attribute type 12 has an invalid length.
[  486.271295][T14005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2330'.
[  486.311933][T14008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  486.697053][T14021] (unnamed net_device) (uninitialized): (slave erspan0): Device is not bonding slave
[  486.710828][T14021] (unnamed net_device) (uninitialized): option active_slave: invalid value (erspan0)
[  486.727733][T14021] netlink: 'syz.2.2334': attribute type 4 has an invalid length.
[  486.823229][T14029] wg1 speed is unknown, defaulting to 1000
[  487.379102][T14044] netlink: 'syz.1.2341': attribute type 29 has an invalid length.
[  487.930406][T14066] wg1 speed is unknown, defaulting to 1000
[  488.044120][T14080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  488.460686][T14087] netlink: 'syz.4.2353': attribute type 1 has an invalid length.
[  488.558434][T14098] netlink: 'syz.3.2357': attribute type 11 has an invalid length.
[  488.592334][T14098] netlink: 'syz.3.2357': attribute type 11 has an invalid length.
[  488.601548][T14098] netlink: 'syz.3.2357': attribute type 11 has an invalid length.
[  488.621819][T14098] netlink: 'syz.3.2357': attribute type 11 has an invalid length.
[  488.677314][T14087] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.716668][T14096] bond0: (slave geneve5): making interface the new active one
[  488.726358][T14096] bond0: (slave geneve5): Enslaving as an active interface with an up link
[  488.739443][ T1168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  488.804417][ T1168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  488.855219][ T1168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  488.891261][ T1168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  488.970781][T14117] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.071662][T14117] bond0: (slave rose0): Enslaving as an active interface with an up link
[  489.123933][T14115] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  489.165791][T14124] veth0: entered promiscuous mode
[  489.194520][T14119] veth0: left promiscuous mode
[  489.448836][T14149] xt_bpf: check failed: parse error
[  489.473707][ T1168] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  489.580016][T14156] __nla_validate_parse: 4 callbacks suppressed
[  489.580040][T14156] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2372'.
[  489.811795][T14165] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  490.011233][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2379'.
[  490.018913][T14177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.051450][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2381'.
[  490.107443][T14181] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2381'.
[  490.405263][T14191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2384'.
[  490.421097][T14191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2384'.
[  490.474218][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'.
[  491.219235][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'.
[  492.086469][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2409'.
[  492.456660][T14312] xt_limit: Overflow, try lower: 604147548/4200216962
[  492.832523][T14332] erspan0: entered promiscuous mode
[  492.862709][T14332] validate_nla: 63 callbacks suppressed
[  492.862732][T14332] netlink: 'syz.4.2418': attribute type 15 has an invalid length.
[  492.916705][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'.
[  492.965374][   T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  492.965494][T14332] netlink: 'syz.4.2418': attribute type 15 has an invalid length.
[  492.986771][T14341] netlink: 'syz.1.2421': attribute type 7 has an invalid length.
[  492.996449][T14341] netlink: 'syz.1.2421': attribute type 8 has an invalid length.
[  493.015545][   T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  493.088562][   T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  493.119925][   T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  493.346499][T14353] netlink: zone id is out of range
[  493.368759][T14353] netlink: zone id is out of range
[  493.406635][T14353] netlink: zone id is out of range
[  493.450880][T14353] netlink: zone id is out of range
[  493.462630][T14353] netlink: zone id is out of range
[  493.486318][T14353] netlink: zone id is out of range
[  493.504054][T14353] netlink: zone id is out of range
[  493.513906][T14353] netlink: zone id is out of range
[  493.525543][T14353] netlink: zone id is out of range
[  493.534538][T14353] netlink: zone id is out of range
[  493.798921][T14380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  493.806700][T14380] IPv6: NLM_F_CREATE should be set when creating new route
[  494.177170][T14398] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  494.387091][T14413] geneve3: entered promiscuous mode
[  494.392368][T14413] geneve3: entered allmulticast mode
[  494.583898][T14430] __nla_validate_parse: 14 callbacks suppressed
[  494.583921][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2443'.
[  495.080370][T14451] netlink: 'syz.2.2448': attribute type 12 has an invalid length.
[  495.245743][T14458] netlink: 'syz.4.2453': attribute type 4 has an invalid length.
[  495.258109][T14458] netlink: 'syz.4.2453': attribute type 4 has an invalid length.
[  495.312626][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2455'.
[  495.397856][T14471] syzkaller1: entered promiscuous mode
[  495.409149][T14471] syzkaller1: entered allmulticast mode
[  495.667217][T14490] block nbd1: Unsupported socket: shutdown callout must be supported.
[  495.714745][ T5186] Bluetooth: hci4: command 0x0406 tx timeout
[  495.933811][T14506] Bluetooth: MGMT ver 1.23
[  495.939619][T14505] netlink: 'syz.2.2467': attribute type 10 has an invalid length.
[  496.145665][T14512] netlink: 'syz.2.2469': attribute type 3 has an invalid length.
[  496.156355][T14512] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2469'.
[  496.247645][T14516] netlink: 'syz.1.2471': attribute type 1 has an invalid length.
[  496.479467][T14528] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  496.540347][T14528] veth9: entered promiscuous mode
[  496.549826][T14528] bond9: (slave veth9): Enslaving as a backup interface with a down link
[  496.608397][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2478'.
[  496.927460][T14555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2481'.
[  497.237966][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2484'.
[  497.421402][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'.
[  497.467466][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2486'.
[  497.744368][T14591] bridge: RTM_NEWNEIGH with invalid ether address
[  497.772907][T14591] bridge: RTM_NEWNEIGH with invalid ether address
[  497.794063][ T5186] Bluetooth: hci4: command 0x0406 tx timeout
[  497.854240][T14597] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2491'.
[  497.930324][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'.
[  498.023663][T14599] bond0: entered promiscuous mode
[  498.033190][T14599] bond_slave_0: entered promiscuous mode
[  498.039687][T14599] bond_slave_1: entered promiscuous mode
[  498.046107][T14599] bridge0: entered promiscuous mode
[  498.051524][T14599] bond0: left allmulticast mode
[  498.055034][T14610] validate_nla: 2 callbacks suppressed
[  498.055051][T14610] netlink: 'syz.3.2497': attribute type 3 has an invalid length.
[  498.086052][T14599] bond_slave_0: left allmulticast mode
[  498.101336][T14599] bond_slave_1: left allmulticast mode
[  498.127306][T14599] bridge0: left allmulticast mode
[  498.155434][T14608] 8021q: VLANs not supported on ip_vti0
[  498.408753][T14630] netlink: 'syz.3.2503': attribute type 12 has an invalid length.
[  498.830089][T14646] netlink: 'syz.4.2508': attribute type 1 has an invalid length.
[  499.078496][T14661] wg1 speed is unknown, defaulting to 1000
[  499.082274][T14663] wg1 speed is unknown, defaulting to 1000
[  499.571826][T14690] net_ratelimit: 10 callbacks suppressed
[  499.571849][T14690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  499.684093][T14692] syzkaller1: entered promiscuous mode
[  499.689719][T14692] syzkaller1: entered allmulticast mode
[  499.700920][T14692] __nla_validate_parse: 3 callbacks suppressed
[  499.700941][T14692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2520'.
[  499.875047][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'.
[  499.911406][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2527'.
[  500.001625][T14713] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  500.022917][T14716] tipc: Enabled bearer <ib:gretap0>, priority 0
[  500.101264][T14716] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2529'.
[  500.129309][T14716] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2529'.
[  500.187856][T14722] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2531'.
[  500.308613][T14722] vlan2: entered allmulticast mode
[  500.332370][T14724] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2532'.
[  500.446867][T14727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  500.460243][T14727] syzkaller0: entered promiscuous mode
[  500.469411][T14727] syzkaller0: entered allmulticast mode
[  500.524579][T14727] tipc: Resetting bearer <eth:syzkaller0>
[  500.560473][T14726] tipc: Resetting bearer <eth:syzkaller0>
[  500.640620][T14726] tipc: Disabling bearer <eth:syzkaller0>
[  500.753692][T14742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2538'.
[  501.070886][T14753] netlink: 'syz.3.2542': attribute type 10 has an invalid length.
[  501.119562][T14759] netlink: 'syz.2.2544': attribute type 1 has an invalid length.
[  501.458510][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2550'.
