last executing test programs:

1m50.35493693s ago: executing program 4 (id=1798):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000001818200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x90)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, '\x00'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xff}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}, 0x1, 0x0, 0x0, 0x24004804}, 0x0)

1m50.057267836s ago: executing program 4 (id=1803):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = accept(r0, &(0x7f00000001c0)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000100)={'wg1\x00', {0x2, 0x4e20, @rand_addr=0x64010101}})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYRES16=r0, @ANYRES8=r0], 0x48}}, 0x40000)

1m49.799209796s ago: executing program 4 (id=1808):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x10, 0x0, &(0x7f0000002580)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000001c00)={0x0, @in, 0x0, 0x0, 0xffffffff}, &(0x7f0000001cc0)=0x9c)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
bind$alg(r2, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x1)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x7, 0xfa, [@remote]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@lld, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0xa00}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90)

1m49.550015858s ago: executing program 4 (id=1812):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket(0x1, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20)
close(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020273797a32000000000900010073797a30"], 0xa8}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4c}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x8, 0x2, @l2={'ib', 0x3a, 'veth1\x00'}}}}, ["", ""]}, 0x34}}, 0x4081)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8)
sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x10, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r7}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r8 = socket(0xa, 0x3, 0xff)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @private1, 0x4000002}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@random="cfb14e407d32", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "7afa2c", 0x38, 0x3a, 0xfe, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [], "eb059d2f7f8f79eb"}}}}}}}, 0x0)

1m49.127135079s ago: executing program 4 (id=1818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2})
ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00'})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4)
sendto$unix(r2, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r5, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20008840}, 0x8000)

1m47.85920332s ago: executing program 4 (id=1832):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r3, 0x901, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x80)

1m32.686745625s ago: executing program 32 (id=1832):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x24, r3, 0x901, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x80)

3.117456718s ago: executing program 1 (id=2729):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x881)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r0, @ANYRES64=r1], 0x28}}, 0x48000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000340)=0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
epoll_create(0x1)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={<r7=>0x0, 0x1000, "60eddab19211e01a7f0b7688a14670df9d77c8dbc2f271efa427cf281c025745fd337ad4d93a88402fa7545bb5313cd4d90a261da4a323f1901d079f40e57cf6a2541a715f9ef7e866bb9e1f13bf1ae34d2e6decceb6f56f50b4424f88d353ce8a2fc4fa8e91adadeea5255152788a529c411b4116d45e3579828e93db69a25e703aec82cff7360ab61cc43f1a20f50f3e384e05e1e456d5dd60943e8901f46b4b03bcc63ea9069c4a535ee5469c1735b5e3861af0c47a64870bc7e8a5f6cb2c691256b6aba214ac3d1fb32303e95d7be395da1ef1eee99ee24fc4e4f61d2f90e8a003c37e94b6f96a397f6774ec5a6e8bda5ef309ef63bd554e32690f8c96c24cfa7f775a63880c9aa6d55c93d632a5b99edbe60a4bbaf0a018e00b21c217718a49be19ed5b55dc04965e112081af061c6e64f33852a12368d0e7e1a14831e95dd0e18d334f5f1d49e59db0f975fba906a0d016888feda1a356046a7c46a4871ceac3d6773c51c36ca5c6d182818d0401a06e3dec952ceb31ab0ccfd955807df9e92b2b87a5663e024a44d469d0524c0b5c43e3aa5edf7d0ed2c45e4e594b40313ef107d1042f42eac7761da8b9df49518c33c8ddf321b40576c39e70d2e3b27d6079aa292a8276cc8bac3634d1a2f56e00df20cc2cf8c8e357affe8740cb0cad339085b71221eafdac93aea575643faf6b3f184547dc6ae09f66cb9f56e0d2135d72cf644ffcde30ec12c7bdcaef06d01de6260d1791ee43e517967f442013fd78cd3f1b8f2cde0a389b071b608d9f79574f1c850aef7ae09a1b9ae34f7752be98467fa4a55e6931d0d661ecf6e7c05dedd3372e8de22b3c5b02ecad15845b96e152622868a96cad1adea6b1ec2542fee4c585c9e82bf5eb3bcde2d4d9c78b387c75487875d55c928607c101152a5a872007cfceab97f65c09e985bae5c6f4a026cda381a2474539acf1d71d683d996f9f2abfbdc77380f72c17fef0fc8769781687c1598ba00f5a2ac81616fb2480f399a28f7e875ffbf95a1e87a0d72f122f5b83af180336afe4a797c91e7c500a44fc39726a0de7ff4b92ea1caf9ae0b0436c327ec14ce327be3e85ad67b68b95b599786293dfb484eaf8d5b7be89f7581926d492c921c4ce0ef7081a7fddc003a8d796bf2e042e0f2ece1d92244af075407d1aceb13c045ab460018f863dbe032c1c8b506e0862b4b76439e6ed82b834bbdc652e9ab79a7cd211b795c3dfbb3df972c75cade2594a848e260068c95eb08bbdfdb3e11fc5308c4a4ded6383e0e3f99d6fad9a19983d2d7a68a90933ff872a69ae3b1f2ec8e0dcfabae2fbb58fcd94713c55326e43eb9c3d176d1ec1f05a833275a1fb0f8bdf25bdfd9a807e01890ae75473568676d2bb66faa26c97781e6a1ec42935e4c662453d2f8757f2233b6f723e2e0ef7804481a805e5236abd824835030a779a50d1c7c2b092d58ee4323d77341071e301e99e81ddf67f4b6908f52f44a18d1555800f962e0989607e6559f947a0bec1e9a726bdf5905b4be96d37395d4dd150ef2cbbc17dc207898aa0e1809560158ea6e4fa1a2ba1e5670fd1619eecf09f6be693a1ca2bf7b0dc898952a10372462ba5de61eaa737dae3f2b8b6c7b2e2ecd9c1638320954260f568d807dbda83bdd099a5cba7e4303ddbd69f7c401c1453f982c90e03db549ff1f35c75fda0ddc8015a043cdee767f87f1125aee7d365bedcdaf1057be3c85a4403ef3e49b73f892705761bf39fd173480939057f2fcce92be20858c228fcb896f1003f71ee92d4ccdb236b2fc3e96d1ee7c4613c16c0d0553dbaf1737f234e61032c2172f5c1d1eb1b48fddec1a08f5df85c48c4388e9b12f35c146798f3f1a4cb5ca197bfc328ed114eda2d1ecee0b873aec1dda85fa3f570cd4fbe87140cac562e6970acc75bb9503bbea5dd2c5de83ace0c13fe57adf8b564237fc8935771fcc56bd9017fcf54efd18b7682ea80a735a3af2634cc940afab4d56a0527159ae79b8f4c87e1e61ae9ef32a0b2ba8c516ba95521a98bbfc22b4e06cc376b6efbde03bb08908b1cb6ae3a2d48eac9d75826af39da2b3a94627d2d16f374aa46b3bd0b977643814717265f7f2c7b4c91b8f58fac3cfc985e4e5891c169e10355542c02d6752dc9e581691083c06b322fb71d1c69edac0dc19cadb71e2512be9ffcec7c359e92482f1441daf808e19ee43ebb875f9714f1d15dca4105fb78411e90e602449d388f1411e4aec30e09048b6ac2357a65c0f4a8ef4f578c09b576c104f4e221ff0bb7572439f27655a3ab7eca2f9e646d7b2362ac8a17fd6f38b3bb411a774541246f3aaee254e6007648dec179f1f4af7a8e9524d5ff68ba7f0b4aff0d8e9cf7c6f28e7eb22072cbfa6073fe071ed4ed9a5931d647a4b1af62ba4317f14c29ea82be1966a62568326d1dd37dcc3fa1a8f830f602494f05593f9aa660e179513c4c71663a40df17be2b4e8e396c74d34a58305a097ba980146edc41fa91fc6b86c0ba69f8f42339a69a1ede2cf4a843f38980c3684b77145e140b24231493190acb750f1ca1e996058d0b3eb0229b630903512409054756dbd13be2e82dfad016d69d19d6d3e634a5cdec8a27caec82746921bbf71a3c71eb0bc19a7d6a01a769f895c18312bb874ff32295a8c9551f37c0dc0d95de2b65f678f20d82f65111592e4d0e7df488f5be0fc811b39e633c7ecfbf812e0af6bb7ef367ecaa1d1b89b372a27ba773af2c868860c4beadce6b45566ae8ff4c02defae0070dc92d718f80b5f5128111064a8fdcbfa27de5fe6027422fb7cfcac9a530c5c58ecf433718a327c784e6d4d5c58743c042db04919f8509e17c60ef16491ce540e975d5fbc05a2b3f4b44f9ae4932cefb2dada3e61e1412807c9446faf071110819bd2fb0b0d37ea53771a279bffe28ec634ad24e6d454460d78d4ab8dd0bafd3bffcbbba11a78a4b694b698573d12763f4d777da37cdaf34ec7168955015a92241b62aa161b03d4fa324079dfddd1d3a78b899d4ef5477ba326f3b30e1990d921f8124fff4b27feff14e6fd63347945d31c80955e8254bffaad9bef9836d002e59f8b6e200750de4d166ddce04c4827fd2afe098814aa81a92cbfeffb9e2fc4965b8a1cece77fcad8e21f1c25782a55fd13c6891de0ba417a19c980e7583429801bdf52b4084967ddd9923b1ca1b79a48608c137e79232bdec59e53c8f45938ebf4f6aa0886678975f2f8061e2447d593ff194a9e95bb35c1592e8aa5eaced12121ffacdd1a0d32ce623b9ae2c5e8ee586e6fcd158a90375a880c0a8d2ff99ce4d45c3238abab7ab9a186c617608593d0d2b708e0469d7e554e5f5e999e1ae695e85d4e261f787192de095a23bea34874e355e6d95ea3001b7ee9c1bfc12e8415d8d4bb3debac986d6d359d1366ea44c42421c8808f804a4f9f795c5b2058377455fc3d96cbfc364d67ec0f39f505a8a5623e439566a97c9dceba24eb90f851dfc3db188017adf699ea586854fad0492f22e0ec0058e5409426c4c57b8d075b3e1c88d79eb0d59b29595248ecd844b534c9f2131aa104418abe88fde2fbe83654ea4234aeb5935ad645f0912c318a5584d6c1ed6e6dfd06097ab325f5bc24b8b226c62242a9e50c5de269833393a6c8f8ff81d5af413d08bfbb1ed5fdff2241db4c91d15748070885b7c56863016bfdba951d663a8949b340b892fb67e5c4842b3e22731e92fa822294d933f1c68dddc17016cf3f7737804ae73db86134df24d457ee50f411390677259685c1a24fe4b8c2fdbb8f8231aa114218b36dce6426448fefc2d2f93436df0627c0897da68774fbd39faa61cf4afd63e13100848739b4081c545e994b93aede489a02bd74afed59511a0dc783411d9d9d5671f5d3f2413172d0373847e4558b243809f4c2da67beb1d769f360d048c538fa8fccdb3a44b028222a6b8f4157e88b794a3b23d55152f3ca5959374c878625fc3f4c0620a10ee3bed4ee28d5e82896d8ae101221dc88afd412fcfb5f16277350eb67cd36e4d85245edf8b90ae251e63b77a5996ab25750105a8a63d5de140b9e6cbc3a57f2b14f25fc9202cfa648beb11fafcb58734478c108c9c8cbeb512f7f2ec097af0fb11cf3d94cb9f5e27672108e4a2327834424f3db9448938e833013b5bb3f34c9050536673b0ceb5b98082023f36244f8fb88d019707789753e54c16ea4644c6fd23a09af22e3621906be14ffa3dd0c2d19fef5a301a9570298a0086b21318a78b2148f05ba5fe0be532ab0cd6c4a982672f9f36fb7729773ded78f58522c373053fc48a36629ae3834c472ef8565709c8303cd88c3d81d10021d770a428d03992c6b73d1f74fd136dffe8ae70f95254391faf407ca2eccfcbcee1255a56b403e55604e84e89814a878605029302d01f0d6eb6ce6e23a33c96b5fd9375fdbee54f49c0ec5ede54a1bceb527cff711bf2ec4aead83e9981c3a596eb46d44587d8f3966bb7aedc626ae44e45312d58990ae9196bc35164569a1015c701fa09bfe6425257c3bd2acce4b53fb931511b8f9c9d67b3fbfa0ee5da3fe936015f8779d732b6ea76314029a2e5e724697ec8225bc86917970e6a33e4946bf2f49ced8b1540b6af306ec18208ca91e61aabb15fa4d766da41147546122c716888f21828f181635dcec93ee519dab9f60fcfee9912303f3a6ba72b127122975c50776cf2988a8d76266d46786fb68ac10247ee27a5cfa46793b55386d6ed4366070baf1e656b662222c5fae844820e4f807188fd30ef03cca31e5b8e0e9e162e01d046a61c228f905d86623822c54e49a045b253d4148bee567fd3a6cd041cae473d617c2ce1273738bbccf8034c1220cc47f6635063f1d89b8664cec4e11a5cfcad00c6e68f0d774b4fe2127cb973cc415a91b4e55c4357ff6afb87ae256f2685f5f79abbb190c67c1c260849662afa30fd140fad1ebfc77613bdfedfb4ddd91173f8b81d6c97a7ab63adc95b4cb674d796ce65bf578ff46875f7f96b3bcccc42ce9efdf0f52acc4df2e32b0093af73a7bf1668b8aa0e65f4d542d638fe27cfe15514b49736d0da2c9add4ca2dd03e6578d482ec33779e7a64102b6a1f9b61074166096b2c71795c239b35f6b08984f3cccb53285950a9d1d9aef712532fa03d5a235fb036fb48e0305b93f115ae545275828506e4c5e681d9b083439439cbeeec915ece69accc80dcb7ce613ccecca1e408fb6b54c9068b3dba79cc3d22d387a23fbfa48a667d9262508af564ae71ceffe7d1fd45446dce56ff21ea931b706423f1976042e1d2fb6debe9c439977eb25f611ea87059c6805169deaaedf5171cf7685ed03448a7675537528e32dfa0e06690c03a137d85bf910ba48da7013b86fe056b4a811af53b29241dbafaaf4fe1e5d5e3b9b57a826c65bd7bd6be9c9b0d32f38ed9a6e94859634ffe4bb2023904ea9786f7d014d68e896cec1e10ecff78244185e6f7ae6aa5567c30b8133dfd1bc2675056d18a159aa3880c68bdd71214155f4a6b3e8f2d9675c7f084cdf290ad3c33c482b42a920352e172a61a8b736bd934ac0dafbc285d5631377ebc4059e06ddf0bbbb8b01607e615153d45633f4d6ce5ef5221c6eb22eaec3ec1ed121adaa02202ce94c720af882b3164d6d79e8ec35a4994163e5a46248a714e3f77a584cf492ed8b8f1d73af89848ca05f48be2987733dcbae3dd424d20ea036c1ff1db8c5d9d650f41c26fdda223909fd89f6bc0730f292afae24aadb2236024d3c541300953b11eb68afbd"}, &(0x7f0000000000)=0x1008)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x45}}}, 0x84)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x100, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x70bd26}}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x10040080}, 0x0)
r9 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r9, &(0x7f0000000380)={0xa0000001})
epoll_pwait(r12, &(0x7f0000000140)=[{}], 0x1, 0xe, 0x0, 0x0)
listen(r4, 0xfff)