[  501.485738][T14775] netlink: 'syz.0.2550': attribute type 3 has an invalid length.
[  501.510341][T14775] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2550'.
[  501.633583][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  501.786072][T14774] sctp: [Deprecated]: syz.1.2551 (pid 14774) Use of int in maxseg socket option.
[  501.786072][T14774] Use struct sctp_assoc_value instead
[  501.998811][T14805] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.031137][T14805] batman_adv: batadv0: Removing interface: batadv_slave_1
[  502.180844][T14816] erspan0: left promiscuous mode
[  502.187214][T14816] erspan0: left allmulticast mode
[  502.641445][ T1327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  503.171125][T14833] vcan0 (unregistering): left allmulticast mode
[  503.205987][T14836] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  503.326002][T14838] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  503.373549][T14838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.771541][T14865] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  504.409134][T13633] IPVS: starting estimator thread 0...
[  504.468163][T14893] netlink: 'syz.4.2589': attribute type 10 has an invalid length.
[  504.513424][T14890] IPVS: using max 25 ests per chain, 60000 per kthread
[  504.720525][T14907] 8021q: adding VLAN 0 to HW filter on device bond4
[  504.742022][T14916] netlink: 'syz.4.2593': attribute type 1 has an invalid length.
[  504.750931][T14916] netlink: 'syz.4.2593': attribute type 1 has an invalid length.
[  504.938528][T14913] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  505.039350][T14929] bridge: RTM_NEWNEIGH with invalid ether address
[  505.060543][T14929] bridge: RTM_NEWNEIGH with invalid ether address
[  505.079381][T14932] __nla_validate_parse: 11 callbacks suppressed
[  505.079402][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'.
[  505.103820][T14932] netlink: 'syz.3.2598': attribute type 1 has an invalid length.
[  505.142754][T14932] netlink: 'syz.3.2598': attribute type 2 has an invalid length.
[  505.172416][T14929] netlink: 'syz.0.2597': attribute type 12 has an invalid length.
[  505.335408][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'.
[  505.395164][T14946] macvlan0: entered promiscuous mode
[  505.402614][T14950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2602'.
[  505.421399][T14946] batadv_slave_0: entered promiscuous mode
[  505.515040][T14956] nbd: must specify a device to reconfigure
[  505.599998][T14963] netlink: 'syz.2.2605': attribute type 1 has an invalid length.
[  505.613150][T14963] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2605'.
[  505.671375][T14963] TCP: TCP_TX_DELAY enabled
[  505.806029][T14971] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2607'.
[  506.158388][T14993] bridge: RTM_NEWNEIGH with invalid ether address
[  506.181196][T14993] bridge: RTM_NEWNEIGH with invalid ether address
[  506.208159][T14993] netlink: 'syz.0.2611': attribute type 12 has an invalid length.
[  506.420453][T15011] netlink: 'syz.3.2618': attribute type 12 has an invalid length.
[  506.440503][T15011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2618'.
[  506.495916][T15017] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  506.770853][T15027] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  507.173816][T15032] bond7: (slave veth0_to_bond): Releasing backup interface
[  507.207386][T15032] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  507.275174][T15041] netlink: 'syz.1.2627': attribute type 12 has an invalid length.
[  507.514740][T15049] syzkaller1: entered promiscuous mode
[  507.520495][T15049] syzkaller1: entered allmulticast mode
[  507.576451][T15056] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2632'.
[  507.636996][T15066] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  507.787594][T15073] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  507.904603][T15076] 8021q: adding VLAN 0 to HW filter on device bond6
[  507.971156][T15084] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  507.982150][T15084] bond6: (slave macvlan3): Enslaving as a backup interface with a down link
[  508.191095][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'.
[  508.219320][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2640'.
[  508.363140][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2643'.
[  508.974152][T15148] bridge: RTM_NEWNEIGH with invalid ether address
[  508.991618][T15148] bridge: RTM_NEWNEIGH with invalid ether address
[  509.031422][T15150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  509.618833][T15192] validate_nla: 2 callbacks suppressed
[  509.618857][T15192] netlink: 'syz.4.2665': attribute type 12 has an invalid length.
[  509.897984][T15210] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.028842][T15214] netlink: 'syz.4.2672': attribute type 1 has an invalid length.
[  510.037677][T15214] netlink: 'syz.4.2672': attribute type 10 has an invalid length.
[  510.351416][T15225] netlink: 'syz.4.2677': attribute type 23 has an invalid length.
[  510.926282][T15250] __nla_validate_parse: 6 callbacks suppressed
[  510.926305][T15250] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2682'.
[  510.950752][T15252] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  511.038432][T15260] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2686'.
[  511.401980][ T5186] Bluetooth: hci4: command 0x0406 tx timeout
[  511.633403][T15303] sch_fq: defrate 0 ignored.
[  511.827665][T15317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2701'.
[  511.859028][T15318] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2701'.
[  511.890533][T15322] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2702'.
[  511.906758][T15322] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2702'.
[  511.929371][T15322] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2702'.
[  512.108162][T15337] netlink: 'syz.3.2706': attribute type 10 has an invalid length.
[  512.158586][T15337] netlink: 'syz.3.2706': attribute type 4 has an invalid length.
[  512.336625][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2711'.
[  512.414648][T15354] netlink: 'syz.2.2715': attribute type 10 has an invalid length.
[  512.419507][T15349] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2713'.
[  512.438152][T15349] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2713'.
[  512.481650][T15361] netlink: 'syz.4.2717': attribute type 11 has an invalid length.
[  512.526718][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x1b
[  512.557841][T15354] 8021q: adding VLAN 0 to HW filter on device bond10
[  512.642990][T15369] dvmrp0: entered allmulticast mode
[  512.652355][T15369] dvmrp0: left allmulticast mode
[  513.242142][T15408] netlink: 'syz.0.2733': attribute type 13 has an invalid length.
[  513.298544][T15408] netlink: 'syz.0.2733': attribute type 58 has an invalid length.
[  513.314713][T15413] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  513.371314][T15413] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  513.948914][T15454] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  514.265307][T15475] Bluetooth: MGMT ver 1.23
[  514.527739][T15489] gre3: entered promiscuous mode
[  514.536986][T15489] gre3: entered allmulticast mode
[  514.916563][T15516] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  515.140906][T15529] validate_nla: 2 callbacks suppressed
[  515.140927][T15529] netlink: 'syz.2.2772': attribute type 7 has an invalid length.
[  515.216681][T15539] netlink: 'syz.3.2773': attribute type 1 has an invalid length.
[  515.229989][T15539] netlink: 'syz.3.2773': attribute type 24 has an invalid length.
[  515.376331][T15543] IPv6: sit3: Disabled Multicast RS
[  515.399788][T15543] sit3: entered allmulticast mode
[  515.450957][T15552] netlink: 'syz.2.2779': attribute type 10 has an invalid length.
[  515.631238][T15562] netlink: 'syz.1.2782': attribute type 4 has an invalid length.
[  515.742739][T15571] netlink: 'syz.4.2785': attribute type 12 has an invalid length.
[  515.886291][T15576] macvtap1: entered promiscuous mode
[  515.897421][T15576] vlan0: entered promiscuous mode
[  515.914318][T15576] macvtap1: entered allmulticast mode
[  515.919771][T15576] vlan0: entered allmulticast mode
[  515.926806][T15576] veth0_vlan: entered allmulticast mode
[  516.171468][T15601] netlink: 'syz.0.2797': attribute type 9 has an invalid length.
[  516.193531][ T5186] Bluetooth: hci4: command 0x0406 tx timeout
[  516.292974][T15605] __nla_validate_parse: 21 callbacks suppressed
[  516.292990][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2799'.
[  516.310968][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2799'.
[  516.402693][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'.
[  516.484665][T15614] bridge: RTM_NEWNEIGH with invalid ether address
[  516.491827][T15614] bridge: RTM_NEWNEIGH with invalid ether address
[  516.507308][T15614] netlink: 'syz.0.2800': attribute type 12 has an invalid length.
[  516.556759][T15616] netlink: 'syz.0.2801': attribute type 1 has an invalid length.
[  516.656170][T15620] 8021q: adding VLAN 0 to HW filter on device bond4
[  516.730664][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'.
[  516.741663][T15622] netlink: 'syz.1.2802': attribute type 30 has an invalid length.
[  516.753175][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2802'.
[  516.774272][T15624] bond5: entered allmulticast mode
[  516.779798][T15624] 8021q: adding VLAN 0 to HW filter on device bond5
[  516.787277][T15624] bridge0: port 3(bond5) entered blocking state
[  516.793762][T15624] bridge0: port 3(bond5) entered disabled state
[  516.802830][T15624] bond5: entered promiscuous mode
[  517.105327][T15639] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2807'.
[  517.142963][T15639] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  517.164716][T15639] openvswitch: netlink: Message has 6332 unknown bytes.
[  517.396957][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'.
[  517.848652][T15654] macvlan0 (unregistering): left promiscuous mode
[  518.020104][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'.
[  518.029347][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2812'.
[  518.038464][T15652] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2812'.
[  518.052787][T15673] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  518.075653][T15673] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  518.105920][T15675] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  518.145076][T15675] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  519.352223][ T5186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  519.366351][ T5186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  519.377372][ T5186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  519.402932][ T5186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  519.426549][ T5186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  519.522122][T15746] wg1 speed is unknown, defaulting to 1000
[  521.111381][T15830] wg2: entered promiscuous mode
[  521.223696][T15746] chnl_net:caif_netlink_parms(): no params data found
[  521.477003][ T5880] Bluetooth: hci5: command tx timeout
[  521.496563][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  521.855750][T15746] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.863182][T15746] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.887257][T15746] bridge_slave_0: entered allmulticast mode
[  521.902973][T15746] bridge_slave_0: entered promiscuous mode
[  521.913149][T15746] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.920806][T15746] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.928454][T15746] bridge_slave_1: entered allmulticast mode
[  521.938513][T15746] bridge_slave_1: entered promiscuous mode
[  521.946303][T15869] bridge0: entered allmulticast mode
[  522.104681][T15746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.151396][T15746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.296267][T15876] __nla_validate_parse: 14 callbacks suppressed
[  522.296289][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2863'.
[  522.334303][T15876] validate_nla: 2 callbacks suppressed
[  522.334322][T15876] netlink: 'syz.2.2863': attribute type 11 has an invalid length.
[  522.350354][T15746] team0: Port device team_slave_0 added
[  522.353516][T15879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'.
[  522.365528][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2863'.
[  522.368231][T15746] team0: Port device team_slave_1 added
[  522.411989][T15876] netlink: 'syz.2.2863': attribute type 11 has an invalid length.
[  522.432419][T15746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.446192][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.498078][T15746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.513595][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2867'.
[  522.524119][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2865'.
[  522.536302][T15888] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2865'.
[  522.550971][T15746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.558564][T15887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2867'.
[  522.578086][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.651633][T15746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.708026][T15887] geneve6: entered promiscuous mode
[  522.732688][T15887] geneve6: entered allmulticast mode
[  522.976096][T15903] netlink: 'syz.3.2870': attribute type 17 has an invalid length.
[  522.989332][T15746] hsr_slave_0: entered promiscuous mode
[  522.996999][T15746] hsr_slave_1: entered promiscuous mode
[  523.004188][T15746] debugfs: 'hsr0' already exists in 'hsr'
[  523.007592][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'.
[  523.009940][T15746] Cannot create hsr debugfs directory
[  523.026882][T15903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2870'.
[  523.049284][T15903] erspan0: entered promiscuous mode
[  523.059265][T15903] 0��{X��: entered promiscuous mode
[  523.335044][T15925] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2878'.
[  523.553689][ T5880] Bluetooth: hci5: command tx timeout
[  523.588721][T15746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  523.600164][T15746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.611192][T15746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  523.745491][T15746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  523.756853][T15746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.767868][T15746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  523.859846][T15746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  523.877811][T15746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.894669][T15746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  524.079337][T15746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  524.096805][T15746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.115586][T15746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  524.377282][T15987] netlink: 'syz.4.2893': attribute type 10 has an invalid length.
[  524.497268][T15746] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  524.548008][T15746] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  524.579728][T15746] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  524.617253][T15746] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  524.900241][T15746] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.945219][T15746] 8021q: adding VLAN 0 to HW filter on device team0
[  524.961510][T10065] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.969794][T10065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  525.006949][T10065] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.014196][T10065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.330013][T16017] netlink: 'syz.4.2900': attribute type 1 has an invalid length.
[  525.353559][T16017] block nbd1: not configured, cannot reconfigure
[  525.387506][T16022] netlink: 'syz.2.2901': attribute type 39 has an invalid length.
[  525.556866][   T59] nci: nci_rsp_packet: unknown rsp opcode 0x221
[  525.573605][T16035] IPv6: NLM_F_REPLACE set, but no existing node found!
[  525.582434][T16027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  525.593034][T15746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.633935][ T5880] Bluetooth: hci5: command tx timeout
[  525.739767][T15746] veth0_vlan: entered promiscuous mode
[  525.762099][T15746] veth1_vlan: entered promiscuous mode
[  525.838345][T15746] veth0_macvtap: entered promiscuous mode
[  525.880392][T15746] veth1_macvtap: entered promiscuous mode
[  525.976410][T15746] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.990895][T15746] batman_adv: batadv0: Interface activated: batadv_slave_1
[  526.026259][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.055173][ T1142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.078518][ T1142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.091073][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.878587][T15848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.889567][T15848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.006327][T15848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  527.030339][T15848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.126616][T16078] C: renamed from team_slave_0
[  527.160131][T16078] netlink: 'syz.2.2916': attribute type 1 has an invalid length.
[  527.191108][T16078] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  527.713711][ T5880] Bluetooth: hci5: command tx timeout
[  527.812645][T16124] bridge_slave_0: left allmulticast mode
[  527.824623][T16124] bridge_slave_0: left promiscuous mode
[  527.845937][T16124] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.892571][T16133] openvswitch: netlink: Actions may not be safe on all matching packets
[  527.929143][T16124] bridge_slave_1: left allmulticast mode
[  527.940461][T16138] __nla_validate_parse: 8 callbacks suppressed
[  527.940482][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2929'.
[  527.947099][T16124] bridge_slave_1: left promiscuous mode
[  527.947387][T16124] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.989599][T16124] bond0: (slave bond_slave_0): Releasing backup interface
[  528.012597][T16124] bond0: (slave bond_slave_1): Releasing backup interface
[  528.053906][T16124] team0: Port device team_slave_0 removed
[  528.092815][T16124] team0: Port device team_slave_1 removed
[  528.102816][T16124] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.115658][T16124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.125654][T16124] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.133783][T16124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.149275][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2926'.
[  528.159565][T16128] bridge_slave_1: default FDB implementation only supports local addresses
[  528.194118][T16138] team0: Mode changed to "broadcast"
[  528.202033][T16145] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  528.390507][T16154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  528.438117][T16158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2935'.
[  528.671036][T16166] netlink: 'syz.2.2938': attribute type 1 has an invalid length.
[  528.690753][T16166] netlink: 'syz.2.2938': attribute type 4 has an invalid length.
[  528.713901][T16166] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2938'.
[  528.884072][T16181] netlink: 'syz.4.2944': attribute type 12 has an invalid length.
[  528.920220][T16188] IPv6: NLM_F_CREATE should be specified when creating new route
[  529.165878][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'.
[  529.400330][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'.
[  529.527274][T16230] netlink: 'syz.3.2956': attribute type 12 has an invalid length.
[  529.958600][T16244] netlink: 'syz.1.2961': attribute type 12 has an invalid length.
[  530.603672][T16269] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2969'.
[  530.817980][T16275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  530.826990][T16275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  530.838717][T16275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  530.848864][T16275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  530.860416][T16275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  531.000412][T16274] wg1 speed is unknown, defaulting to 1000
[  531.031151][T16287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2974'.
[  531.081203][T16287] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2974'.
[  531.108543][T16287] netlink: 'syz.0.2974': attribute type 6 has an invalid length.
[  531.122251][T16287] netlink: 'syz.0.2974': attribute type 5 has an invalid length.
[  531.154289][T16287] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2974'.
[  531.238092][ T5186] Bluetooth: hci5: command 0x0405 tx timeout
[  531.565988][T16309] openvswitch: netlink: Flow key attr not present in new flow.
[  531.616169][T16312] netlink: 'syz.1.2981': attribute type 1 has an invalid length.