3.052711571s ago: executing program 3 (id=2730):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_buf(r1, 0x29, 0x7, 0x0, &(0x7f0000000180))
listen(r0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000040)="bd5d65bc776c7d486f2ed0f397b7c26931bdef8584f6f5eca6e44c58548b9c41c2667cec15210edfbd25a946237cac827efe017777ce12558ac42dcde9232d1fd76a532aa0a0926c02c82ddeb1518bd33a0304d130cc310e975b72ccd02bf5a056b6", &(0x7f0000000100)=""/12}, 0x20)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711734000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00p\x00'/20, @ANYRES32=r6, @ANYBLOB="0c0001800800010062000200"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4)
recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0)

2.793524478s ago: executing program 1 (id=2732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, &(0x7f0000000040))
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x0, 0x0, 0xffff, 0x101}, {0x0, 0x0, 0x0, 0x8, 0xa, 0x3}, 0xffffffff, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb3b74bdedfd15113}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x9}}]}, 0x80}}, 0x4000080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newnexthop={0x30, 0x68, 0x800, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x1a}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000)

2.486043568s ago: executing program 0 (id=2734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x10001, @mcast2, 0xa}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={0x0, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x74}}, 0x0)

2.449328549s ago: executing program 2 (id=2735):
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x440, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x1, 0xd, [0x3ff, 0x3cc, 0x80000000, 0x9, 0x9d, 0x0, 0x80, 0x5, 0xf, 0xfffffffa, 0x9b, 0xceb2, 0x7f, 0x2, 0x7, 0x2, 0x6, 0x3ff, 0x4, 0x1, 0x0, 0x5, 0x80000000, 0x7fff, 0x8001, 0x2e, 0x8, 0xe094, 0x0, 0x3, 0x6, 0x5, 0x1, 0x7, 0x2, 0x10001, 0x3, 0x30, 0xe6a, 0x5, 0x999, 0x400, 0xfffffffa, 0x6, 0x9, 0xffff, 0xffffff99, 0x8, 0x8, 0x6, 0x3, 0x6, 0x1, 0x2355a0c8, 0xf23, 0x1, 0x10, 0x6c7b, 0x6, 0x0, 0xffffff00, 0x7, 0x3, 0x691], [0xfffff800, 0x0, 0x7, 0xfffffff9, 0x8, 0xd8, 0x7, 0x8, 0x10, 0x1, 0xfffffffc, 0x5, 0x8000, 0x2, 0x1, 0x9, 0x2, 0x6, 0x7, 0x9, 0x8, 0x6, 0x7ff, 0x6, 0x3b6b, 0x7, 0xffffff53, 0x0, 0x4, 0x200, 0x7, 0xef7, 0x2, 0x3996, 0x6, 0x8e, 0x3, 0x5, 0x3, 0x100, 0x2, 0x9, 0x0, 0x4, 0x1, 0x2, 0x1, 0x1, 0x70, 0x1, 0x1000, 0x9, 0x3, 0x0, 0x401, 0x1, 0xffff0001, 0x3, 0x9, 0xfffffffc, 0x0, 0x3, 0x180, 0x5], [0xb, 0x5, 0x38000000, 0x4, 0x0, 0x0, 0x6879, 0xfffffa10, 0x3, 0x1, 0x3e42, 0x40, 0x10, 0x401, 0x1, 0xfffffe00, 0xf1, 0xc, 0x1, 0xffffffff, 0x73, 0x4, 0x8, 0x0, 0xfffff529, 0x3, 0x8, 0x3, 0xacb3, 0x800, 0x5, 0x8001, 0xffffffff, 0x1, 0x93b9, 0xe, 0x0, 0x8, 0xe68a, 0x8, 0x7fff, 0x10, 0x1fffe, 0xe, 0x1, 0x9, 0x2, 0xa916, 0xf, 0x4, 0x6, 0x2, 0x1ff, 0x9, 0x0, 0x4, 0xbb, 0xa93, 0x400, 0xffffffff, 0x7, 0x3, 0x3ff, 0x7ec], [0x3, 0x3, 0x5, 0x0, 0x101, 0x0, 0x1, 0x10000, 0x97, 0x101, 0x5da0d508, 0xff, 0x2, 0x7ff, 0x8, 0xd7, 0x2, 0x1, 0x5, 0x6, 0x3, 0x3, 0x2, 0x5, 0x4, 0x0, 0x5f34, 0x80000001, 0xfffffffb, 0x7, 0x9, 0x3, 0xffffffff, 0x1000, 0x6, 0x8, 0x979, 0x1000, 0x1ff, 0x4, 0xd63, 0xc6e6, 0x8001, 0x3, 0x7ed, 0x12, 0x1, 0x48121527, 0xffffffff, 0x1, 0x2, 0x2, 0x8, 0x80000000, 0x5, 0x1, 0xff, 0x2, 0x5, 0x76, 0x4, 0x8, 0x6, 0x400], 0x1e, ['\x00', '&-\x00', 'v\x86~*])\xab$),{-\x00', '\x00', '\x00', '\x00', '%/\x00', '\'./!%\'\x00']}, ["", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x98, r1, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc9, 0x44}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x20048004)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5eb9f89b}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8001}, 0x20004004)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xec, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c080)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000a80)={0x5, [0x9, 0x7, 0xea38, 0x9, 0x8]}, &(0x7f0000000ac0)=0xe)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001000)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000bc0)={0x3f8, r5, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x49}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88fb}, @NL80211_ATTR_FRAME={0x3b9, 0x33, @data_frame={@a_msdu=@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @random="c100c62b55e7", {0x3, 0x4}, @device_b, @value={0xf, 0x1, 0x1, 0x1, 0x5}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6007}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x1}, 0xc0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000001040)={0x1}, 0x4)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f00000010c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001100)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001140)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001180)=<r11=>0x0)
sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x4c, r8, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), r7)
sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f00000013c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r12, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000001440), r0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001480)={'team0\x00', <r14=>0x0})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r13, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r14}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r15, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64840}, 0x80)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)=@bridge_delvlan={0x24, 0x71, 0x800, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r14}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40080)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001800)={@loopback, @initdev}, &(0x7f0000001840)=0xc)

2.42662163s ago: executing program 1 (id=2736):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xa9732679}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040001}, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140040000130800024000000f04050200000000000000000440000000060900010073797a30000000000900020073797a3200000000140000001100010000000000000000000a95d0abceca16fa9c50efde00af2730dd170773e2600e07374b542b47111d5b448d66ebb1dd252db0b0e95bfeba8f000000"], 0x8c}}, 0x0)

2.187337357s ago: executing program 0 (id=2737):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x2, 0xf, 0x1, 0x8, 0x1, 0x3, 0x1, 0xa, [0xffffffff, 0x1d8, 0x401, 0x7fff, 0x10006, 0x9, 0x1, 0x9512], [0x2, 0x1, 0x7, 0x9, 0x5, 0x8, 0x4, 0x99, 0x4]}})

2.16128604s ago: executing program 2 (id=2738):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32)
r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x676, 0x8, 0x0, 0xa, 0x8, 0x12, 0x9, 0x1, 0xd, 0xad, 0x6, 0xf, 0xd, 0x0, 0xffff0001, 0x2707}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x98}, 0x4000011)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) (async)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x10, 0x80800) (async)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
r9 = accept4(r8, 0x0, 0x0, 0x80000)
sendto$packet(r9, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) (async)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) (async)
write(r10, &(0x7f0000000080)="0b000300010001", 0x7)
ioctl$BTRFS_IOC_QGROUP_CREATE(r10, 0x4010942a, &(0x7f0000000380)={0x0, 0x5}) (async, rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r13) (async)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r15, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8000000036657c0b1c31dfe7e57f2f135f281887d294bbedc535f72be45331882d972722b2e5bec5e72c1b2afc06b7b02c68bdbe29d2228c883d7f79920e00d018", @ANYRES16=r15, @ANYBLOB="000126bd7000fbdbdf253b0000000c009900010100006400000004006c000600cd000400000004006c00050018012a0000000800a10002000000050019010b00000008002201ae0000000800a100ffff00000800cd000600f3fe04008e001600cd00515d1506a6ce0400030005007b0b04000500000004008e00"], 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x80)

2.085106295s ago: executing program 0 (id=2739):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000140)={'vcan0\x00'})
getsockopt$MRT6(r1, 0x29, 0x4e, 0x0, &(0x7f0000000bc0))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000480)="b0f5606c3f2bb874b026bc639b5767db7e37b5aee564345c41e196461c86be4b7b5f5f0c950302e577dedb7233205a32663471244292ad1de16abefcdd3534c073017c2a76e6a82d0203ad72582c0c99f3e526c37c279b66b4bce5deda6c227db8315f29ade538d5e0261ff13561bca30ffa575ab25ced37ef3177ff8f7ce5990335215a38592ab64f2dd972b1d5c02b2e03b97f7fae1e55457e160fbd864ff3c084fecce49d7fa9bde97d823fef0583beb969f899cce3ed25b8395e6a8ce6f8e13ae8c4d311d7ebe16ba2c36056db4de0a7093cab226fc51a3c0c432b1730b59c050d", 0xe3}, {&(0x7f0000000580)="451c0963ca11b934e0ef948d9c3e7da0034ddd555869ec7e0f480e32f21cd83a724ccefdaaf54d974c76897a11de5f28c8aedbc5025e7f4f4ad8e34281eea7f8e6b0acfda9b26307bcee1d5edb24a1e00b1db6665543a0ff80a7bd32704dab96049eb2751120cacc3607b8b144ba70c2f42679fb6692e89e2f2ab4a5963ff3d62745", 0x82}, {&(0x7f0000000640)="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", 0x595}], 0x3}, 0x4048081)

1.899311577s ago: executing program 5 (id=2740):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1b, 0x4, @l2={'ib', 0x3a, 'xfrm0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x24008894)
r1 = socket(0x11, 0x6, 0x9)
syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1)

1.699071089s ago: executing program 5 (id=2741):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x18)
sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x6eb}, 0x1c)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0)

1.618341006s ago: executing program 2 (id=2742):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x18)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000002680)=@ethtool_cmd={0x15, 0x6, 0xff, 0x200, 0x5, 0x0, 0x9, 0x5, 0x1e, 0x2, 0xede, 0x7fff, 0x7, 0xe, 0x29, 0x3f4, [0x200, 0x8]}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.539089792s ago: executing program 0 (id=2743):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0x2, 0x6, 0x9}}]}, 0x38}}, 0x20040810)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r2, 0x300, 0x8002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

1.414150432s ago: executing program 3 (id=2744):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711201000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0x0, 0x37}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = accept4$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80000)
accept4$nfc_llcp(r1, 0x0, &(0x7f0000000200), 0x80000)

1.347248921s ago: executing program 2 (id=2745):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000020601000000000300000000000000000c000300686173683a69700005000400010000000900020073797a3000000000050001000700000005000500000000000500010006"], 0x4c}}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xcc}}, 0x0) (async, rerun: 32)
r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r5=>0x0}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="798609", 0x3}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0) (async)
r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
close(r9) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x12100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_LEARNING={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.277491749s ago: executing program 0 (id=2746):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@delchain={0x24, 0x66, 0xf31, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {0x9, 0xffff}}}, 0x24}}, 0x0)

1.222593932s ago: executing program 3 (id=2747):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[{}], 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.155017344s ago: executing program 1 (id=2748):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0))
socket$kcm(0x10, 0x2, 0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43cfffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x10011, 0x2, 0x2, 0x5, 0xc}, 0x20)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc)
getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66)
write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38)
setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000240)=0x1, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5, 0x2, 0x3, 0xa, 0x26d3, 0xeb2}, 0x20)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r2, 0x8b32, &(0x7f0000000040))
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a000900000000000000000002"], 0x2c}}, 0x0)
ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000280)={'ipvlan1\x00', 0x80})
r6 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', <r7=>0x0, 0x7, 0x8, 0x7, 0xa881, {{0x1e, 0x4, 0x1, 0x2, 0x78, 0x64, 0x0, 0xff, 0x2d, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0xc, 0x9c, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x7}]}, @end, @ssrr={0x89, 0x13, 0xe1, [@multicast2, @loopback, @local, @multicast1]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x9e, [@private=0xa010102, @loopback]}, @timestamp_addr={0x44, 0x34, 0x28, 0x1, 0x2, [{@local, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f22}, {@private=0xa010102, 0x8}, {@multicast1, 0x101}]}]}}}}})
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x23}, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x4, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, r7})

1.091130806s ago: executing program 5 (id=2749):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x200, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, 0x13db}}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x40844)

894.19319ms ago: executing program 5 (id=2750):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async)
getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084484)

851.433576ms ago: executing program 0 (id=2751):
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x64cae002, 0x0, 0x3ff}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0x7, 0x3, 0xc, 0x9, 0xe2, 0x0, 0xb, 0xb3, 0x65, 0xb1, 0xee, 0x6, 0x7}, 0xe)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x80, 0x5, 0x4, 0x4}, 0x8)
sendto$inet(r0, &(0x7f0000000140)="33b24c72673bf9f35dab4c7c36d3e9adf90d7d035b739070343b1c809c9fcf60c319a1232c33d616a7aa416dce20196d055327dfa47941ec009222aa3623f885eeed1d5c3c1eb0920f25db0b3d2ae72b84ce8f64518a60c1daba0c3ee5c3d4db3a2036418afd59a389bd7d0bbb4a98682192d3b385fd9a7f020fe9bbf18c8f768f07", 0x82, 0x4, &(0x7f0000000200)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000808}, 0x80)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000340))
ioctl(r2, 0xfffffff8, &(0x7f0000000380)="06f1a4723baaadeffaec422f179de3a068e08f578a3716a1f34baf053a9f897fcf5bd287d37dce43d0703618d31f4a955db0ba0374b3424fc3aa219222757a895ec9046817cf0b1b575d49a89ada856eea27871b8f7c7020fc5b1007724969c8de07f2efe6b0c24356e5c0db571708204efbfff4d140c333ac059bdabcde05018c1e0a5060aae5d1")
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10041}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xdf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x23c, r6, 0x800, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x118, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xee3c7c427b39f7de}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x23c}, 0x1, 0x0, 0x0, 0xa000}, 0x4)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x24}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x300000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x40}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040040)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000b40)={'vxcan1\x00', 0x400})
r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14, 0x800)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000d00)={<r8=>0x0, @multicast1, @multicast2}, &(0x7f0000000d40)=0xc)
recvfrom$packet(r7, &(0x7f0000000c00)=""/241, 0xf1, 0x40010120, &(0x7f0000000d80)={0x11, 0x2, r8, 0x1, 0x6, 0x6, @remote}, 0x14)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000dc0)={0x0, 0x8, 0x9, 0xd1, 0xb, 0x1, 0x5, 0x2, 0x9, 0x0, 0xe, 0xa, 0x1, 0x6}, 0xe)
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000e00)={'bond0\x00', 0x9})
r9 = socket$rds(0x15, 0x5, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000e40)={0x0, 0x10, 0x3})

715.219689ms ago: executing program 3 (id=2752):
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$unix(0x1, 0x2, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64)
r3 = socket$kcm(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xffff800016adffff}, 0x20) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r5=>0x0}) (rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c000007000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x234, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "368a56f23321214d030f406756d24295fbde421cdf5c25aab0d55a8ed0aeda80b1aea4ace42df9b8d1659f1bbc208f9a5d69d6"}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "f59b22b98b2e82e3628cad7b28dfeb05db7b3ab76008a4ff0bc229e236bf401d0d8d4869c14047e1c95219c744398996173dfce60decd03d823f383e1b0fd5e84a57802aa7b81ba3c1f78d19caeb3447112a8d0cf6bdc0b3ece0fd4630c9f56ec309838efb5fcc6fb2191cced45b80a3265d3109577bbfbadef870e4efe390ef5cca5712853bc9566673a3b591321dedb69a951199509bf66d7c2df951444ae70645bbc6c5076f055988bf6899b0cd0b85f0f8e75b9e4eb4013233f42a81155aae8fc8ff58886a27c71255f5d1898124"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_MODES_OURS={0x7c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x14, 0x5, "4a97bb4570a33119e8c90475890ec793"}, @ETHTOOL_A_BITSET_MASK={0x5c, 0x5, "a187f74f5cf4f583860450256f0091b1f3c3b29752183332440866d0965ff239d6f0e5b32da552998d9d64cd33638a497d90865b9fe691d7f03fc19e450ed7631e5c93e087cfffa56cb09f71ad8e12101e4d4410642b38fc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40000}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

698.98721ms ago: executing program 2 (id=2753):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x3, 0x6, 0x3, 0x21, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_key={0x1e, 0x9, 0x728, 0x0, "cae022fe81eca2de391443d48381daf53940fa8a0a56c23cdca035507886cbee9f73737b5b5ace24614d4a3bebba882dcb0d324421f8e3d186ca349228874ef183d75c396188968ddd7a2e2ac823564aa267ec6bea6ad3bdc3fe4e882f0eecd6374d3fff5304f672fd6185dd2308ab8292c3997e26125d66413cc75795f2330e3e0e73fe8c6a1d470a18e50735d976fa33c9a3a4818ec0b305f05074302b5f838fab95c1455fc09407bfa252e0b4f5b18f4afc692d122f02ed2468b4d62f590c22fb0887273ea57acd3dafde0629bca9c7c4b16548c1de257d6e47b3e4b8182d6c730a3e46"}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}]}, 0x108}}, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef)
ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'veth0_to_bridge\x00', @random="2606fdffffde"})

432.698214ms ago: executing program 5 (id=2754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)=',', 0x1)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000)
recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1}, 0x8}], 0x1, 0x2, 0x0) (async, rerun: 32)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x929, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x41) (async, rerun: 32)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1d, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="1d7e"], 0x26c0}}, 0x20004011)

343.366406ms ago: executing program 3 (id=2755):
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'team_slave_0\x00', {0x8}, 0x6})
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000100001000000000000000000ac574400000000000000007f000001000000000000000000000000000000000000000002000000000a00ff8000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x180}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0xc0)

342.921414ms ago: executing program 2 (id=2756):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xc)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0)
preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18feff00000000000000040000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve0\x00', <r3=>0x0})
sendmsg$can_j1939(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r3, 0x1, {0x2, 0x1, 0x1}, 0xff}, 0x18, &(0x7f0000000280)={&(0x7f0000000240)}, 0x1, 0x0, 0x0, 0x4040010}, 0x4014)
sendmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="3dae8867f6", 0x5}], 0x1}}], 0x1, 0x800)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180), 0x2)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r4, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000fa01000000012202110000000802110000000000000000000009000000000100000602020202020201288284563a33ddaa8b"], 0x36)

243.751207ms ago: executing program 1 (id=2757):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25100000000500100083000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x404c084}, 0x44000)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4802800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf252a00000008002f0000020000060004007fb3e39142766105a1a9a0aa0000341200007770616e300000000a0001007770616e30000000050137000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4802800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf252a00000008002f0000020000060004007fb3e39142766105a1a9a0aa0000341200007770616e300000000a0001007770616e30000000050137000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) (async)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8994, &(0x7f0000000200)={'bond0\x00'})
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) (async)
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0)

180.476433ms ago: executing program 3 (id=2758):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, r2})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr=' \x01\x00', r2}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001100010000000000000000000000000a14000000090a010400000000000000000000000014000000050001000000000000000084000a"], 0x3c}}, 0x0)

79.191098ms ago: executing program 5 (id=2759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_MARK_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x1000)
ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000000000304000000476e00000000000300", @ANYRES32=0x0, @ANYRES8=r0], 0x3c}}, 0x0)

0s ago: executing program 1 (id=2760):
unshare(0x400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)

kernel console output (not intermixed with test programs):