[  531.863144][T16318] bridge_slave_0: entered promiscuous mode
[  531.930444][T16318] netlink: 'syz.0.2983': attribute type 12 has an invalid length.
[  531.996562][T16274] chnl_net:caif_netlink_parms(): no params data found
[  532.165805][T16340] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  532.366146][T16274] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.377877][T16274] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.385334][T16274] bridge_slave_0: entered allmulticast mode
[  532.394300][T16274] bridge_slave_0: entered promiscuous mode
[  532.406350][T16274] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.413920][T16274] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.421294][T16274] bridge_slave_1: entered allmulticast mode
[  532.432799][T16347] netlink: 'syz.1.2990': attribute type 4 has an invalid length.
[  532.452053][T16274] bridge_slave_1: entered promiscuous mode
[  532.746572][T16274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  532.797941][T16274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.903104][T16274] team0: Port device team_slave_0 added
[  532.913856][ T5186] Bluetooth: hci0: command tx timeout
[  532.936079][T16274] team0: Port device team_slave_1 added
[  533.118054][T16274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  533.140104][T16274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.221867][T16274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  533.225372][T16389] __nla_validate_parse: 12 callbacks suppressed
[  533.225390][T16389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3000'.
[  533.256110][T16274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  533.263109][T16274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.316207][ T5186] Bluetooth: hci5: command 0x0405 tx timeout
[  533.407287][T16274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  533.647965][T16274] hsr_slave_0: entered promiscuous mode
[  533.660124][T16274] hsr_slave_1: entered promiscuous mode
[  533.668794][T16274] debugfs: 'hsr0' already exists in 'hsr'
[  533.679697][T16274] Cannot create hsr debugfs directory
[  534.016914][T16428] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3010'.
[  534.142531][T16274] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.167144][T16274] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.206971][T16274] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  534.267679][T16436] syzkaller1: entered promiscuous mode
[  534.290455][T16436] syzkaller1: entered allmulticast mode
[  534.312284][T16274] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.322311][T16274] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.332757][T16274] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  534.442420][T16274] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.456444][T16274] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.471937][T16274] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  534.547065][T16274] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  534.588228][T16274] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.620631][T16274] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  534.697348][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3018'.
[  534.755448][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'.
[  534.866435][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'.
[  534.956937][T16468] netlink: 'syz.4.3020': attribute type 11 has an invalid length.
[  534.994711][ T5880] Bluetooth: hci0: command tx timeout
[  535.022054][T16471] netlink: 'syz.1.3021': attribute type 4 has an invalid length.
[  535.028199][T16474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3022'.
[  535.120295][T16274] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  535.133017][T16474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3022'.
[  535.165519][T16477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3022'.
[  535.190032][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'.
[  535.235279][T16274] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  535.307864][T16274] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  535.351523][T16274] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  535.454454][T16491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3026'.
[  535.534737][T16503] netlink: 'syz.4.3029': attribute type 1 has an invalid length.
[  535.665379][T16503] 8021q: adding VLAN 0 to HW filter on device bond9
[  535.762246][T16513] gre1: entered promiscuous mode
[  535.772137][T16513] gre1: entered allmulticast mode
[  535.988109][T16274] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.056115][T16274] 8021q: adding VLAN 0 to HW filter on device team0
[  536.101111][T10065] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.108540][T10065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.149393][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.156616][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.810212][T16274] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.920553][T16572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.992901][T16568] tipc: Resetting bearer <eth:syzkaller0>
[  537.011362][T16274] veth0_vlan: entered promiscuous mode
[  537.073839][ T5880] Bluetooth: hci0: command tx timeout
[  537.079941][T16274] veth1_vlan: entered promiscuous mode
[  537.217867][T16274] veth0_macvtap: entered promiscuous mode
[  537.241577][T16579] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy�ڇv���[�D�w��zR'
[  537.260256][T16579] CPU: 0 UID: 0 PID: 16579 Comm: syz.1.3052 Not tainted syzkaller #0 PREEMPT(full) 
[  537.260289][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  537.260301][T16579] Call Trace:
[  537.260310][T16579]  <TASK>
[  537.260320][T16579]  dump_stack_lvl+0x189/0x250
[  537.260354][T16579]  ? __pfx_dump_stack_lvl+0x10/0x10
[  537.260378][T16579]  ? __pfx__printk+0x10/0x10
[  537.260413][T16579]  ? kernfs_path_from_node+0x2f/0x290
[  537.260437][T16579]  ? kernfs_path_from_node+0x250/0x290
[  537.260457][T16579]  ? kernfs_path_from_node+0x2f/0x290
[  537.260484][T16579]  sysfs_warn_dup+0x8e/0xa0
[  537.260505][T16579]  sysfs_do_create_link_sd+0xc0/0x110
[  537.260530][T16579]  device_add_class_symlinks+0x1cf/0x240
[  537.260559][T16579]  device_add+0x475/0xb50
[  537.260590][T16579]  wiphy_register+0x1ba6/0x28d0
[  537.260635][T16579]  ? __pfx_wiphy_register+0x10/0x10
[  537.260656][T16579]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  537.260694][T16579]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  537.260741][T16579]  ieee80211_register_hw+0x3484/0x4100
[  537.260791][T16579]  ? ieee80211_register_hw+0x1421/0x4100
[  537.260832][T16579]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  537.260866][T16579]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  537.260909][T16579]  ? __hrtimer_setup+0x187/0x210
[  537.260928][T16579]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  537.260952][T16579]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  537.261029][T16579]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  537.261057][T16579]  ? trace_kmalloc+0x1f/0xd0
[  537.261081][T16579]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  537.261110][T16579]  ? kstrndup+0xbf/0x160
[  537.261145][T16579]  hwsim_new_radio_nl+0xea4/0x1b10
[  537.261180][T16579]  ? __pfx___nla_validate_parse+0x10/0x10
[  537.261222][T16579]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  537.261271][T16579]  ? __nla_parse+0x40/0x60
[  537.261297][T16579]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  537.261337][T16579]  genl_family_rcv_msg_doit+0x212/0x300
[  537.261376][T16579]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  537.261422][T16579]  ? bpf_lsm_capable+0x9/0x20
[  537.261448][T16579]  ? security_capable+0x7e/0x2e0
[  537.261488][T16579]  genl_rcv_msg+0x60e/0x790
[  537.261524][T16579]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.261550][T16579]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  537.261600][T16579]  netlink_rcv_skb+0x208/0x470
[  537.261618][T16579]  ? __lock_acquire+0xab9/0xd20
[  537.261648][T16579]  ? __pfx_genl_rcv_msg+0x10/0x10
[  537.261677][T16579]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  537.261734][T16579]  ? down_read+0x1ad/0x2e0
[  537.261762][T16579]  genl_rcv+0x28/0x40
[  537.261786][T16579]  netlink_unicast+0x82f/0x9e0
[  537.261831][T16579]  ? __pfx_netlink_unicast+0x10/0x10
[  537.261865][T16579]  ? netlink_sendmsg+0x642/0xb30
[  537.261884][T16579]  ? skb_put+0x11b/0x210
[  537.261913][T16579]  netlink_sendmsg+0x805/0xb30
[  537.261948][T16579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.261974][T16579]  ? aa_sock_msg_perm+0xf1/0x1d0
[  537.261996][T16579]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  537.262017][T16579]  ? __pfx_netlink_sendmsg+0x10/0x10
[  537.262041][T16579]  __sock_sendmsg+0x219/0x270
[  537.262078][T16579]  ____sys_sendmsg+0x505/0x830
[  537.262113][T16579]  ? __pfx_____sys_sendmsg+0x10/0x10
[  537.262152][T16579]  ? import_iovec+0x74/0xa0
[  537.262185][T16579]  ___sys_sendmsg+0x21f/0x2a0
[  537.262215][T16579]  ? __pfx____sys_sendmsg+0x10/0x10
[  537.262292][T16579]  ? __fget_files+0x2a/0x420
[  537.262309][T16579]  ? __fget_files+0x3a0/0x420
[  537.262343][T16579]  __x64_sys_sendmsg+0x19b/0x260
[  537.262373][T16579]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  537.262414][T16579]  ? rcu_is_watching+0x15/0xb0
[  537.262441][T16579]  ? do_syscall_64+0xbe/0x3b0
[  537.262469][T16579]  do_syscall_64+0xfa/0x3b0
[  537.262490][T16579]  ? lockdep_hardirqs_on+0x9c/0x150
[  537.262511][T16579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.262529][T16579]  ? clear_bhb_loop+0x60/0xb0
[  537.262555][T16579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.262574][T16579] RIP: 0033:0x7f09f038eec9
[  537.262594][T16579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  537.262611][T16579] RSP: 002b:00007f09f118d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  537.262633][T16579] RAX: ffffffffffffffda RBX: 00007f09f05e5fa0 RCX: 00007f09f038eec9
[  537.262647][T16579] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b
[  537.262660][T16579] RBP: 00007f09f0411f91 R08: 0000000000000000 R09: 0000000000000000
[  537.262672][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  537.262684][T16579] R13: 00007f09f05e6038 R14: 00007f09f05e5fa0 R15: 00007ffe9e050088
[  537.262737][T16579]  </TASK>
[  537.313410][T16593] netlink: 'syz.4.3057': attribute type 1 has an invalid length.