nk: 8 bytes leftover after parsing attributes in process `syz.3.654'.
[  202.902677][ T8449] netlink: 'syz.1.657': attribute type 4 has an invalid length.
[  202.904567][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'.
[  202.924093][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'.
[  202.934336][ T8449] netlink: 'syz.1.657': attribute type 4 has an invalid length.
[  202.958842][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'.
[  203.177154][ T8455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'.
[  203.309998][ T8463] syzkaller0: entered promiscuous mode
[  203.315705][ T8463] syzkaller0: entered allmulticast mode
[  203.686622][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.669'.
[  204.262449][ T8506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.676'.
[  204.314805][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.676'.
[  204.573420][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'.
[  205.533553][ T8556] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  205.661255][ T8569] tipc: Invalid UDP bearer configuration
[  205.703589][ T8569] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  205.888450][ T8571] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  205.983991][ T8575] netlink: 'syz.0.689': attribute type 4 has an invalid length.
[  206.009655][ T8582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.053406][ T8582] syzkaller0: entered promiscuous mode
[  206.058926][ T8582] syzkaller0: entered allmulticast mode
[  206.178715][ T8590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  206.271369][ T8594] tipc: Resetting bearer <eth:syzkaller0>
[  206.421959][ T8581] tipc: Resetting bearer <eth:syzkaller0>
[  206.519749][ T8581] tipc: Disabling bearer <eth:syzkaller0>
[  206.566107][ T8606] tipc: Enabled bearer <udp:syz1>, priority 10
[  206.971919][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.979784][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.049569][ T8609] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  207.734117][ T8652] FAULT_INJECTION: forcing a failure.
[  207.734117][ T8652] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  207.781251][ T8652] CPU: 1 UID: 0 PID: 8652 Comm: syz.3.715 Not tainted syzkaller #0 PREEMPT(full) 
[  207.781278][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  207.781299][ T8652] Call Trace:
[  207.781307][ T8652]  <TASK>
[  207.781317][ T8652]  dump_stack_lvl+0x189/0x250
[  207.781350][ T8652]  ? __pfx____ratelimit+0x10/0x10
[  207.781373][ T8652]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.781399][ T8652]  ? __pfx__printk+0x10/0x10
[  207.781429][ T8652]  ? __might_fault+0xb0/0x130
[  207.781473][ T8652]  should_fail_ex+0x414/0x560
[  207.781510][ T8652]  _copy_from_user+0x2d/0xb0
[  207.781541][ T8652]  ___sys_sendmsg+0x158/0x2a0
[  207.781573][ T8652]  ? __pfx____sys_sendmsg+0x10/0x10
[  207.781648][ T8652]  ? __fget_files+0x2a/0x420
[  207.781667][ T8652]  ? __fget_files+0x3a0/0x420
[  207.781698][ T8652]  __x64_sys_sendmsg+0x19b/0x260
[  207.781730][ T8652]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  207.781769][ T8652]  ? __pfx_ksys_write+0x10/0x10
[  207.781796][ T8652]  ? rcu_is_watching+0x15/0xb0
[  207.781823][ T8652]  ? do_syscall_64+0xbe/0x3b0
[  207.781850][ T8652]  do_syscall_64+0xfa/0x3b0
[  207.781871][ T8652]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.781892][ T8652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.781914][ T8652]  ? clear_bhb_loop+0x60/0xb0
[  207.781940][ T8652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.781961][ T8652] RIP: 0033:0x7fda9178eba9
[  207.781990][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.782008][ T8652] RSP: 002b:00007fda926c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  207.782036][ T8652] RAX: ffffffffffffffda RBX: 00007fda919d5fa0 RCX: 00007fda9178eba9
[  207.782051][ T8652] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  207.782064][ T8652] RBP: 00007fda926c6090 R08: 0000000000000000 R09: 0000000000000000
[  207.782077][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.782090][ T8652] R13: 00007fda919d6038 R14: 00007fda919d5fa0 R15: 00007fff6dd53b18
[  207.782123][ T8652]  </TASK>
[  207.837927][ T8653] __nla_validate_parse: 5 callbacks suppressed
[  207.837948][ T8653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.714'.
[  208.201811][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'.
[  208.556028][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'.
[  208.582134][ T8678] netlink: 348 bytes leftover after parsing attributes in process `syz.2.722'.
[  208.591935][ T8679] netlink: 348 bytes leftover after parsing attributes in process `syz.2.722'.
[  208.602543][ T8681] netlink: 'syz.0.723': attribute type 30 has an invalid length.
[  208.866672][ T8688] netlink: 'syz.0.725': attribute type 1 has an invalid length.
[  208.912740][ T8688] 8021q: adding VLAN 0 to HW filter on device bond1
[  208.943739][ T8690] netlink: 52 bytes leftover after parsing attributes in process `syz.0.725'.
[  209.149987][ T8698] netlink: 104 bytes leftover after parsing attributes in process `syz.4.729'.
[  209.533906][ T8715] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  209.627804][ T8717] netlink: 'syz.4.731': attribute type 7 has an invalid length.
[  209.679660][ T8717] : entered promiscuous mode
[  209.991543][ T8733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.736'.
[  209.996879][ T8734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.737'.
[  210.030931][ T8734] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  210.095719][ T8733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.736'.
[  210.636506][ T8756] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  210.944579][ T8767] netlink: 'syz.0.747': attribute type 3 has an invalid length.
[  211.714574][ T5878] Bluetooth: hci0: command 0x0406 tx timeout
[  211.720698][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  211.726770][ T5878] Bluetooth: hci1: command 0x0406 tx timeout
[  211.733007][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  211.997901][ T7229] udevd[7229]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  212.326153][ T8832] netlink: 'syz.3.763': attribute type 11 has an invalid length.
[  212.406146][ T8036] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  212.457160][ T8036] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  212.521715][ T1161] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  212.531838][ T8842] FAULT_INJECTION: forcing a failure.
[  212.531838][ T8842] name failslab, interval 1, probability 0, space 0, times 1
[  212.555397][ T1161] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  212.574402][ T8842] CPU: 0 UID: 0 PID: 8842 Comm: syz.4.766 Not tainted syzkaller #0 PREEMPT(full) 
[  212.574432][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  212.574445][ T8842] Call Trace:
[  212.574453][ T8842]  <TASK>
[  212.574462][ T8842]  dump_stack_lvl+0x189/0x250
[  212.574494][ T8842]  ? __pfx____ratelimit+0x10/0x10
[  212.574517][ T8842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.574543][ T8842]  ? __pfx__printk+0x10/0x10
[  212.574576][ T8842]  ? __lock_acquire+0xab9/0xd20
[  212.574618][ T8842]  should_fail_ex+0x414/0x560
[  212.574656][ T8842]  should_failslab+0xa8/0x100
[  212.574692][ T8842]  kmem_cache_alloc_noprof+0x73/0x3c0
[  212.574721][ T8842]  ? skb_clone+0x212/0x3a0
[  212.574755][ T8842]  skb_clone+0x212/0x3a0
[  212.574789][ T8842]  __netlink_deliver_tap+0x404/0x850
[  212.574828][ T8842]  ? netlink_deliver_tap+0x2e/0x1b0
[  212.574853][ T8842]  netlink_deliver_tap+0x19c/0x1b0
[  212.574878][ T8842]  netlink_unicast+0x7fa/0x9e0
[  212.574923][ T8842]  ? __pfx_netlink_unicast+0x10/0x10
[  212.574959][ T8842]  ? netlink_sendmsg+0x642/0xb30
[  212.574980][ T8842]  ? skb_put+0x11b/0x210
[  212.575009][ T8842]  netlink_sendmsg+0x805/0xb30
[  212.575042][ T8842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.575069][ T8842]  ? aa_sock_msg_perm+0xf1/0x1d0
[  212.575093][ T8842]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  212.575117][ T8842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.575140][ T8842]  __sock_sendmsg+0x21c/0x270
[  212.575179][ T8842]  ____sys_sendmsg+0x505/0x830
[  212.575222][ T8842]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.575263][ T8842]  ? import_iovec+0x74/0xa0
[  212.575297][ T8842]  ___sys_sendmsg+0x21f/0x2a0
[  212.575326][ T8842]  ? __pfx____sys_sendmsg+0x10/0x10
[  212.575393][ T8842]  ? __fget_files+0x2a/0x420
[  212.575410][ T8842]  ? __fget_files+0x3a0/0x420
[  212.575440][ T8842]  __x64_sys_sendmsg+0x19b/0x260
[  212.575471][ T8842]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  212.575508][ T8842]  ? __pfx_ksys_write+0x10/0x10
[  212.575535][ T8842]  ? rcu_is_watching+0x15/0xb0
[  212.575564][ T8842]  ? do_syscall_64+0xbe/0x3b0
[  212.575593][ T8842]  do_syscall_64+0xfa/0x3b0
[  212.575615][ T8842]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.575637][ T8842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.575658][ T8842]  ? clear_bhb_loop+0x60/0xb0
[  212.575686][ T8842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.575707][ T8842] RIP: 0033:0x7f94b2b8eba9
[  212.575727][ T8842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.575744][ T8842] RSP: 002b:00007f94b0df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.575767][ T8842] RAX: ffffffffffffffda RBX: 00007f94b2dd5fa0 RCX: 00007f94b2b8eba9
[  212.575783][ T8842] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  212.575796][ T8842] RBP: 00007f94b0df6090 R08: 0000000000000000 R09: 0000000000000000
[  212.575809][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.575822][ T8842] R13: 00007f94b2dd6038 R14: 00007f94b2dd5fa0 R15: 00007ffd5ad4d208
[  212.575856][ T8842]  </TASK>
[  212.901089][ T1161] wlan1: Trigger new scan to find an IBSS to join
[  213.367831][ T8859] __nla_validate_parse: 6 callbacks suppressed
[  213.367854][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'.
[  213.405233][ T8859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.423106][ T8871] netlink: 'syz.3.775': attribute type 1 has an invalid length.
[  213.434930][ T8872] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.777'.
[  213.451274][ T8871] netlink: 'syz.3.775': attribute type 3 has an invalid length.
[  213.458693][ T8857] can: request_module (can-proto-0) failed.
[  213.477786][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'.
[  213.480961][ T8871] netlink: 224 bytes leftover after parsing attributes in process `syz.3.775'.
[  213.526469][ T8874] batadv0: left allmulticast mode
[  213.531638][ T8871] NCSI netlink: No device for ifindex 131080
[  213.531924][ T8865] netlink: 'syz.3.775': attribute type 1 has an invalid length.
[  213.531941][ T8865] netlink: 'syz.3.775': attribute type 3 has an invalid length.
[  213.531956][ T8865] netlink: 224 bytes leftover after parsing attributes in process `syz.3.775'.
[  213.531972][ T8865] NCSI netlink: No device for ifindex 131080
[  213.597531][ T8879] netlink: 'syz.2.778': attribute type 11 has an invalid length.
[  213.610564][ T8874] batadv0: left promiscuous mode
[  213.622391][ T8874] bridge0: port 3(batadv0) entered disabled state
[  213.642714][ T8874] bridge_slave_1: left allmulticast mode
[  213.648405][ T8874] bridge_slave_1: left promiscuous mode
[  213.656861][ T8877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.778'.
[  213.670780][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.673256][ T8877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.778'.
[  213.693113][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'.
[  213.702849][ T8874] bridge_slave_0: left allmulticast mode
[  213.708980][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.845008][ T8855] tipc: Disabling bearer <eth:syzkaller0>
[  214.111929][ T8901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.782'.
[  214.863922][ T8937] sctp: [Deprecated]: syz.0.787 (pid 8937) Use of int in maxseg socket option.
[  214.863922][ T8937] Use struct sctp_assoc_value instead
[  215.127359][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'.
[  215.214539][ T8950] macvlan2: entered promiscuous mode
[  215.220006][ T8950] macvlan2: entered allmulticast mode
[  215.229398][ T8950] bond5: entered promiscuous mode
[  215.236021][ T8950] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  215.246365][ T8950] bond5: left promiscuous mode
[  215.431199][ T8966] 8021q: VLANs not supported on ipvlan1
[  215.498796][ T8969] bond0: option ad_select: unable to set because the bond device is up
[  215.760070][ T8984] netlink: 'syz.0.801': attribute type 7 has an invalid length.
[  215.813544][ T8984] netlink: 'syz.0.801': attribute type 8 has an invalid length.
[  215.864924][ T8984] erspan0: entered promiscuous mode
[  215.894442][ T8984] batadv_slave_1: entered promiscuous mode
[  215.949480][ T8984] erspan0: left promiscuous mode
[  215.984569][ T8984] batadv_slave_1: left promiscuous mode
[  216.259314][ T9002] syzkaller0: entered allmulticast mode
[  216.593843][ T9020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.722102][ T9020] syzkaller0: entered promiscuous mode
[  216.751750][ T9020] syzkaller0: entered allmulticast mode
[  216.767963][ T9032] pimreg3: entered allmulticast mode
[  216.983605][ T9044] netlink: 'syz.1.820': attribute type 1 has an invalid length.
[  216.995281][ T9036] veth5: entered allmulticast mode
[  217.024396][ T9020] tipc: Resetting bearer <eth:syzkaller0>
[  217.074150][ T9019] tipc: Resetting bearer <eth:syzkaller0>
[  217.192159][ T9019] tipc: Disabling bearer <eth:syzkaller0>
[  217.312476][ T9050] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  217.683879][ T9075] netlink: 'syz.0.828': attribute type 1 has an invalid length.
[  217.862690][   T66] wlan1: Trigger new scan to find an IBSS to join
[  217.922175][ T9075] 8021q: adding VLAN 0 to HW filter on device bond2
[  218.056626][ T9075] bond2: (slave gretap2): making interface the new active one
[  218.065832][ T9075] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  218.483011][ T9115] __nla_validate_parse: 7 callbacks suppressed
[  218.483033][ T9115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.840'.
[  218.619676][ T9120] netdevsim netdevsim2: Direct firmware load for 	 failed with error -2
[  218.642968][ T9120] netdevsim netdevsim2: Falling back to sysfs fallback for: 	
[  218.658614][ T9122] netlink: 'syz.3.843': attribute type 6 has an invalid length.
[  218.927161][ T8040] wlan1: Creating new IBSS network, BSSID d2:e2:6c:8b:d1:79
[  219.022563][ T9140] netlink: zone id is out of range
[  219.029640][ T9140] netlink: zone id is out of range
[  219.035384][ T9140] netlink: zone id is out of range
[  219.042955][ T9140] netlink: zone id is out of range
[  219.057292][ T9140] netlink: zone id is out of range
[  219.071493][ T9140] netlink: zone id is out of range
[  219.099439][ T9140] netlink: zone id is out of range
[  219.117385][ T9140] netlink: zone id is out of range
[  219.150189][ T9140] netlink: zone id is out of range
[  219.170061][ T9140] netlink: zone id is out of range
[  219.190740][ T9140] netlink: 140 bytes leftover after parsing attributes in process `syz.4.849'.
[  219.614023][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'.
[  219.641926][ T9164] syzkaller0: entered promiscuous mode
[  219.653145][ T9164] syzkaller0: entered allmulticast mode
[  219.865919][    C1] Illegal XDP return value 16128 on prog  (id 118) dev bond0, expect packet loss!
[  219.898367][ T9183] netlink: 4120 bytes leftover after parsing attributes in process `syz.0.861'.
[  221.371582][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'.
[  221.744933][ T9221] sctp: [Deprecated]: syz.0.872 (pid 9221) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.744933][ T9221] Use struct sctp_sack_info instead
[  221.840627][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'.
[  222.087582][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.873'.
[  222.282854][ T9247] netlink: 'syz.3.877': attribute type 15 has an invalid length.
[  222.359145][ T9256] netlink: 'syz.2.880': attribute type 4 has an invalid length.
[  222.638609][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'.
[  223.278603][ T9295] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  223.701275][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.895'.
[  224.118482][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'.
[  224.142156][ T9342] netlink: 'syz.2.906': attribute type 1 has an invalid length.
[  224.181981][ T9342] netlink: 144 bytes leftover after parsing attributes in process `syz.2.906'.
[  224.228983][ T9342] netlink: 'syz.2.906': attribute type 1 has an invalid length.
[  224.254259][ T9342] netlink: 'syz.2.906': attribute type 2 has an invalid length.
[  224.259240][ T9350] sctp: [Deprecated]: syz.0.908 (pid 9350) Use of int in maxseg socket option.
[  224.259240][ T9350] Use struct sctp_assoc_value instead
[  224.268685][ T9342] netlink: 64 bytes leftover after parsing attributes in process `syz.2.906'.
[  224.369265][ T9355] tipc: Started in network mode
[  224.376772][ T9355] tipc: Node identity e0000002, cluster identity 4711
[  224.388396][ T9355] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  224.482551][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.910'.
[  224.592685][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'.
[  224.661640][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'.
[  224.747371][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'.
[  224.785288][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'.
[  224.902630][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.912'.
[  225.666329][ T3015] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  225.707159][ T3015] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.747332][ T3015] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.811011][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.418519][ T9440] IPv6: Can't replace route, no match found
[  226.659620][ T9457] netlink: 'syz.2.942': attribute type 1 has an invalid length.
[  226.818751][ T9457] 8021q: adding VLAN 0 to HW filter on device bond3
[  226.901915][ T9461] netlink: 'syz.3.944': attribute type 4 has an invalid length.
[  226.933519][ T9461] netlink: 'syz.3.944': attribute type 4 has an invalid length.
[  228.495592][ T9540] netlink: 'syz.4.968': attribute type 1 has an invalid length.
[  228.551184][ T9540] sock: sock_timestamping_bind_phc: sock not bind to device
[  228.582121][ T9538] block nbd0: server does not support multiple connections per device.
[  228.612170][ T9538] block nbd0: shutting down sockets
[  228.985896][ T9563] netlink: 'syz.2.975': attribute type 1 has an invalid length.
[  229.002972][ T9565] netlink: 'syz.0.976': attribute type 13 has an invalid length.
[  229.023883][ T9563] netlink: 'syz.2.975': attribute type 3 has an invalid length.
[  229.041035][ T9565] netlink: 'syz.0.976': attribute type 13 has an invalid length.
[  229.042537][ T9563] netlink: 'syz.2.975': attribute type 235 has an invalid length.
[  229.780614][ T5188] Bluetooth: hci4: command 0x0405 tx timeout
[  230.312647][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.356206][ T9568] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.230984][   T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.239954][   T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.320407][   T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.329359][   T37] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.418409][ T9599] net_ratelimit: 15 callbacks suppressed
[  231.418428][ T9599] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  231.508991][ T9604] __nla_validate_parse: 54 callbacks suppressed
[  231.509011][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'.
[  231.569386][ T9598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.982'.
[  231.684767][ T9612] sctp: [Deprecated]: syz.0.988 (pid 9612) Use of int in max_burst socket option.
[  231.684767][ T9612] Use struct sctp_assoc_value instead
[  231.721733][ T9608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.986'.
[  231.860446][ T5188] Bluetooth: hci4: command 0x0405 tx timeout
[  232.135889][ T9635] netlink: 'syz.1.991': attribute type 13 has an invalid length.
[  232.182695][ T9635] veth0_macvtap: left promiscuous mode
[  232.191940][ T9635] macvtap0: entered allmulticast mode
[  232.205420][ T9635] macvtap0: refused to change device tx_queue_len
[  232.396199][ T9641] vlan2: entered allmulticast mode
[  232.407430][ T9641] hsr0: entered allmulticast mode
[  232.430643][ T9641] hsr_slave_0: entered allmulticast mode
[  232.446657][ T9641] hsr_slave_1: entered allmulticast mode
[  232.705916][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'.
[  232.730465][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'.
[  232.754829][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1000'.
[  232.783805][ T9664] dummy0: entered allmulticast mode
[  232.859864][ T9666] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  233.011752][   T30] audit: type=1107 audit(1757766970.882:4): pid=9669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  234.160806][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'.
[  234.211639][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'.
[  234.303148][ T9701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.873350][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1017'.
[  235.125121][ T9735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1020'.
[  236.059261][ T9780] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  237.911070][ T9801] __nla_validate_parse: 7 callbacks suppressed
[  237.911091][ T9801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1040'.
[  237.972885][ T9807] netlink: 'syz.2.1043': attribute type 11 has an invalid length.
[  237.993716][ T9807] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1043'.
[  238.391326][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'.
[  238.439989][ T9830] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1049'.
[  238.499982][ T9833] netlink: 'syz.2.1051': attribute type 1 has an invalid length.
[  238.531756][ T9833] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1051'.
[  238.566307][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'.
[  238.584077][ T9835] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1052'.
[  238.598201][ T9835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1052'.
[  239.381429][ T9848] gretap1: entered promiscuous mode
[  239.537805][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'.
[  239.759535][ T9876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.913432][ T9865] syzkaller0: entered promiscuous mode
[  239.919080][ T9865] syzkaller0: entered allmulticast mode
[  239.942439][ T9872] syzkaller0: entered promiscuous mode
[  239.947964][ T9872] syzkaller0: entered allmulticast mode
[  240.870681][ T5930] tipc: Node number set to 2103880834
[  241.759911][ T9872] tipc: Resetting bearer <eth:syzkaller0>
[  241.848029][ T9872] tipc: Disabling bearer <eth:syzkaller0>
[  241.896030][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'.
[  242.260917][ T9919] pim6reg1: entered promiscuous mode
[  242.299818][ T9919] pim6reg1: entered allmulticast mode
[  242.321655][ T9923] xt_time: invalid argument - start or stop time greater than 23:59:59
[  242.393860][ T9928] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  242.413511][ T9589] IPVS: starting estimator thread 0...
[  242.541787][ T9929] IPVS: using max 25 ests per chain, 60000 per kthread
[  242.658460][ T9944] netem: unknown loss type 0
[  242.672047][ T9944] netem: change failed
[  243.125715][ T9959] __nla_validate_parse: 1 callbacks suppressed
[  243.125734][ T9959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1087'.
[  243.213368][ T9960] openvswitch: netlink: IP tunnel TTL not specified.
[  243.329697][ T9966] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1089'.
[  243.427541][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1089'.
[  243.552633][ T9981] netlink: 'syz.4.1092': attribute type 4 has an invalid length.
[  243.571740][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'.
[  243.757520][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1096'.
[  243.792019][ T9988] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  244.088203][ T9999] netlink: 'syz.2.1100': attribute type 1 has an invalid length.
[  244.207439][ T9999] 8021q: adding VLAN 0 to HW filter on device bond4
[  244.327447][T10005] bond4: (slave geneve2): making interface the new active one
[  244.364041][T10005] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  244.661683][T10025] netlink: 'syz.2.1106': attribute type 11 has an invalid length.
[  244.683984][T10023] netlink: 'syz.1.1104': attribute type 11 has an invalid length.
[  244.738892][   T37] tipc: Subscription rejected, illegal request
[  244.928722][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1109'.
[  245.016293][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'.
[  245.616200][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'.
[  245.879216][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'.
[  245.889109][T10078] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1121'.
[  245.912334][T10077] netlink: 'syz.2.1123': attribute type 5 has an invalid length.
[  246.784444][T10117] netlink: 'syz.0.1134': attribute type 7 has an invalid length.
[  247.779732][ T6003] IPVS: starting estimator thread 0...
[  247.807126][T10167] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  247.891257][T10165] IPVS: using max 25 ests per chain, 60000 per kthread
[  248.082761][T10178] netlink: 'syz.0.1148': attribute type 6 has an invalid length.
[  248.215260][T10185] __nla_validate_parse: 5 callbacks suppressed
[  248.215281][T10185] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1151'.
[  248.595042][T10193] xt_limit: Overflow, try lower: 271964/0
[  248.622823][T10192] bridge_slave_0: left allmulticast mode
[  248.629642][T10192] bridge_slave_0: left promiscuous mode
[  248.638585][T10192] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.685902][T10192] bridge_slave_1: left allmulticast mode
[  248.693387][T10192] bridge_slave_1: left promiscuous mode
[  248.699807][T10192] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.737541][T10192] bond0: (slave bond_slave_0): Releasing backup interface
[  248.755450][T10192] bond0: (slave bond_slave_1): Releasing backup interface
[  248.785729][T10192] team0: Port device team_slave_0 removed
[  248.801566][T10192] team0: Port device team_slave_1 removed
[  248.808426][T10192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.871729][T10192] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.886814][T10192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.895228][T10192] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.915178][T10192] bond0: (slave wlan1): Releasing backup interface
[  248.944457][T10192] bond2: (slave gretap2): Releasing active interface
[  248.979663][T10199] ÿÿÿÿÿÿ: renamed from wg1 (while UP)
[  249.227967][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'.
[  249.282458][T10219] netlink: 'syz.3.1160': attribute type 5 has an invalid length.
[  249.304169][T10219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1160'.
[  249.341945][T10219] geneve2: entered promiscuous mode
[  249.371027][T10219] geneve2: entered allmulticast mode
[  249.391830][T10226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'.
[  249.417005][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'.
[  249.417810][ T8038] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  249.490518][ T8038] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  249.515865][T10232] netlink: 'syz.0.1164': attribute type 18 has an invalid length.
[  249.568099][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1164'.
[  249.629085][T10240] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1167'.
[  249.667736][T10240] nbd: must specify at least one socket
[  249.805592][T10249] netlink: 'syz.2.1169': attribute type 24 has an invalid length.
[  250.007381][ T8038] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  250.017302][ T8038] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  250.526018][T10276] netlink: 'syz.0.1176': attribute type 1 has an invalid length.
[  250.555398][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'.
[  250.571812][T10279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.612439][T10279] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.668240][T10279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.678527][T10279] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.720333][T10279] batman_adv: batadv0: Interface deactivated: macsec1
[  250.745780][T10279] batman_adv: batadv0: Removing interface: macsec1
[  250.791768][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1180'.
[  250.811001][T10279] bridge0: port 5(batadv0) entered disabled state
[  250.854300][T10279] bridge0: port 5(batadv0) entered disabled state
[  250.868853][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'.
[  250.908613][T10295] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  250.965327][T10291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.111694][T10303] netlink: 'syz.4.1183': attribute type 11 has an invalid length.
[  251.143091][T10303] netlink: 'syz.4.1183': attribute type 2 has an invalid length.
[  251.190457][T10303] netlink: 'syz.4.1183': attribute type 8 has an invalid length.
[  251.304373][T10304] syzkaller0: entered promiscuous mode
[  251.325229][T10304] syzkaller0: entered allmulticast mode
[  253.158153][T10299] tipc: Resetting bearer <eth:syzkaller0>
[  253.233329][T10288] tipc: Resetting bearer <eth:syzkaller0>
[  253.252456][T10340] __nla_validate_parse: 3 callbacks suppressed
[  253.252476][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1191'.
[  253.269640][T10288] tipc: Disabling bearer <eth:syzkaller0>
[  253.481157][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1191'.
[  253.757794][T10362] netlink: 'syz.3.1198': attribute type 1 has an invalid length.
[  253.888652][T10366] netlink: 'syz.2.1200': attribute type 23 has an invalid length.
[  253.926306][T10362] bond1: (slave gretap1): making interface the new active one
[  253.957069][T10362] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  254.058386][T10369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.069509][T10369] syzkaller0: entered promiscuous mode
[  254.092631][T10369] syzkaller0: entered allmulticast mode
[  254.226092][T10369] tipc: Resetting bearer <eth:syzkaller0>
[  254.325547][T10368] tipc: Resetting bearer <eth:syzkaller0>
[  254.418931][T10368] tipc: Disabling bearer <eth:syzkaller0>
[  254.465939][T10387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1206'.
[  254.490796][T10391] netlink: 'syz.1.1208': attribute type 7 has an invalid length.
[  254.568003][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  254.587560][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1207'.
[  254.712087][ T3549] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.721716][ T3549] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.731782][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'.
[  254.743803][ T6003] IPVS: starting estimator thread 0...
[  254.765833][T10403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.790632][ T3549] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.799415][ T3549] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.831617][T10401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1207'.
[  254.839346][T10397] netlink: 'syz.2.1207': attribute type 3 has an invalid length.
[  254.870411][T10405] IPVS: using max 25 ests per chain, 60000 per kthread
[  255.029031][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'.
[  255.169495][T10426] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1214'.
[  255.198506][T10429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1215'.
[  255.823167][T10458] netlink: 'syz.0.1221': attribute type 2 has an invalid length.
[  256.484982][T10489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.708705][T10496] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  256.773043][T10496] pim6reg1: entered promiscuous mode
[  256.782138][T10496] pim6reg1: entered allmulticast mode
[  257.565808][T10508] netlink: 'syz.4.1238': attribute type 12 has an invalid length.
[  257.636563][T10508] netlink: 'syz.4.1238': attribute type 12 has an invalid length.
[  257.688123][ T3015] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.731983][ T3015] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.790806][ T3015] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.799599][ T3015] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  258.612502][T10543] __nla_validate_parse: 6 callbacks suppressed
[  258.612521][T10543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1249'.
[  258.670879][T10543] netlink: 'syz.3.1249': attribute type 9 has an invalid length.
[  258.951449][T10565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1254'.
[  259.016009][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1254'.
[  259.262208][T10579] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  259.356882][T10579] geneve2: entered promiscuous mode
[  259.386571][T10579] geneve2: entered allmulticast mode
[  259.631968][T10590] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1262'.
[  259.788744][T10607] netlink: 'syz.1.1266': attribute type 1 has an invalid length.
[  259.830376][T10607] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1266'.
[  259.973466][T10614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.748191][T10652] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1278'.
[  260.832545][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  260.863866][T10650] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1277'.
[  260.888466][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'.
[  260.935275][T10660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1280'.
[  261.144281][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'.
[  261.205506][T10667] netlink: 'syz.4.1282': attribute type 2 has an invalid length.
[  261.932872][T10681] netlink: 'syz.4.1285': attribute type 33 has an invalid length.
[  262.050883][T10683] netlink: 'syz.0.1287': attribute type 12 has an invalid length.
[  262.872303][T10704] bond0: entered promiscuous mode
[  262.877584][T10704] bond_slave_0: entered promiscuous mode
[  262.896582][T10704] bond_slave_1: entered promiscuous mode
[  262.933846][T10708] netlink: 'syz.3.1290': attribute type 5 has an invalid length.
[  262.940643][T10704] bond0: entered allmulticast mode
[  262.946788][T10704] bond_slave_0: entered allmulticast mode
[  263.013653][T10711] netlink: 'syz.1.1294': attribute type 1 has an invalid length.
[  263.034295][T10711] netlink: 'syz.1.1294': attribute type 1 has an invalid length.
[  263.041004][T10704] bond_slave_1: entered allmulticast mode
[  263.074719][T10704] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.254621][T10720] bridge3: entered promiscuous mode
[  263.259966][T10720] bridge3: entered allmulticast mode
[  263.336553][T10723] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[  263.387139][T10723] bond3: (slave vcan0): Error -95 calling set_mac_address
[  263.699277][T10737] netlink: 'syz.1.1300': attribute type 4 has an invalid length.
[  263.755878][T10738] netlink: 'syz.1.1300': attribute type 4 has an invalid length.
[  263.957659][T10741] __nla_validate_parse: 9 callbacks suppressed
[  263.957680][T10741] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1302'.
[  264.031046][T10744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1304'.
[  264.041377][T10747] tipc: Started in network mode
[  264.049770][T10747] tipc: Node identity baf68a33716f, cluster identity 4711
[  264.090793][T10747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.116442][T10745] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.286675][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'.
[  264.319348][T10745] tipc: Disabling bearer <eth:syzkaller0>
[  264.998816][T10797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1315'.
[  265.284805][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  265.296093][T10805] openvswitch: netlink: IPv6 tunnel dst address is zero
[  266.654453][T10780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.671612][T10788] syzkaller0: entered promiscuous mode
[  266.677168][T10788] syzkaller0: entered allmulticast mode
[  266.699399][T10799] tipc: Resetting bearer <eth:syzkaller0>
[  266.847846][T10812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.893552][T10799] tipc: Resetting bearer <eth:syzkaller0>
[  267.043361][T10799] tipc: Disabling bearer <eth:syzkaller0>
[  267.095609][T10831] netlink: 'syz.1.1324': attribute type 3 has an invalid length.
[  267.141796][T10831] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1324'.
[  267.172784][T10827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1323'.
[  267.223978][T10827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1323'.
[  267.492922][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'.
[  267.503972][ T3549] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60
[  267.639134][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'.
[  268.275142][T10877] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.321675][T10877] 8021q: adding VLAN 0 to HW filter on device team0
[  268.375738][T10892] netlink: 'syz.0.1340': attribute type 10 has an invalid length.
[  268.387367][T10877] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.126817][T10930] __nla_validate_parse: 4 callbacks suppressed
[  269.126836][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'.
[  269.733561][T10945] netlink: 'syz.1.1353': attribute type 10 has an invalid length.
[  269.767564][T10955] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1355'.
[  269.780093][T10960] netlink: 'syz.0.1357': attribute type 1 has an invalid length.
[  269.795851][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'.
[  269.814654][T10960] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1357'.
[  269.853808][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'.
[  269.877335][T10945] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  270.147463][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'.
[  270.181089][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'.
[  270.789199][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'.
[  270.861117][T11008] tap0: tun_chr_ioctl cmd 1074025676
[  270.876766][T11008] tap0: owner set to 0
[  270.954132][T11007] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1369'.
[  271.684520][T11044] netlink: 'syz.4.1381': attribute type 1 has an invalid length.
[  271.806027][T11044] 8021q: adding VLAN 0 to HW filter on device bond5
[  272.019233][T11057] sctp: [Deprecated]: syz.1.1382 (pid 11057) Use of struct sctp_assoc_value in delayed_ack socket option.
[  272.019233][T11057] Use struct sctp_sack_info instead
[  272.122495][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  272.404638][T11075] netlink: 'syz.2.1386': attribute type 3 has an invalid length.
[  273.253470][T11109] netlink: 'syz.4.1396': attribute type 21 has an invalid length.
[  273.282452][T11109] netlink: 'syz.4.1396': attribute type 22 has an invalid length.
[  273.295391][T11109] netlink: 'syz.4.1396': attribute type 23 has an invalid length.
[  273.305869][T11109] netlink: 'syz.4.1396': attribute type 25 has an invalid length.
[  273.315447][T11109] netlink: 'syz.4.1396': attribute type 26 has an invalid length.
[  273.457323][T11124] netlink: 'syz.1.1400': attribute type 1 has an invalid length.
[  273.671197][T11133] netlink: 'syz.0.1403': attribute type 3 has an invalid length.
[  274.459643][T11164] netlink: 'syz.3.1410': attribute type 1 has an invalid length.
[  274.530035][T11164] __nla_validate_parse: 6 callbacks suppressed
[  274.530053][T11164] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1410'.
[  274.594135][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'.
[  274.714701][T11187] netlink: 'syz.4.1414': attribute type 9 has an invalid length.
[  276.210076][T11267] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1431'.
[  276.383274][T11276] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1434'.
[  276.566858][T11286] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1436'.
[  276.611463][T11286] NCSI netlink: No device for ifindex 813332851
[  276.677469][T11289] netem: change failed
[  276.842756][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1438'.
[  276.870064][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1439'.
[  276.943316][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1439'.