[  537.409087][T16274] veth1_macvtap: entered promiscuous mode
[  537.595034][T16593] netlink: 'syz.4.3057': attribute type 11 has an invalid length.
[  537.792093][T16274] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.817591][T16274] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.857778][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  537.890360][ T1142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  537.985794][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  537.998603][ T1142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.143192][T16618] Bluetooth: MGMT ver 1.23
[  538.327634][   T30] audit: type=1800 audit(1758832287.277:4): pid=16625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3067" name="memory.events" dev="tmpfs" ino=194 res=0 errno=0
[  538.373992][T10065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.381895][T10065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.384018][   T30] audit: type=1804 audit(1758832287.277:5): pid=16625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3067" name="/newroot/35/memory.events" dev="tmpfs" ino=194 res=1 errno=0
[  538.566425][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  538.577316][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  538.728142][T16644] __nla_validate_parse: 13 callbacks suppressed
[  538.728163][T16644] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2959'.
[  539.153444][ T5880] Bluetooth: hci0: command tx timeout
[  539.717972][ T5186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  539.728081][ T5186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  539.737646][ T5186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  539.748682][ T5186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  539.756964][ T5186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  539.906078][T16673] wg1 speed is unknown, defaulting to 1000
[  540.411190][T16694] netlink: 'syz.4.3084': attribute type 13 has an invalid length.
[  540.465098][T16695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  540.730730][T16706] netlink: 'syz.3.3087': attribute type 4 has an invalid length.
[  540.817940][T16712] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3090'.
[  540.827357][T16712] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  540.831436][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3089'.
[  541.037344][T16724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.253016][T16673] chnl_net:caif_netlink_parms(): no params data found
[  541.300017][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3099'.
[  541.331340][T16734] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3099'.
[  541.622437][T16673] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.630880][T16673] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.646319][T16673] bridge_slave_0: entered allmulticast mode
[  541.656240][T16673] bridge_slave_0: entered promiscuous mode
[  541.667408][T16673] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.675126][T16673] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.682548][T16673] bridge_slave_1: entered allmulticast mode
[  541.700947][T16673] bridge_slave_1: entered promiscuous mode
[  541.845624][T16761] syz.3.3103: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  541.866634][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'.
[  541.868509][T16761] CPU: 1 UID: 0 PID: 16761 Comm: syz.3.3103 Not tainted syzkaller #0 PREEMPT(full) 
[  541.868532][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  541.868543][T16761] Call Trace:
[  541.868550][T16761]  <TASK>
[  541.868558][T16761]  dump_stack_lvl+0x189/0x250
[  541.868588][T16761]  ? __pfx_dump_stack_lvl+0x10/0x10
[  541.868609][T16761]  ? __pfx__printk+0x10/0x10
[  541.868633][T16761]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  541.868677][T16761]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  541.868698][T16761]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  541.868720][T16761]  warn_alloc+0x214/0x310
[  541.868753][T16761]  ? __pfx_warn_alloc+0x10/0x10
[  541.868787][T16761]  ? __get_vm_area_node+0x28f/0x300
[  541.868812][T16761]  ? xskq_create+0xbf/0x170
[  541.868833][T16761]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  541.868890][T16761]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  541.868920][T16761]  ? __kasan_kmalloc+0x93/0xb0
[  541.868947][T16761]  vmalloc_user_noprof+0xad/0xf0
[  541.868971][T16761]  ? xskq_create+0xbf/0x170
[  541.868989][T16761]  xskq_create+0xbf/0x170
[  541.869017][T16761]  xsk_init_queue+0xb0/0x110
[  541.869038][T16761]  xsk_setsockopt+0x4dc/0x8d0
[  541.869066][T16761]  ? __pfx_xsk_setsockopt+0x10/0x10
[  541.869091][T16761]  ? __pfx_aa_sk_perm+0x10/0x10
[  541.869120][T16761]  ? aa_sock_opt_perm+0xff/0x1b0
[  541.869141][T16761]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  541.869159][T16761]  ? __pfx_xsk_setsockopt+0x10/0x10
[  541.869185][T16761]  do_sock_setsockopt+0x179/0x1b0
[  541.869212][T16761]  __x64_sys_setsockopt+0x13f/0x1b0
[  541.869238][T16761]  do_syscall_64+0xfa/0x3b0
[  541.869256][T16761]  ? lockdep_hardirqs_on+0x9c/0x150
[  541.869273][T16761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.869290][T16761]  ? clear_bhb_loop+0x60/0xb0
[  541.869311][T16761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.869328][T16761] RIP: 0033:0x7fabd7b8eec9
[  541.869344][T16761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  541.869359][T16761] RSP: 002b:00007fabd8a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  541.869379][T16761] RAX: ffffffffffffffda RBX: 00007fabd7de6090 RCX: 00007fabd7b8eec9
[  541.869391][T16761] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  541.869402][T16761] RBP: 00007fabd7c11f91 R08: 0000000000000004 R09: 0000000000000000
[  541.869413][T16761] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  541.869423][T16761] R13: 00007fabd7de6128 R14: 00007fabd7de6090 R15: 00007fff63da01d8
[  541.869454][T16761]  </TASK>
[  541.869461][T16761] Mem-Info:
[  541.891566][ T5880] Bluetooth: hci2: command tx timeout
[  541.896797][T16761] active_anon:4806 inactive_anon:0 isolated_anon:0
[  541.896797][T16761]  active_file:3336 inactive_file:39997 isolated_file:0
[  541.896797][T16761]  unevictable:768 dirty:49 writeback:0
[  541.896797][T16761]  slab_reclaimable:12804 slab_unreclaimable:115346
[  541.896797][T16761]  mapped:29206 shmem:1357 pagetables:1143
[  541.896797][T16761]  sec_pagetables:0 bounce:0
[  541.896797][T16761]  kernel_misc_reclaimable:0
[  541.896797][T16761]  free:1306915 free_pcp:13341 free_cma:0
[  541.896855][T16761] Node 0 active_anon:19224kB inactive_anon:0kB active_file:13344kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116824kB dirty:192kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14004kB pagetables:4424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  541.896906][T16761] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  541.896962][T16761] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  542.286769][T16761] lowmem_reserve[]: 0 2497 2499 2499 2499
[  542.294655][T16761] Node 0 DMA32 free:1308884kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19068kB inactive_anon:0kB active_file:13344kB inactive_file:158200kB unevictable:1536kB writepending:192kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:43156kB local_pcp:20092kB free_cma:0kB
[  542.329003][T16761] lowmem_reserve[]: 0 0 1 1 1
[  542.337327][T16761] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  542.369173][T16761] lowmem_reserve[]: 0 0 0 0 0
[  542.374298][T16761] Node 1 Normal free:3902968kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10016kB local_pcp:1248kB free_cma:0kB
[  542.376459][T16673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.406217][T16761] lowmem_reserve[]: 0 0 0 0 0
[  542.428129][T16761] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  542.431825][T16673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.453283][T16761] Node 0 DMA32: 1059*4kB (UME) 469*8kB (UME) 220*16kB (UME) 64*32kB (UME) 45*64kB (UME) 63*128kB (UME) 96*256kB (UME) 40*512kB (UM) 22*1024kB (UM) 10*2048kB (UM) 292*4096kB (UM) = 1308596kB
[  542.510199][T16761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  542.527621][T16761] Node 1 Normal: 198*4kB (UE) 56*8kB (UME) 44*16kB (UME) 183*32kB (UME) 46*64kB (UME) 6*128kB (UME) 5*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 0*2048kB 948*4096kB (M) = 3902968kB
[  542.565090][T16761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  542.612710][T16761] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  542.643520][T16761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  542.644054][T16673] team0: Port device team_slave_0 added
[  542.677418][T16761] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  542.687804][T16673] team0: Port device team_slave_1 added
[  542.726712][T16761] 44686 total pagecache pages
[  542.741555][T16761] 0 pages in swap cache
[  542.747327][T16761] Free swap  = 124996kB
[  542.751602][T16761] Total swap = 124996kB
[  542.771144][T16761] 2097051 pages RAM
[  542.787686][T16761] 0 pages HighMem/MovableOnly
[  542.792655][T16761] 425672 pages reserved
[  542.801620][T16673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.811151][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.812313][T16761] 0 pages cma reserved
[  542.839804][T16673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.908306][T16673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.936935][T16673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.945680][T16783] delete_channel: no stack
[  542.982696][T16673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.011153][T16777] wg1 speed is unknown, defaulting to 1000
[  543.042407][T16783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3111'.
[  543.122236][T16789] netlink: 'syz.3.3113': attribute type 2 has an invalid length.
[  543.145333][T16673] hsr_slave_0: entered promiscuous mode
[  543.152454][T16673] hsr_slave_1: entered promiscuous mode
[  543.166630][T16783] netlink: 'syz.4.3111': attribute type 15 has an invalid length.
[  543.200534][T16673] debugfs: 'hsr0' already exists in 'hsr'
[  543.219211][T16673] Cannot create hsr debugfs directory
[  543.446430][T16795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3114'.
[  543.538473][T16805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3114'.
[  543.549452][T16795] bond10 (unregistering): Released all slaves
[  543.586340][T16802] syz_tun: entered allmulticast mode
[  543.602926][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3116'.
[  543.703795][T16801] syz_tun: left allmulticast mode
[  543.841961][T16817] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3121'.
[  543.872187][T16817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3121'.
[  543.954056][ T5880] Bluetooth: hci2: command 0x041b tx timeout
[  543.998373][T16673] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  544.027960][T16673] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  544.053555][T16673] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.108391][T16826] netlink: 'syz.3.3123': attribute type 22 has an invalid length.
[  544.130303][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'.
[  544.215526][T16673] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  544.225845][T16673] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  544.239872][T16673] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.325942][T16826] netlink: 'syz.3.3123': attribute type 22 has an invalid length.
[  544.343722][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'.
[  544.380887][   T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  544.402551][   T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  544.412177][   T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  544.467337][T16673] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  544.502702][T16673] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  544.516049][T16673] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.542477][   T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  544.555492][T16841] netlink: 'syz.4.3126': attribute type 2 has an invalid length.
[  544.558272][T16836] sctp: [Deprecated]: syz.1.3125 (pid 16836) Use of struct sctp_assoc_value in delayed_ack socket option.
[  544.558272][T16836] Use struct sctp_sack_info instead
[  544.563886][T16841] netlink: 'syz.4.3126': attribute type 8 has an invalid length.
[  544.596894][T16841] netlink: 1148 bytes leftover after parsing attributes in process `syz.4.3126'.
[  544.599044][T16673] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  544.664494][T16673] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0
[  544.681760][T16673] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.705444][T16840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3127'.
[  545.074592][T16673] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  545.107773][T16673] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  545.139988][T16866] netlink: 'syz.4.3133': attribute type 12 has an invalid length.
[  545.153833][T16673] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  545.193043][T16673] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  545.317646][T16875] netlink: 'syz.3.3135': attribute type 2 has an invalid length.
[  545.348927][T16875] netlink: 126172 bytes leftover after parsing attributes in process `syz.3.3135'.
[  545.383450][T16875] nbd: must specify a device to reconfigure
[  545.580365][T16673] 8021q: adding VLAN 0 to HW filter on device bond0
[  545.677203][T16673] 8021q: adding VLAN 0 to HW filter on device team0
[  545.721268][T10065] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.728509][T10065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.766755][T16901] netlink: 'syz.1.3142': attribute type 12 has an invalid length.
[  545.780654][T10065] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.787930][T10065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.034698][ T5186] Bluetooth: hci2: command 0x041b tx timeout
[  546.211213][T16673] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.267246][T16673] veth0_vlan: entered promiscuous mode
[  546.281955][T16673] veth1_vlan: entered promiscuous mode
[  546.317617][T16673] veth0_macvtap: entered promiscuous mode
[  546.330606][T16673] veth1_macvtap: entered promiscuous mode
[  546.353032][T16673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.375652][T16673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.417631][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.470462][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.494172][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.542004][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.644011][T16925] netlink: 'syz.1.3147': attribute type 12 has an invalid length.
[  546.721526][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.733795][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.804500][T16933] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3149'.
[  546.817523][T16933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3149'.
[  546.852879][T15848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.862823][T15848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.998115][T16942] lo: entered allmulticast mode
[  547.063981][T16943] xfrm1: entered allmulticast mode
[  547.170095][T16947] netlink: 'syz.0.3154': attribute type 29 has an invalid length.
[  547.185132][T16947] netlink: 'syz.0.3154': attribute type 29 has an invalid length.
[  547.211508][T16948] netlink: 'syz.2.3155': attribute type 1 has an invalid length.
[  547.329525][T16954] netlink: 'syz.1.3156': attribute type 1 has an invalid length.
[  547.364870][T16948] 8021q: adding VLAN 0 to HW filter on device bond1
[  547.581097][T15848] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  547.581097][T16954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3156'.
[  547.821431][   T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  547.844498][   T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.932846][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  547.945166][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  547.962615][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  547.976259][   T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  547.976765][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  547.990438][   T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.002930][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  548.048804][T16969] wg1 speed is unknown, defaulting to 1000
[  548.082518][   T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  548.093781][   T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.114451][ T5186] Bluetooth: hci2: command 0x041b tx timeout
[  548.289129][   T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  548.318135][   T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.827062][T17006] netlink: 'syz.3.3170': attribute type 7 has an invalid length.
[  548.838152][T17006] netlink: 'syz.3.3170': attribute type 8 has an invalid length.
[  548.850440][T17006] openvswitch: netlink: Message has 4 unknown bytes.
[  548.868998][T17009] openvswitch: netlink: Message has 4 unknown bytes.
[  549.050890][T17007] netlink: 'syz.1.3167': attribute type 10 has an invalid length.
[  549.069806][T16996] 8021q: adding VLAN 0 to HW filter on device bond3
[  549.110348][T16996] 8021q: adding VLAN 0 to HW filter on device bond5
[  549.299608][   T59] veth5: left promiscuous mode
[  549.360454][   T59] bridge4: port 1(veth5) entered disabled state
[  549.443033][T17031] __nla_validate_parse: 2 callbacks suppressed
[  549.443055][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3174'.
[  549.482305][T17030] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  549.790834][   T59] bond5 (unregistering): (slave gretap1): Releasing active interface
[  549.937916][   T59] bond0 (unregistering): (slave geneve5): Releasing active interface
[  549.978934][   T59] bond6 (unregistering): (slave geneve2): Releasing active interface
[  550.033607][ T5186] Bluetooth: hci3: command tx timeout
[  550.193719][ T5186] Bluetooth: hci2: command 0x041b tx timeout
[  550.298361][   T59] bond1 (unregistering): Released all slaves
[  550.424355][   T59] bond2 (unregistering): Released all slaves
[  550.438506][   T59] bond3 (unregistering): Released all slaves
[  550.560878][   T59] bond4 (unregistering): Released all slaves
[  550.575312][   T59] bond5 (unregistering): Released all slaves
[  550.696230][   T59] bond6 (unregistering): Released all slaves
[  550.814216][   T59] bond7 (unregistering): Released all slaves
[  550.937524][   T59] bond0 (unregistering): Released all slaves
[  550.951197][   T59] bond8 (unregistering): Released all slaves
[  551.076114][   T59] bond9 (unregistering): Released all slaves
[  551.106761][T17031] geneve2: entered promiscuous mode
[  551.305440][   T59] tipc: Disabling bearer <eth:syzkaller0>
[  551.363916][   T59] tipc: Left network mode
[  551.562929][T17051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3179'.