[  276.998060][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1439'.
[  277.049759][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1439'.
[  278.965997][T11382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.068010][T11382] validate_nla: 5 callbacks suppressed
[  279.068065][T11382] netlink: 'syz.1.1458': attribute type 1 has an invalid length.
[  279.253680][T11389] syzkaller0: entered promiscuous mode
[  279.268488][T11389] syzkaller0: entered allmulticast mode
[  279.291189][T11389] tipc: Resetting bearer <eth:syzkaller0>
[  279.415708][T11382] 8021q: adding VLAN 0 to HW filter on device bond7
[  279.518131][T11396] veth3: entered promiscuous mode
[  279.563535][T11396] bond7: (slave veth3): Enslaving as an active interface with an up link
[  279.773598][T11381] tipc: Resetting bearer <eth:syzkaller0>
[  279.908787][T11427] __nla_validate_parse: 5 callbacks suppressed
[  279.908808][T11427] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1465'.
[  279.938790][T11427] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1465'.
[  279.970845][T11427] netlink: 'syz.0.1465': attribute type 5 has an invalid length.
[  279.988946][T11427] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1465'.
[  281.706893][T11381] tipc: Disabling bearer <eth:syzkaller0>
[  281.717915][T11412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.726341][T11409] syzkaller0: entered promiscuous mode
[  281.746141][T11409] syzkaller0: entered allmulticast mode
[  281.845952][T11430] tipc: Resetting bearer <eth:syzkaller0>
[  281.881066][T11443] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1466'.
[  281.939630][T11407] tipc: Resetting bearer <eth:syzkaller0>
[  282.001306][T11407] tipc: Disabling bearer <eth:syzkaller0>
[  282.082629][T11453] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  282.281780][T11467] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1472'.
[  282.281780][T11464] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1472'.
[  282.295337][T11466] netlink: 'syz.1.1473': attribute type 4 has an invalid length.
[  282.834746][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'.
[  282.960855][T11497] netlink: 'syz.0.1482': attribute type 4 has an invalid length.
[  283.005091][T11497] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1482'.
[  283.448487][T11520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1487'.
[  283.586504][T11526] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1489'.
[  283.877576][T11538] netlink: 'syz.3.1492': attribute type 21 has an invalid length.
[  284.056677][T11526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.070181][T11526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.081965][T11526] bond0 (unregistering): Released all slaves
[  284.326417][T11546] netlink: 'syz.3.1494': attribute type 9 has an invalid length.
[  284.362652][T11546] netlink: 'syz.3.1494': attribute type 9 has an invalid length.
[  284.535763][T11556] netlink: 'syz.4.1498': attribute type 1 has an invalid length.
[  284.741901][T11557] veth7: entered promiscuous mode
[  284.923789][T11571] __nla_validate_parse: 50 callbacks suppressed
[  284.923809][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'.
[  284.962729][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'.
[  284.990312][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1504'.
[  285.004235][T11572] netlink: 146780 bytes leftover after parsing attributes in process `syz.4.1503'.
[  285.042076][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'.
[  285.052765][T11571] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  285.119368][T11571] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  285.150410][T11571] gretap2: entered promiscuous mode
[  285.163554][T11571] gretap2: entered allmulticast mode
[  285.377624][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1507'.
[  285.461364][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1507'.
[  285.631655][T11604] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  285.967732][T11616] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) !
[  286.182017][T11623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1514'.
[  286.334756][T11637] Bluetooth: MGMT ver 1.23
[  286.816232][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'.
[  287.269562][T11666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1526'.
[  287.408405][ T6003] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  287.456596][ T6003] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  287.484793][T11677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.514037][T11677] syzkaller0: entered promiscuous mode
[  287.532084][T11677] syzkaller0: entered allmulticast mode
[  287.669212][T11677] tipc: Resetting bearer <eth:syzkaller0>
[  287.694354][T11679] fido_id[11679]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory
[  287.716603][T11684] netlink: 'syz.1.1530': attribute type 1 has an invalid length.
[  287.728380][T11676] tipc: Resetting bearer <eth:syzkaller0>
[  287.741904][T11684] netlink: 'syz.1.1530': attribute type 2 has an invalid length.
[  287.766733][T11684] netlink: 'syz.1.1530': attribute type 1 has an invalid length.
[  287.781774][T11676] tipc: Disabling bearer <eth:syzkaller0>
[  288.031327][T11692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.059440][T11692] syzkaller0: entered promiscuous mode
[  288.065095][T11692] syzkaller0: entered allmulticast mode
[  288.073431][T11698] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  288.215417][T11692] tipc: Resetting bearer <eth:syzkaller0>
[  288.260081][T11710] netlink: 'syz.3.1539': attribute type 1 has an invalid length.
[  288.303105][T11692] tipc: Disabling bearer <eth:syzkaller0>
[  288.517024][ T6003] IPVS: starting estimator thread 0...
[  288.583148][T11724] sctp: [Deprecated]: syz.1.1543 (pid 11724) Use of struct sctp_assoc_value in delayed_ack socket option.
[  288.583148][T11724] Use struct sctp_sack_info instead
[  288.620784][T11727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.640817][T11723] IPVS: using max 23 ests per chain, 55200 per kthread
[  289.490164][T11769] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[  289.977837][T11787] netlink: 'syz.2.1565': attribute type 6 has an invalid length.
[  290.022490][T11769] __nla_validate_parse: 8 callbacks suppressed
[  290.022511][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1559'.
[  290.933583][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'.
[  291.152231][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1577'.
[  291.211040][T11842] sctp: [Deprecated]: syz.3.1579 (pid 11842) Use of struct sctp_assoc_value in delayed_ack socket option.
[  291.211040][T11842] Use struct sctp_sack_info instead
[  291.285367][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'.
[  291.404529][T11845] openvswitch: netlink: Flow key attribute not present in set flow.
[  291.433361][T11847] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (672), value rounded to 33554304 ms
[  291.564909][T11847] netlink: 'syz.4.1582': attribute type 1 has an invalid length.
[  291.750127][T11865] netlink: 632 bytes leftover after parsing attributes in process `syz.4.1587'.
[  291.994395][T11874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1591'.
[  292.192592][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'.
[  292.215941][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'.
[  292.279306][T11891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1595'.
[  292.303260][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'.
[  292.632278][T11898] syzkaller1: entered promiscuous mode
[  292.657449][T11898] syzkaller1: entered allmulticast mode
[  293.062670][T11924] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  295.297738][T11952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.494136][T11975] __nla_validate_parse: 36 callbacks suppressed
[  295.494155][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'.
[  295.689251][T11989] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1621'.
[  295.744448][T11991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.758117][T11991] syzkaller0: entered promiscuous mode
[  295.781187][T11991] syzkaller0: entered allmulticast mode
[  295.832204][T11991] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.880186][T11991] tipc: Resetting bearer <eth:syzkaller0>
[  295.954720][T11990] tipc: Resetting bearer <eth:syzkaller0>
[  296.028245][T11990] tipc: Disabling bearer <eth:syzkaller0>
[  296.089659][T12006] netlink: 'syz.0.1626': attribute type 11 has an invalid length.
[  296.453365][T12022] netlink: 'syz.3.1629': attribute type 2 has an invalid length.
[  296.503365][T12022] netlink: 'syz.3.1629': attribute type 1 has an invalid length.
[  296.566133][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1631'.
[  296.718918][T12024] hsr_slave_0 (unregistering): left promiscuous mode
[  296.796640][T12038] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1635'.
[  296.846567][T12045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.047839][T12047] 8021q: VLANs not supported on vcan0
[  297.076898][T12047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'.
[  297.593928][T12076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.632609][T12076] syzkaller0: entered promiscuous mode
[  297.638140][T12076] syzkaller0: entered allmulticast mode
[  297.695214][T12086] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1647'.
[  297.713642][T12076] tipc: Resetting bearer <eth:syzkaller0>
[  297.720781][T12085] syzkaller0: entered promiscuous mode
[  297.731970][T12085] syzkaller0: entered allmulticast mode
[  297.744580][T12087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.766608][T12075] tipc: Resetting bearer <eth:syzkaller0>
[  297.808511][T12075] tipc: Disabling bearer <eth:syzkaller0>
[  297.825594][T12085] netlink: 'syz.1.1646': attribute type 1 has an invalid length.
[  297.891174][T12094] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  298.084506][T12094] tipc: Resetting bearer <eth:syzkaller0>
[  298.175096][T12094] tipc: Disabling bearer <eth:syzkaller0>
[  298.206388][T12112] netlink: 'syz.3.1652': attribute type 1 has an invalid length.
[  298.753146][T12135] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1657'.
[  298.898962][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1658'.
[  298.947829][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'.
[  298.999670][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'.
[  299.021294][T12141] bond3: left promiscuous mode
[  299.026467][T12141] bridge0: port 4(bond3) entered disabled state
[  299.107927][T12141] bond2: left promiscuous mode
[  299.147547][T12141] bridge0: port 3(bond2) entered disabled state
[  299.193939][T12141] bridge_slave_1: left allmulticast mode
[  299.218126][T12156] netlink: 'syz.4.1662': attribute type 1 has an invalid length.
[  299.233900][T12141] bridge_slave_1: left promiscuous mode
[  299.244894][T12141] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.277799][T12141] bridge_slave_0: left allmulticast mode
[  299.292781][T12141] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.629156][T12165] netlink: 'syz.0.1663': attribute type 8 has an invalid length.
[  299.899522][T12174] openvswitch: netlink: Key type 1799 is out of range max 32
[  301.881575][T12188] sctp: [Deprecated]: syz.3.1670 (pid 12188) Use of int in maxseg socket option.
[  301.881575][T12188] Use struct sctp_assoc_value instead
[  301.959575][T12188] netlink: 'syz.3.1670': attribute type 58 has an invalid length.
[  302.003166][T12188] __nla_validate_parse: 3 callbacks suppressed
[  302.003186][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1670'.
[  302.092098][T12199] IPv6: Can't replace route, no match found
[  302.162430][T12199] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  302.198809][T12199] team0: Device macvtap1 is already an upper device of the team interface
[  302.203825][T12204] netlink: 'syz.3.1670': attribute type 1 has an invalid length.
[  302.233532][T12204] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1670'.
[  302.394984][T12213] netlink: 'syz.2.1676': attribute type 1 has an invalid length.
[  302.804927][T12213] 8021q: adding VLAN 0 to HW filter on device bond5
[  302.823299][T12218] netlink: 'syz.4.1678': attribute type 18 has an invalid length.
[  302.832769][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'.
[  302.844244][T12224] bond5: (slave geneve3): making interface the new active one
[  302.883058][T12224] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  302.925094][T12218] netlink: 'syz.4.1678': attribute type 18 has an invalid length.
[  302.953987][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'.
[  303.099424][T12236] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1680'.
[  303.345556][T12239] netlink: 'syz.0.1683': attribute type 11 has an invalid length.
[  303.841138][T12264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1688'.
[  303.945599][T12265] geneve3: entered promiscuous mode
[  303.985363][T12265] geneve3: entered allmulticast mode
[  304.082045][T12268] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.120273][T12268] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.131308][T12268] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  304.201137][ T8038] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 19999 - 0
[  304.227015][ T8038] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 19999 - 0
[  304.277329][ T8038] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 19999 - 0
[  304.458743][T12284] 8021q: adding VLAN 0 to HW filter on device bond6
[  305.145864][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1698'.
[  305.329378][T12317] netlink: 'syz.2.1701': attribute type 7 has an invalid length.
[  305.590883][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'.
[  305.648846][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'.
[  305.657144][T12339] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  305.674455][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1704'.
[  305.910019][T12268] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  305.930095][T12268] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.971260][T12268] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  305.990521][T12268] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  306.068032][T12361] xt_limit: Overflow, try lower: 604147548/4200216962
[  306.093632][T12268] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.150860][T12268] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.194810][T12268] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  306.243078][T12268] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  306.352847][T12268] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.383463][T12268] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.423751][T12268] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  306.446929][T12268] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0
[  306.659624][ T2987] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  306.683986][ T2987] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  306.724895][ T2987] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  306.758720][ T2987] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  306.808715][ T2987] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  306.848548][ T2987] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  306.875393][ T2987] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  306.924560][ T2987] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  307.101486][ T8040] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  307.120075][ T8040] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  307.141222][ T8040] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  307.161487][ T8040] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  307.189300][ T8040] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  307.217241][ T8040] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  307.299327][ T8040] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  307.336843][ T8040] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  307.636241][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'.
[  307.898398][   T30] audit: type=1107 audit(1757767045.772:5): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›ÿ:E;¸·´¢
몦Œë‚MWãuå1¿o¹O�œšŒcŒTå)�M\kì€Ó—Âß9SK¶nÔy‘újBÒsûÇ~¸Ð¶Pü…aÁû)cÄÀ¬Mµ¬Ì0/y}£=ÈÏŧó–Uw&Ð]ß¹-x¼ô]â¡'
[  307.937795][T12432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1728'.
[  307.993773][T12435] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1728'.
[  308.018694][T12432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1728'.
[  308.230051][T12444] openvswitch: netlink: Message has 8 unknown bytes.
[  308.264504][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'.
[  308.281355][T12446] ip6_vti0: entered allmulticast mode
[  308.311993][T12445] ip6_vti0: left allmulticast mode
[  308.566327][T12462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1738'.
[  308.633994][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'.
[  308.702167][T12463] pim6reg1: entered promiscuous mode
[  308.712024][T12463] pim6reg1: entered allmulticast mode
[  309.193661][T12485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.203603][T12491] syzkaller0: entered promiscuous mode
[  309.206652][T12484] netlink: 'syz.2.1744': attribute type 1 has an invalid length.
[  309.209105][T12491] syzkaller0: entered allmulticast mode
[  309.244558][T12484] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1744'.
[  309.263470][T12480] tipc: Resetting bearer <eth:syzkaller0>
[  309.307371][T12478] tipc: Resetting bearer <eth:syzkaller0>
[  309.364065][T12478] tipc: Disabling bearer <eth:syzkaller0>
[  309.443016][T12493] netlink: 'syz.0.1746': attribute type 4 has an invalid length.
[  309.497200][T12499] xt_limit: Overflow, try lower: 271964/0
[  309.532644][T12495] xt_limit: Overflow, try lower: 271964/0
[  309.572192][T12502] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  309.915837][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'.
[  309.937191][T12523] netlink: 'syz.4.1754': attribute type 5 has an invalid length.
[  309.953395][T12523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1754'.
[  309.974082][T12523] geneve3: entered promiscuous mode
[  309.998194][T12523] geneve3: entered allmulticast mode
[  310.015402][ T3015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  310.035422][ T3015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  310.060973][ T3015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  310.076829][ T3015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  310.904404][T12542] netlink: 'syz.3.1759': attribute type 12 has an invalid length.
[  311.317071][T12554] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  312.081152][T12584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.322937][T12584] tipc: Disabling bearer <eth:syzkaller0>
[  312.924646][T12620] netem: change failed
[  312.944506][T12620] netem: change failed
[  313.360711][T12634] __nla_validate_parse: 8 callbacks suppressed
[  313.360732][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1786'.
[  313.403511][T12636] netlink: 'syz.1.1786': attribute type 58 has an invalid length.
[  313.423563][T12636] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1786'.
[  313.438710][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'.
[  313.461555][T12634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1786'.
[  313.508910][T12640] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  313.553518][T12640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.567270][T12638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1787'.
[  313.624783][T12638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1787'.
[  313.679269][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1784'.
[  313.780999][T12652] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1784'.
[  313.812918][T12657] netlink: 'syz.4.1790': attribute type 1 has an invalid length.
[  314.003352][T12657] 8021q: adding VLAN 0 to HW filter on device bond7
[  314.055926][T12668] bond2: (slave wlan0): Releasing active interface
[  314.116000][T12668] bond7: (slave wlan0): Enslaving as an active interface with a down link
[  314.198468][T12669] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1793'.
[  314.210773][T12669] netlink: 143 bytes leftover after parsing attributes in process `syz.1.1793'.