[  551.679110][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3179'.
[  551.772540][T16969] chnl_net:caif_netlink_parms(): no params data found
[  551.791498][T17068] netlink: 'syz.3.3184': attribute type 11 has an invalid length.
[  551.800214][T17068] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3184'.
[  551.883889][T17066] netlink: 'syz.1.3183': attribute type 4 has an invalid length.
[  551.961872][T17076] netlink: 'syz.3.3186': attribute type 2 has an invalid length.
[  551.964364][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3185'.
[  551.973104][T17076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3186'.
[  551.993567][T17072] veth1_to_bond: entered allmulticast mode
[  552.007009][T17081] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  552.017160][T17080] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  552.118658][ T5186] Bluetooth: hci3: command tx timeout
[  552.182282][T17077] bond0: (slave bond_slave_1): Releasing backup interface
[  552.227646][T17077] veth1_to_bond (unregistering): left allmulticast mode
[  552.358802][T17096] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3189'.
[  552.495284][T17101] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3191'.
[  552.526170][T17104] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3190'.
[  552.650955][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3194'.
[  552.760627][T16969] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.775871][T16969] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.785912][T16969] bridge_slave_0: entered allmulticast mode
[  552.802255][T16969] bridge_slave_0: entered promiscuous mode
[  552.822763][T16969] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.830312][T16969] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.847238][T16969] bridge_slave_1: entered allmulticast mode
[  552.859794][T16969] bridge_slave_1: entered promiscuous mode
[  552.872191][T17114] netlink: 'syz.3.3196': attribute type 1 has an invalid length.
[  552.919300][T17118] netlink: 'syz.2.3197': attribute type 23 has an invalid length.
[  552.948940][T17118] netlink: 'syz.2.3197': attribute type 10 has an invalid length.
[  553.056803][T17114] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  553.209440][T17118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  553.230823][T17118] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  553.317783][T17120] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.329162][T17131] netlink: 'syz.1.3200': attribute type 1 has an invalid length.
[  553.329577][T17120] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.362021][T17120] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.382112][T17120] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.415519][T17120] bond0: (slave batadv0): Releasing backup interface
[  553.488775][   T59] hsr_slave_0: left promiscuous mode
[  553.501658][   T59] hsr_slave_1: left promiscuous mode
[  553.508357][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.518065][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.755224][ T5867] IPVS: starting estimator thread 0...
[  553.790682][   T13] smc: removing ib device syz0
[  553.843553][T17148] IPVS: using max 23 ests per chain, 55200 per kthread
[  554.197364][ T5186] Bluetooth: hci3: command tx timeout
[  554.591980][T16969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.602418][T17131] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  554.630570][T17139] tipc: Started in network mode
[  554.661819][T17139] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  554.672037][T17139] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  554.692795][T13635] ==================================================================
[  554.701013][T13635] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  554.709847][T13635] Read of size 8 at addr ffff8880337ce2e8 by task kworker/0:10/13635
[  554.717932][T13635] 
[  554.720264][T13635] CPU: 0 UID: 0 PID: 13635 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) 
[  554.720283][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  554.720294][T13635] Workqueue: events smc_ib_port_event_work
[  554.720321][T13635] Call Trace:
[  554.720328][T13635]  <TASK>
[  554.720334][T13635]  dump_stack_lvl+0x189/0x250
[  554.720353][T13635]  ? rcu_is_watching+0x15/0xb0
[  554.720367][T13635]  ? __kasan_check_byte+0x12/0x40
[  554.720388][T13635]  ? __pfx_dump_stack_lvl+0x10/0x10
[  554.720403][T13635]  ? rcu_is_watching+0x15/0xb0
[  554.720417][T13635]  ? lock_release+0x4b/0x3e0
[  554.720438][T13635]  ? __virt_addr_valid+0x1c8/0x5c0
[  554.720456][T13635]  ? __virt_addr_valid+0x4a5/0x5c0
[  554.720475][T13635]  print_report+0xca/0x240
[  554.720489][T13635]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  554.720506][T13635]  kasan_report+0x118/0x150
[  554.720526][T13635]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  554.720546][T13635]  __ethtool_get_link_ksettings+0x6e/0x190
[  554.720564][T13635]  ib_get_eth_speed+0x15e/0x7b0
[  554.720585][T13635]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  554.720606][T13635]  ? do_raw_spin_unlock+0x122/0x240
[  554.720626][T13635]  rxe_query_port+0x93/0x3b0
[  554.720643][T13635]  ib_query_port+0x16d/0x830
[  554.720663][T13635]  smc_ib_port_event_work+0x15a/0x940
[  554.720687][T13635]  ? _raw_spin_unlock_irq+0x23/0x50
[  554.720700][T13635]  ? process_scheduled_works+0x9ef/0x17b0
[  554.720714][T13635]  ? process_scheduled_works+0x9ef/0x17b0
[  554.720728][T13635]  process_scheduled_works+0xae1/0x17b0
[  554.720752][T13635]  ? __pfx_process_scheduled_works+0x10/0x10
[  554.720772][T13635]  worker_thread+0x8a0/0xda0
[  554.720795][T13635]  kthread+0x70e/0x8a0
[  554.720813][T13635]  ? __pfx_worker_thread+0x10/0x10
[  554.720827][T13635]  ? __pfx_kthread+0x10/0x10
[  554.720850][T13635]  ? _raw_spin_unlock_irq+0x23/0x50
[  554.720863][T13635]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.720878][T13635]  ? __pfx_kthread+0x10/0x10
[  554.720894][T13635]  ret_from_fork+0x439/0x7d0
[  554.720911][T13635]  ? __pfx_ret_from_fork+0x10/0x10
[  554.720927][T13635]  ? __switch_to_asm+0x39/0x70
[  554.720944][T13635]  ? __switch_to_asm+0x33/0x70
[  554.720961][T13635]  ? __pfx_kthread+0x10/0x10
[  554.720978][T13635]  ret_from_fork_asm+0x1a/0x30
[  554.721001][T13635]  </TASK>
[  554.721006][T13635] 
[  554.944160][T13635] Allocated by task 5875:
[  554.948486][T13635]  kasan_save_track+0x3e/0x80
[  554.953187][T13635]  __kasan_kmalloc+0x93/0xb0
[  554.957783][T13635]  __kvmalloc_node_noprof+0x30d/0x5f0
[  554.963165][T13635]  alloc_netdev_mqs+0xa3/0x11b0
[  554.968024][T13635]  rtnl_create_link+0x31f/0xd10
[  554.972881][T13635]  rtnl_newlink_create+0x25c/0xb00
[  554.977990][T13635]  rtnl_newlink+0x16d6/0x1c70
[  554.982676][T13635]  rtnetlink_rcv_msg+0x7cf/0xb70
[  554.987640][T13635]  netlink_rcv_skb+0x208/0x470
[  554.992420][T13635]  netlink_unicast+0x82f/0x9e0
[  554.997195][T13635]  netlink_sendmsg+0x805/0xb30
[  555.001960][T13635]  __sock_sendmsg+0x219/0x270
[  555.006645][T13635]  __sys_sendto+0x3bd/0x520
[  555.011151][T13635]  __x64_sys_sendto+0xde/0x100
[  555.015916][T13635]  do_syscall_64+0xfa/0x3b0
[  555.020420][T13635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.026314][T13635] 
[  555.028632][T13635] Freed by task 59:
[  555.032430][T13635]  kasan_save_track+0x3e/0x80
[  555.037110][T13635]  kasan_save_free_info+0x46/0x50
[  555.042134][T13635]  __kasan_slab_free+0x5b/0x80
[  555.046900][T13635]  kfree+0x18e/0x440
[  555.050999][T13635]  device_release+0x9c/0x1c0