[  314.544721][T12696] netlink: 'syz.0.1800': attribute type 1 has an invalid length.
[  314.961606][T12719] vlan2: entered promiscuous mode
[  314.989296][T12719] bridge0: entered promiscuous mode
[  315.086792][T12727] netlink: 'syz.0.1810': attribute type 12 has an invalid length.
[  316.371069][T12774] netlink: 'syz.3.1826': attribute type 1 has an invalid length.
[  317.176354][T12808] team_slave_0: entered promiscuous mode
[  317.182309][T12808] team_slave_1: entered promiscuous mode
[  317.188067][T12808] dummy0: entered promiscuous mode
[  317.544897][T12821] openvswitch: netlink: EtherType 0 is less than min 600
[  317.583620][T12821] netlink: 'syz.3.1841': attribute type 9 has an invalid length.
[  317.707406][T12825] bond0: left promiscuous mode
[  317.713056][T12825] bond_slave_0: left promiscuous mode
[  317.718877][T12825] bond_slave_1: left promiscuous mode
[  317.730576][T12825] bond0: left allmulticast mode
[  317.736804][T12825] bond_slave_0: left allmulticast mode
[  317.746477][T12825] bond_slave_1: left allmulticast mode
[  318.391085][T12846] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  318.584285][T12824] netlink: 'syz.1.1843': attribute type 13 has an invalid length.
[  318.619487][T12824] netlink: 'syz.1.1843': attribute type 17 has an invalid length.
[  318.661573][T12824] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  318.923767][T12862] sctp: [Deprecated]: syz.3.1852 (pid 12862) Use of int in maxseg socket option.
[  318.923767][T12862] Use struct sctp_assoc_value instead
[  319.291225][T12871] __nla_validate_parse: 42 callbacks suppressed
[  319.291247][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1854'.
[  319.322807][T12873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1855'.
[  319.381944][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'.
[  320.251812][T12896] syzkaller0: create flow: hash 3420029966 index 1
[  320.325896][ T8038] syzkaller0: tun_net_xmit 76
[  320.346598][ T8038] syzkaller0: tun_net_xmit 48
[  320.352179][   T24] syzkaller0: tun_net_xmit 76
[  320.629109][ T9589] syzkaller0: tun_net_xmit 76
[  320.713543][T12899] batman_adv: batadv0: Removing interface: batadv_slave_0
[  320.729103][T12899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.757418][T12899] batman_adv: batadv0: Removing interface: batadv_slave_1
[  320.797867][T12899] batman_adv: batadv0: Removing interface: team0
[  320.806034][T12909] "syz.2.1859" (12909) uses obsolete ecb(arc4) skcipher
[  320.935721][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'.
[  320.950986][T12906] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  320.961806][T12906] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  321.066205][T12893] syzkaller0: delete flow: hash 3420029966 index 1
[  322.276976][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  325.759117][T12933] ipvlan3: entered promiscuous mode
[  326.084660][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1869'.
[  326.100898][T12953] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1869'.
[  326.113221][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1869'.
[  326.387697][T12966] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.465927][T12964] vlan0: entered allmulticast mode
[  326.502313][T12964] veth0_to_bond: entered allmulticast mode
[  326.540597][T12964] team0: Port device vlan0 added
[  326.807713][T12982] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  326.870739][T12982] netlink: 'syz.0.1879': attribute type 12 has an invalid length.
[  327.283677][T12992] netlink: 'syz.0.1881': attribute type 10 has an invalid length.
[  327.325379][T12992] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  327.391111][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1882'.
[  327.544954][T12998] sch_tbf: peakrate 4 is lower than or equals to rate 254 !
[  327.574382][T12995] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  327.581227][T12995] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  327.606646][T12997] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  327.690290][T13010] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1885'.
[  327.913772][T13017] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20000
[  327.921468][T13015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1888'.
[  327.939014][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'.
[  327.953322][T13018] openvswitch: netlink: Invalid VLAN frame
[  327.963857][T13017] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20003
[  328.052709][T13020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1886'.
[  328.263803][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'.
[  328.299663][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'.
[  328.701384][T13028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.849350][T13021] tipc: Disabling bearer <eth:syzkaller0>
[  329.532572][T13064] 8021q: VLANs not supported on vcan0
[  329.862175][   T66] wlan1: Trigger new scan to find an IBSS to join
[  330.356325][T13060] udevd[13060]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory
[  330.458943][T13090] xt_l2tp: invalid flags combination: 8
[  331.125552][T13109] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  331.155780][T13109] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  332.068483][T13145] __nla_validate_parse: 4 callbacks suppressed
[  332.068502][T13145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1920'.
[  332.901003][ T3015] wlan1: Trigger new scan to find an IBSS to join
[  333.424587][ T5188] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  333.434787][ T5188] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  333.437128][T13178] veth1_to_bond: entered allmulticast mode
[  333.451075][ T5188] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  333.463132][ T5188] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  333.480571][ T5188] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  333.616041][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1930'.
[  333.759819][T13191] sctp: [Deprecated]: syz.3.1931 (pid 13191) Use of struct sctp_assoc_value in delayed_ack socket option.
[  333.759819][T13191] Use struct sctp_sack_info instead
[  333.841246][T13193] sctp: [Deprecated]: syz.3.1931 (pid 13193) Use of struct sctp_assoc_value in delayed_ack socket option.
[  333.841246][T13193] Use struct sctp_sack_info instead
[  334.026204][T13178] bond0: (slave bond_slave_1): Releasing backup interface
[  334.363433][T13191] bridge3: the hash_elasticity option has been deprecated and is always 16
[  334.558069][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'.
[  334.586882][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'.
[  334.627640][T13218] netlink: 'syz.3.1936': attribute type 1 has an invalid length.
[  334.642155][ T5533] veth0_vlan: left promiscuous mode
[  334.648932][T13218] netlink: 'syz.3.1936': attribute type 2 has an invalid length.
[  334.694880][ T5533] veth0_vlan: entered promiscuous mode
[  335.077048][T13234] netlink: 'syz.3.1940': attribute type 21 has an invalid length.
[  335.120429][T13234] IPv6: NLM_F_CREATE should be specified when creating new route
[  335.128326][T13234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  335.135623][T13234] IPv6: NLM_F_CREATE should be set when creating new route
[  335.142968][T13234] IPv6: NLM_F_CREATE should be set when creating new route
[  335.150290][T13234] IPv6: NLM_F_CREATE should be set when creating new route
[  335.466096][T13180] chnl_net:caif_netlink_parms(): no params data found
[  335.515532][T13248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1942'.
[  335.544249][ T5873] Bluetooth: hci5: command tx timeout
[  335.836110][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'.
[  335.865915][   T66] wlan1: Creating new IBSS network, BSSID 36:ce:8f:08:06:82
[  336.266718][T13180] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.310507][T13180] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.362265][T13180] bridge_slave_0: entered allmulticast mode
[  336.489787][T13180] bridge_slave_0: entered promiscuous mode
[  336.539796][T13180] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.569302][T13180] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.589412][T13180] bridge_slave_1: entered allmulticast mode
[  336.617886][T13180] bridge_slave_1: entered promiscuous mode
[  336.705291][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'.
[  336.749368][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'.
[  336.876637][T13180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.955908][T13180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.331126][T13300] bond8: entered promiscuous mode
[  337.338109][T13300] bond8: entered allmulticast mode
[  337.344725][T13300] 8021q: adding VLAN 0 to HW filter on device bond8
[  337.369890][T13180] team0: Port device team_slave_0 added
[  337.392985][T13180] team0: Port device team_slave_1 added
[  337.586764][T13180] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.623745][ T5188] Bluetooth: hci5: command tx timeout
[  337.641758][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.679381][T13316] netlink: 'syz.1.1956': attribute type 1 has an invalid length.
[  337.718445][T13316] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1956'.
[  337.770315][T13180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.829138][T13180] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.865675][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.906037][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'.
[  337.947879][T13180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.992215][T13325] netlink: 'syz.2.1958': attribute type 1 has an invalid length.
[  338.212785][T13325] 8021q: adding VLAN 0 to HW filter on device bond7
[  338.423789][T13327] veth3: entered promiscuous mode
[  338.497784][T13180] hsr_slave_0: entered promiscuous mode
[  338.516452][T13180] hsr_slave_1: entered promiscuous mode
[  338.533055][T13180] debugfs: 'hsr0' already exists in 'hsr'
[  338.551922][T13180] Cannot create hsr debugfs directory
[  339.230138][T13356] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1965'.
[  339.240485][T13352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1964'.
[  339.285383][T13352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1964'.
[  339.322107][T13357] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1965'.
[  339.391663][T13361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1967'.
[  339.532357][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1968'.
[  339.569188][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'.
[  339.710666][ T5869] Bluetooth: hci5: command 0x040f tx timeout
[  340.004206][T13180] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  340.029943][T13180] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  340.069801][T13180] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  340.112265][T13180] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  340.402714][T13397] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1976'.
[  340.754673][T13180] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.763249][T13403] netlink: 'syz.0.1979': attribute type 49 has an invalid length.
[  340.861055][T13180] 8021q: adding VLAN 0 to HW filter on device team0
[  340.938005][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.945249][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.014469][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.021704][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.230944][T13180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  341.664711][T13435] netlink: 'syz.2.1986': attribute type 1 has an invalid length.
[  341.792421][ T5873] Bluetooth: hci5: command 0x040f tx timeout
[  341.871790][T13435] 8021q: adding VLAN 0 to HW filter on device bond8
[  342.317922][T13180] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.757807][T13474] __nla_validate_parse: 2 callbacks suppressed
[  342.757827][T13474] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1994'.
[  342.985940][T13478] sctp: [Deprecated]: syz.3.1995 (pid 13478) Use of int in max_burst socket option deprecated.
[  342.985940][T13478] Use struct sctp_assoc_value instead
[  343.038881][T13478] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1995'.
[  343.281355][T13491] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1999'.
[  343.367567][T13498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1998'.
[  343.655448][T13180] veth0_vlan: entered promiscuous mode
[  343.731856][T13180] veth1_vlan: entered promiscuous mode
[  343.744222][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2004'.
[  343.861777][ T5873] Bluetooth: hci5: command 0x040f tx timeout
[  343.868728][T13180] veth0_macvtap: entered promiscuous mode
[  343.943169][T13180] veth1_macvtap: entered promiscuous mode
[  344.033034][T13180] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.058837][T13180] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.134534][T13516] netlink: 'syz.3.2008': attribute type 5 has an invalid length.
[  344.144661][ T8038] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.183652][T13516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.208387][ T8038] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.231159][T13516] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2008'.
[  344.271271][T13516] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2008'.
[  344.300417][ T8038] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.406233][ T8038] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.772516][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.815787][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.926842][ T8038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  344.978252][ T8038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.701178][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2018'.
[  345.817034][T13563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2018'.
[  345.919179][T13554] 8021q: adding VLAN 0 to HW filter on device bond9
[  346.204299][T13578] netlink: 6052 bytes leftover after parsing attributes in process `syz.2.2023'.
[  347.507236][T13633] block nbd3: not configured, cannot reconfigure
[  347.599789][T13635] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  347.865640][T13644] bridge7: entered promiscuous mode
[  347.919441][T13644] bridge7: entered allmulticast mode
[  348.029272][T13635] bridge0: the hash_elasticity option has been deprecated and is always 16
[  348.375089][T13667] IPv6: NLM_F_CREATE should be specified when creating new route
[  348.429886][T13665] tipc: Started in network mode
[  348.436650][T13665] tipc: Node identity b2bb8b0f17f3, cluster identity 4711
[  348.477628][T13665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.518249][T13667] veth0_virt_wifi: renamed from dummy0
[  348.608122][T13671] ip6gre1: entered allmulticast mode
[  348.667188][T13665] tipc: Resetting bearer <eth:syzkaller0>
[  348.755859][T13682] __nla_validate_parse: 4 callbacks suppressed
[  348.755880][T13682] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2049'.
[  348.876619][T13664] tipc: Disabling bearer <eth:syzkaller0>
[  348.957120][T13684] bridge6: entered allmulticast mode
[  349.129476][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'.
[  349.567654][T13704] netlink: 576 bytes leftover after parsing attributes in process `syz.5.2056'.
[  349.906434][T13687] syz.1.2051: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  349.988446][T13687] CPU: 0 UID: 0 PID: 13687 Comm: syz.1.2051 Not tainted syzkaller #0 PREEMPT(full) 
[  349.988478][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  349.988506][T13687] Call Trace:
[  349.988516][T13687]  <TASK>
[  349.988526][T13687]  dump_stack_lvl+0x189/0x250
[  349.988564][T13687]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.988595][T13687]  ? __pfx__printk+0x10/0x10
[  349.988629][T13687]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  349.988658][T13687]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  349.988689][T13687]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  349.988720][T13687]  warn_alloc+0x214/0x310
[  349.988764][T13687]  ? __pfx_warn_alloc+0x10/0x10
[  349.988818][T13687]  ? __get_vm_area_node+0x28f/0x300
[  349.988852][T13687]  ? hash_ipportip_create+0x358/0xfe0
[  349.988887][T13687]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  349.988922][T13687]  ? do_syscall_64+0xfa/0x3b0
[  349.988986][T13687]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  349.989029][T13687]  ? rcu_is_watching+0x15/0xb0
[  349.989053][T13687]  ? hash_ipportip_create+0x358/0xfe0
[  349.989080][T13687]  ? hash_ipportip_create+0x358/0xfe0
[  349.989105][T13687]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  349.989150][T13687]  ? hash_ipportip_create+0x358/0xfe0
[  349.989179][T13687]  ? hash_ipportip_create+0x2fe/0xfe0
[  349.989213][T13687]  hash_ipportip_create+0x358/0xfe0
[  349.989263][T13687]  ? __nla_parse+0x40/0x60
[  349.989287][T13687]  ? __pfx_hash_ipportip_create+0x10/0x10
[  349.989334][T13687]  ip_set_create+0xa94/0x1940
[  349.989369][T13687]  ? ip_set_create+0x4a2/0x1940
[  349.989417][T13687]  ? __pfx_ip_set_create+0x10/0x10
[  349.989493][T13687]  nfnetlink_rcv_msg+0xb4d/0x1130
[  349.989531][T13687]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  349.989590][T13687]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  349.989622][T13687]  ? kasan_save_free_info+0x46/0x50
[  349.989702][T13687]  netlink_rcv_skb+0x208/0x470
[  349.989729][T13687]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  349.989767][T13687]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  349.989806][T13687]  ? bpf_lsm_capable+0x9/0x20
[  349.989856][T13687]  ? security_capable+0x7e/0x2e0
[  349.989900][T13687]  nfnetlink_rcv+0x26a/0x2520
[  349.989938][T13687]  ? __dev_queue_xmit+0x1d79/0x3b50
[  349.989982][T13687]  ? __dev_queue_xmit+0x27b/0x3b50
[  349.990027][T13687]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  349.990060][T13687]  ? __pfx___dev_queue_xmit+0x10/0x10
[  349.990108][T13687]  ? ref_tracker_free+0x63a/0x7d0
[  349.990139][T13687]  ? __asan_memcpy+0x40/0x70
[  349.990165][T13687]  ? __pfx_ref_tracker_free+0x10/0x10
[  349.990208][T13687]  ? skb_clone+0x246/0x3a0
[  349.990243][T13687]  ? __netlink_deliver_tap+0x807/0x850
[  349.990267][T13687]  ? netlink_deliver_tap+0x2e/0x1b0
[  349.990300][T13687]  ? netlink_deliver_tap+0x2e/0x1b0
[  349.990334][T13687]  netlink_unicast+0x82f/0x9e0
[  349.990380][T13687]  ? __pfx_netlink_unicast+0x10/0x10
[  349.990416][T13687]  ? netlink_sendmsg+0x642/0xb30
[  349.990439][T13687]  ? skb_put+0x11b/0x210
[  349.990469][T13687]  netlink_sendmsg+0x805/0xb30
[  349.990505][T13687]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.990535][T13687]  ? aa_sock_msg_perm+0xf1/0x1d0
[  349.990560][T13687]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  349.990585][T13687]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.990612][T13687]  __sock_sendmsg+0x21c/0x270
[  349.990651][T13687]  ____sys_sendmsg+0x505/0x830
[  349.990687][T13687]  ? __pfx_____sys_sendmsg+0x10/0x10
[  349.990736][T13687]  ? import_iovec+0x74/0xa0
[  349.990771][T13687]  ___sys_sendmsg+0x21f/0x2a0
[  349.990804][T13687]  ? __pfx____sys_sendmsg+0x10/0x10
[  349.990877][T13687]  ? __fget_files+0x2a/0x420
[  349.990897][T13687]  ? __fget_files+0x3a0/0x420
[  349.990929][T13687]  __x64_sys_sendmsg+0x19b/0x260
[  349.990962][T13687]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  349.991005][T13687]  ? rcu_is_watching+0x15/0xb0
[  349.991033][T13687]  ? do_syscall_64+0xbe/0x3b0
[  349.991062][T13687]  do_syscall_64+0xfa/0x3b0
[  349.991087][T13687]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.991117][T13687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.991140][T13687]  ? clear_bhb_loop+0x60/0xb0
[  349.991168][T13687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.991190][T13687] RIP: 0033:0x7f4bb918eba9
[  349.991210][T13687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.991231][T13687] RSP: 002b:00007f4bb9f88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.991254][T13687] RAX: ffffffffffffffda RBX: 00007f4bb93d5fa0 RCX: 00007f4bb918eba9
[  349.991271][T13687] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003
[  349.991285][T13687] RBP: 00007f4bb9211e19 R08: 0000000000000000 R09: 0000000000000000