[  555.055657][T13635]  kobject_put+0x22b/0x480
[  555.060071][T13635]  netdev_run_todo+0xd2e/0xea0
[  555.064840][T13635]  default_device_exit_batch+0x81e/0x890
[  555.070474][T13635]  ops_undo_list+0x525/0x990
[  555.075154][T13635]  cleanup_net+0x4c5/0x800
[  555.079571][T13635]  process_scheduled_works+0xae1/0x17b0
[  555.085118][T13635]  worker_thread+0x8a0/0xda0
[  555.089790][T13635]  kthread+0x70e/0x8a0
[  555.093865][T13635]  ret_from_fork+0x439/0x7d0
[  555.098451][T13635]  ret_from_fork_asm+0x1a/0x30
[  555.103218][T13635] 
[  555.105612][T13635] The buggy address belongs to the object at ffff8880337ce000
[  555.105612][T13635]  which belongs to the cache kmalloc-cg-4k of size 4096
[  555.120012][T13635] The buggy address is located 744 bytes inside of
[  555.120012][T13635]  freed 4096-byte region [ffff8880337ce000, ffff8880337cf000)
[  555.133897][T13635] 
[  555.136220][T13635] The buggy address belongs to the physical page:
[  555.142630][T13635] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x337c8
[  555.151389][T13635] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  555.159887][T13635] memcg:ffff888020fdd0c1
[  555.164125][T13635] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  555.171670][T13635] page_type: f5(slab)
[  555.175661][T13635] raw: 00fff00000000040 ffff88801a44b500 ffffea00015b4800 dead000000000002
[  555.184242][T13635] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888020fdd0c1
[  555.192845][T13635] head: 00fff00000000040 ffff88801a44b500 ffffea00015b4800 dead000000000002
[  555.201600][T13635] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888020fdd0c1
[  555.210364][T13635] head: 00fff00000000003 ffffea0000cdf201 00000000ffffffff 00000000ffffffff
[  555.219030][T13635] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  555.227692][T13635] page dumped because: kasan: bad access detected
[  555.234105][T13635] page_owner tracks the page as allocated
[  555.239819][T13635] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5873, tgid 5873 (syz-executor), ts 90608598275, free_ts 90502727594
[  555.261179][T13635]  post_alloc_hook+0x240/0x2a0
[  555.265953][T13635]  get_page_from_freelist+0x21e4/0x22c0
[  555.271506][T13635]  __alloc_frozen_pages_noprof+0x181/0x370
[  555.277319][T13635]  alloc_pages_mpol+0x232/0x4a0
[  555.282170][T13635]  allocate_slab+0x8a/0x370
[  555.286682][T13635]  ___slab_alloc+0xbeb/0x1420
[  555.291711][T13635]  __kmalloc_noprof+0x305/0x4f0
[  555.296618][T13635]  __register_sysctl_table+0x72/0x1340
[  555.302084][T13635]  __addrconf_sysctl_register+0x328/0x4c0
[  555.307816][T13635]  addrconf_sysctl_register+0x168/0x1c0
[  555.313365][T13635]  ipv6_add_dev+0xd46/0x1370
[  555.317969][T13635]  addrconf_notify+0x794/0x1010
[  555.322853][T13635]  notifier_call_chain+0x1b3/0x3e0
[  555.327981][T13635]  register_netdevice+0x1608/0x1ae0
[  555.333190][T13635]  veth_newlink+0x5cc/0xa50
[  555.337700][T13635]  rtnl_newlink_create+0x310/0xb00
[  555.342906][T13635] page last free pid 1142 tgid 1142 stack trace:
[  555.349225][T13635]  __free_frozen_pages+0xbc4/0xd30
[  555.354344][T13635]  __put_partials+0x156/0x1a0
[  555.359110][T13635]  put_cpu_partial+0x17c/0x250
[  555.363868][T13635]  __slab_free+0x2d5/0x3c0
[  555.368285][T13635]  qlist_free_all+0x97/0x140
[  555.372881][T13635]  kasan_quarantine_reduce+0x148/0x160
[  555.378346][T13635]  __kasan_slab_alloc+0x22/0x80
[  555.383198][T13635]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  555.389102][T13635]  __alloc_skb+0x112/0x2d0
[  555.393521][T13635]  rtmsg_ifinfo_build_skb+0x84/0x260
[  555.398915][T13635]  rtnetlink_event+0x1b7/0x270
[  555.403687][T13635]  notifier_call_chain+0x1b3/0x3e0
[  555.408805][T13635]  netdev_lower_state_changed+0xc6/0x140
[  555.414440][T13635]  __team_port_change_send+0x1cc/0x4f0
[  555.419902][T13635]  team_port_change_check+0x92/0x210
[  555.425193][T13635]  team_device_event+0x49b/0x600
[  555.430137][T13635] 
[  555.432464][T13635] Memory state around the buggy address:
[  555.438091][T13635]  ffff8880337ce180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  555.446149][T13635]  ffff8880337ce200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  555.454293][T13635] >ffff8880337ce280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  555.462435][T13635]                                                           ^
[  555.469916][T13635]  ffff8880337ce300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  555.478060][T13635]  ffff8880337ce380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  555.486122][T13635] ==================================================================
[  555.532294][T13635] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  555.539548][T13635] CPU: 0 UID: 0 PID: 13635 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(full) 
[  555.549125][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  555.559215][T13635] Workqueue: events smc_ib_port_event_work
[  555.565060][T13635] Call Trace:
[  555.568341][T13635]  <TASK>
[  555.571285][T13635]  dump_stack_lvl+0x99/0x250
[  555.575905][T13635]  ? __asan_memcpy+0x40/0x70
[  555.580523][T13635]  ? __pfx_dump_stack_lvl+0x10/0x10
[  555.585731][T13635]  ? __pfx__printk+0x10/0x10
[  555.590335][T13635]  vpanic+0x281/0x750
[  555.594320][T13635]  ? preempt_schedule+0xae/0xc0
[  555.599394][T13635]  ? __pfx_vpanic+0x10/0x10
[  555.603907][T13635]  ? preempt_schedule_common+0x83/0xd0
[  555.609373][T13635]  ? preempt_schedule+0xae/0xc0
[  555.614226][T13635]  ? __pfx_preempt_schedule+0x10/0x10
[  555.619687][T13635]  panic+0xb9/0xc0
[  555.623417][T13635]  ? __pfx_panic+0x10/0x10
[  555.627837][T13635]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  555.633744][T13635]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  555.639726][T13635]  check_panic_on_warn+0x89/0xb0
[  555.644666][T13635]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  555.650646][T13635]  end_report+0x78/0x160
[  555.654892][T13635]  kasan_report+0x129/0x150
[  555.659401][T13635]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  555.665387][T13635]  __ethtool_get_link_ksettings+0x6e/0x190
[  555.671195][T13635]  ib_get_eth_speed+0x15e/0x7b0
[  555.676048][T13635]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  555.681454][T13635]  ? do_raw_spin_unlock+0x122/0x240
[  555.686661][T13635]  rxe_query_port+0x93/0x3b0
[  555.691252][T13635]  ib_query_port+0x16d/0x830
[  555.695877][T13635]  smc_ib_port_event_work+0x15a/0x940
[  555.701257][T13635]  ? _raw_spin_unlock_irq+0x23/0x50
[  555.706450][T13635]  ? process_scheduled_works+0x9ef/0x17b0
[  555.712169][T13635]  ? process_scheduled_works+0x9ef/0x17b0
[  555.717895][T13635]  process_scheduled_works+0xae1/0x17b0
[  555.723449][T13635]  ? __pfx_process_scheduled_works+0x10/0x10
[  555.729433][T13635]  worker_thread+0x8a0/0xda0
[  555.734040][T13635]  kthread+0x70e/0x8a0
[  555.738110][T13635]  ? __pfx_worker_thread+0x10/0x10
[  555.743219][T13635]  ? __pfx_kthread+0x10/0x10
[  555.747813][T13635]  ? _raw_spin_unlock_irq+0x23/0x50
[  555.753096][T13635]  ? lockdep_hardirqs_on+0x9c/0x150
[  555.758296][T13635]  ? __pfx_kthread+0x10/0x10
[  555.762987][T13635]  ret_from_fork+0x439/0x7d0
[  555.767776][T13635]  ? __pfx_ret_from_fork+0x10/0x10
[  555.772930][T13635]  ? __switch_to_asm+0x39/0x70
[  555.777761][T13635]  ? __switch_to_asm+0x33/0x70
[  555.782552][T13635]  ? __pfx_kthread+0x10/0x10
[  555.787154][T13635]  ret_from_fork_asm+0x1a/0x30
[  555.791931][T13635]  </TASK>
[  555.795234][T13635] Kernel Offset: disabled
[  555.799557][T13635] Rebooting in 86400 seconds..