[  349.991298][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  349.991311][T13687] R13: 00007f4bb93d6038 R14: 00007f4bb93d5fa0 R15: 00007ffd3fcca628
[  349.991346][T13687]  </TASK>
[  350.466760][T13687] Mem-Info:
[  350.469951][T13687] active_anon:6458 inactive_anon:0 isolated_anon:0
[  350.469951][T13687]  active_file:2693 inactive_file:39972 isolated_file:0
[  350.469951][T13687]  unevictable:768 dirty:65 writeback:0
[  350.469951][T13687]  slab_reclaimable:11573 slab_unreclaimable:112390
[  350.469951][T13687]  mapped:34344 shmem:1372 pagetables:1362
[  350.469951][T13687]  sec_pagetables:0 bounce:0
[  350.469951][T13687]  kernel_misc_reclaimable:0
[  350.469951][T13687]  free:1296732 free_pcp:14461 free_cma:0
[  350.588655][T13687] Node 0 active_anon:25932kB inactive_anon:0kB active_file:10772kB inactive_file:159688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137376kB dirty:256kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13812kB pagetables:5412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  350.627169][T13687] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  350.658563][T13727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2062'.
[  350.659197][T13687] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  350.704652][T13687] lowmem_reserve[]: 0 2497 2499 2499 2499
[  350.718274][T13687] Node 0 DMA32 free:1274364kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25984kB inactive_anon:0kB active_file:10772kB inactive_file:158120kB unevictable:1536kB writepending:252kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:42840kB local_pcp:22284kB free_cma:0kB
[  350.753071][T13687] lowmem_reserve[]: 0 0 1 1 1
[  350.757950][T13687] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  350.870350][T13687] lowmem_reserve[]: 0 0 0 0 0
[  350.875155][T13687] Node 1 Normal free:3896452kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14944kB local_pcp:6496kB free_cma:0kB
[  350.910998][T13687] lowmem_reserve[]: 0 0 0 0 0
[  350.915793][T13687] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  350.929255][T13687] Node 0 DMA32: 788*4kB (UME) 455*8kB (UME) 201*16kB (UME) 157*32kB (UME) 275*64kB (UME) 77*128kB (UME) 4*256kB (M) 1*512kB (U) 3*1024kB (ME) 6*2048kB (M) 297*4096kB (M) = 1275896kB
[  350.947945][T13687] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  350.976883][T13687] Node 1 Normal: 159*4kB (UME) 39*8kB (UME) 37*16kB (UME) 142*32kB (UME) 39*64kB (UME) 6*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3896452kB
[  350.995525][T13687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  351.005559][T13687] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  351.028196][T13738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.092532][T13687] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  351.158995][T13687] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  351.205619][T13687] 44033 total pagecache pages
[  351.235988][T13687] 0 pages in swap cache
[  351.247981][T13687] Free swap  = 124996kB
[  351.269809][T13687] Total swap = 124996kB
[  351.290786][T13687] 2097051 pages RAM
[  351.294651][T13687] 0 pages HighMem/MovableOnly
[  351.324878][T13687] 425671 pages reserved
[  351.335025][T13687] 0 pages cma reserved
[  351.654279][T13762] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  352.079555][T13775] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2074'.
[  352.385091][T13789] netlink: 'syz.0.2077': attribute type 18 has an invalid length.
[  352.621077][T13798] netlink: 'syz.1.2078': attribute type 1 has an invalid length.
[  352.807832][T13796] syzkaller0: entered promiscuous mode
[  352.844102][T13796] syzkaller0: entered allmulticast mode
[  352.885995][T13805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.931203][T13808] vxcan1: entered allmulticast mode
[  353.031366][T13794] tipc: Resetting bearer <eth:syzkaller0>
[  353.228852][T13821] netlink: 'syz.0.2084': attribute type 1 has an invalid length.
[  353.359511][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'.
[  353.890469][ T9589] tipc: Node number set to 3415837235
[  357.554426][T13794] tipc: Disabling bearer <eth:syzkaller0>
[  357.591165][T13821] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  358.005430][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'.
[  358.028317][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'.
[  358.913175][T13893] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  359.532858][ T5873] block nbd1: Receive control failed (result -32)
[  359.661842][T13922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2108'.
[  359.874700][T13927] Bluetooth: MGMT ver 1.23
[  360.204932][T13946] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2115'.
[  360.230696][T13944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2114'.
[  360.259099][T13944] tipc: Invalid UDP bearer configuration
[  360.259157][T13944] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  360.626795][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'.
[  360.642837][T13957] bond0: (slave wlan1): Releasing backup interface
[  360.806676][T13957] team0: Port device vlan0 removed
[  360.870764][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'.
[  361.456750][T13989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2129'.
[  361.579342][T13993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2130'.
[  362.378207][T14012] netlink: 'syz.5.2132': attribute type 2 has an invalid length.
[  362.406048][T14012] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2132'.
[  362.421791][T14012] nbd: must specify a device to reconfigure
[  363.014188][T14030] syzkaller1: entered promiscuous mode
[  363.075305][T14030] syzkaller1: entered allmulticast mode
[  363.739527][T14058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  363.746929][T14058] IPv6: NLM_F_CREATE should be set when creating new route
[  363.839228][T14063] __nla_validate_parse: 1 callbacks suppressed
[  363.839249][T14063] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2148'.
[  363.885758][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'.
[  364.069678][T14073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'.
[  364.110310][T14074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2150'.
[  364.165894][T14078] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2152'.
[  364.514275][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'.
[  364.528255][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'.
[  364.633793][T14101] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2157'.
[  364.660810][T14097] bridge0: entered promiscuous mode
[  364.692843][T14097] macsec3: entered promiscuous mode
[  364.698285][T14097] macsec3: entered allmulticast mode
[  364.758781][T14097] bridge0: entered allmulticast mode
[  364.778632][T14097] bridge0: port 1(macsec3) entered blocking state
[  364.788581][T14097] bridge0: port 1(macsec3) entered disabled state
[  364.953451][T14097] bridge0: left allmulticast mode
[  364.959880][T14097] bridge0: left promiscuous mode
[  365.032610][T14092] bridge0: entered promiscuous mode
[  365.049680][T14092] macsec3: entered promiscuous mode
[  365.057197][T14092] macsec3: entered allmulticast mode
[  365.063761][T14092] bridge0: entered allmulticast mode
[  365.070696][T14092] bridge0: port 1(macsec3) entered blocking state
[  365.077364][T14092] bridge0: port 1(macsec3) entered disabled state
[  365.095345][T14092] bridge0: left allmulticast mode
[  365.121305][T14092] bridge0: left promiscuous mode
[  365.350804][T14091] Can't find ip_set type ha
[  366.070775][T14139] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2167'.
[  366.221368][T14141] sctp: [Deprecated]: syz.3.2166 (pid 14141) Use of struct sctp_assoc_value in delayed_ack socket option.
[  366.221368][T14141] Use struct sctp_sack_info instead
[  366.301861][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2168'.
[  367.196042][T14175] netlink: 'syz.1.2180': attribute type 6 has an invalid length.
[  367.481266][T14183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.664650][T14186] syzkaller0: entered promiscuous mode
[  367.675443][T14186] syzkaller0: entered allmulticast mode
[  367.863774][T14186] tipc: Resetting bearer <eth:syzkaller0>
[  367.954743][T14186] tipc: Disabling bearer <eth:syzkaller0>
[  368.343452][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  368.504961][T14219] netlink: 'syz.5.2195': attribute type 4 has an invalid length.
[  368.566036][T14225] netlink: 'syz.5.2195': attribute type 4 has an invalid length.
[  368.714422][T14229] veth1_to_hsr: entered allmulticast mode
[  368.756561][T14232] netlink: 'syz.0.2201': attribute type 6 has an invalid length.
[  368.860646][T14232] __nla_validate_parse: 11 callbacks suppressed
[  368.860668][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2201'.
[  369.554457][T14272] netlink: 'syz.5.2208': attribute type 1 has an invalid length.
[  369.564046][T14272] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2208'.
[  370.059121][T14290] netlink: 'syz.2.2217': attribute type 5 has an invalid length.
[  370.142878][T14299] netlink: 'syz.2.2217': attribute type 5 has an invalid length.
[  370.822144][T14330] netlink: 'syz.3.2227': attribute type 1 has an invalid length.
[  370.902617][T14332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2227'.
[  370.932650][T14330] bond2 (unregistering): Released all slaves
[  371.133265][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'.
[  371.246850][T14344] macsec2: entered promiscuous mode
[  371.252281][T14344] bridge0: entered promiscuous mode
[  371.257761][T14344] macsec2: entered allmulticast mode
[  371.263260][T14344] bridge0: entered allmulticast mode
[  371.303512][T14344] bridge0: port 1(macsec2) entered blocking state
[  371.310513][T14344] bridge0: port 1(macsec2) entered disabled state
[  371.395843][T14344] bridge0: left allmulticast mode
[  371.427745][T14344] bridge0: left promiscuous mode
[  372.014613][T14350] erspan0: entered allmulticast mode
[  372.909405][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2247'.
[  373.134838][T14421] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2251'.
[  373.437745][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2255'.
[  373.749500][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2259'.
[  373.894902][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'.
[  374.589824][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2270'.
[  374.640689][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2271'.
[  374.653956][T14486] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2270'.
[  374.685055][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2271'.
[  374.977641][T14497] syzkaller0: entered allmulticast mode
[  374.998458][T14496] delete_channel: no stack
[  375.061466][ T5869] Bluetooth: hci5: command 0x040f tx timeout
[  375.172383][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'.
[  375.287358][T14504] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  375.310841][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'.
[  376.138711][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'.
[  376.180472][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2290'.
[  376.287971][T14555] netlink: 'syz.0.2293': attribute type 11 has an invalid length.
[  376.311630][T14555] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2293'.
[  376.912962][ T5873] block nbd2: Receive control failed (result -32)
[  377.556006][T14599] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  377.627831][T14599] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  379.339412][T14679] __nla_validate_parse: 1 callbacks suppressed
[  379.339433][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2323'.
[  379.438744][T14679] : entered promiscuous mode
[  379.463997][T14681] ip6gre0: Master is either lo or non-ether device
[  380.077995][T14712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2331'.
[  380.166205][T14712] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2331'.
[  380.218187][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2333'.
[  380.231109][T14717] hsr_slave_1: left promiscuous mode
[  380.533784][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'.
[  380.946070][T14737] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2337'.
[  380.986185][T14737] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  381.030108][T14739] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2338'.
[  381.739639][T14761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.772633][T14767] netlink: 'syz.1.2344': attribute type 33 has an invalid length.
[  381.797414][T14765] netlink: 'syz.1.2344': attribute type 33 has an invalid length.
[  381.858209][T14765] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  381.893218][T14767] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  381.923945][T14761] tipc: Disabling bearer <eth:syzkaller0>
[  382.291690][T14780] netlink: 'syz.5.2349': attribute type 10 has an invalid length.
[  382.347976][T14780] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  382.468183][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'.
[  382.694085][T14798] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002
[  382.794036][T14794] macvlan2: entered allmulticast mode
[  382.843621][T14794] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  383.017014][T14806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.038231][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'.
[  383.049986][T14796] tipc: Resetting bearer <eth:syzkaller0>
[  383.064632][T14796] macvlan2: entered allmulticast mode
[  383.086231][T14796] bond0: (slave macvlan2): Opening slave failed
[  383.151477][T14820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.225540][T14807] syzkaller0: entered promiscuous mode
[  383.250379][T14807] syzkaller0: entered allmulticast mode
[  383.257036][T14819] pim6reg1: entered promiscuous mode
[  383.273446][T14819] pim6reg1: entered allmulticast mode
[  383.324158][T14795] tipc: Resetting bearer <eth:syzkaller0>
[  383.431085][T14795] tipc: Disabling bearer <eth:syzkaller0>
[  383.584730][T14839] netlink: 'syz.0.2365': attribute type 2 has an invalid length.
[  383.705436][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  383.846029][T14848] netlink: 'syz.0.2368': attribute type 2 has an invalid length.
[  383.866595][T14848] netlink: 'syz.0.2368': attribute type 8 has an invalid length.
[  383.898398][T14848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2368'.
[  384.439281][T14870] netlink: 'syz.3.2375': attribute type 5 has an invalid length.
[  384.489035][T14867] netlink: 'syz.3.2375': attribute type 5 has an invalid length.
[  385.229908][T14904] openvswitch: netlink: Message has 4 unknown bytes.
[  385.265534][T14904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.627892][T14920] netlink: 'syz.0.2391': attribute type 1 has an invalid length.
[  385.656439][T14919] netlink: 'syz.0.2391': attribute type 1 has an invalid length.
[  385.706473][T14920] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2391'.
[  385.751872][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'.
[  385.821240][T14928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2393'.
[  385.850371][T14928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2393'.
[  386.030431][T14935] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2396'.
[  386.861712][T14962] veth3: entered allmulticast mode
[  387.020782][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2409'.
[  387.697105][T14996] bridge5: entered promiscuous mode
[  387.706775][T14996] bridge5: entered allmulticast mode
[  387.819245][T14999] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2414'.
[  388.394705][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'.
[  388.431765][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2421'.
[  388.467394][T15027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2421'.
[  388.793030][T15042] validate_nla: 1 callbacks suppressed
[  388.793048][T15042] netlink: 'syz.1.2427': attribute type 1 has an invalid length.
[  388.793093][T15035] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  388.823772][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  388.975112][T15035] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  389.063519][T15035] gretap1: entered promiscuous mode
[  389.068786][T15035] gretap1: entered allmulticast mode
[  389.544768][T15066] netlink: 'syz.5.2433': attribute type 11 has an invalid length.
[  389.565939][T15066] netlink: 'syz.5.2433': attribute type 11 has an invalid length.
[  390.828896][T15133] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  390.910882][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  391.112351][T15142] netlink: 'syz.2.2454': attribute type 2 has an invalid length.
[  391.132906][T15142] __nla_validate_parse: 7 callbacks suppressed
[  391.132927][T15142] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2454'.
[  391.261085][T15144] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2456'.
[  391.323664][T15148] netlink: 'syz.2.2454': attribute type 1 has an invalid length.
[  391.338079][T15148] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2454'.
[  391.415219][T15153] netlink: 'syz.5.2459': attribute type 1 has an invalid length.
[  391.685641][T15166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2460'.
[  391.785356][T15144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.824342][T15144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.848214][T15144] bond0 (unregistering): Released all slaves
[  391.962784][T15159] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  391.982051][T15159] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  392.141862][T15163] macvlan2: entered promiscuous mode
[  392.180914][T15163] macvlan2: entered allmulticast mode
[  392.208833][T15163] bond1: entered promiscuous mode
[  392.234203][T15163] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  392.278683][T15163] bond1: left promiscuous mode
[  392.444483][T15174] ip6gre1: entered allmulticast mode
[  392.483969][T15185] netlink: 'syz.3.2465': attribute type 21 has an invalid length.
[  392.495898][T15177] veth1_to_hsr: left allmulticast mode
[  392.520428][T15185] netlink: 'syz.3.2465': attribute type 1 has an invalid length.
[  392.653810][T15185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  392.671523][ T2987] nci: nci_rsp_packet: unsupported rsp opcode 0xf21
[  392.990973][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  393.094734][T15216] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  393.116579][T15214] netlink: 'syz.5.2470': attribute type 1 has an invalid length.
[  393.125807][T15219] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  393.165604][T15216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2473'.
[  393.191345][T15214] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2470'.
[  393.191606][T15222] netlink: 'syz.5.2470': attribute type 11 has an invalid length.
[  393.215641][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2473'.
[  393.272204][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'.
[  393.283202][T15214] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2470'.
[  393.293834][T15216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'.
[  393.631412][T15230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.102796][T15247] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.111361][T15250] sctp: [Deprecated]: syz.0.2483 (pid 15250) Use of struct sctp_assoc_value in delayed_ack socket option.
[  394.111361][T15250] Use struct sctp_sack_info instead
[  394.312259][T15262] sctp: [Deprecated]: syz.0.2483 (pid 15262) Use of struct sctp_assoc_value in delayed_ack socket option.
[  394.312259][T15262] Use struct sctp_sack_info instead
[  394.509294][T15268] ksmbd: Unknown IPC event: 1, ignore.
[  395.063339][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  395.951651][T15315] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[  396.004973][T15319] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  396.042469][T15319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  396.108188][T15322] syzkaller1: entered promiscuous mode
[  396.126825][T15322] syzkaller1: entered allmulticast mode
[  396.644174][T15343] __nla_validate_parse: 3 callbacks suppressed
[  396.644195][T15343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2512'.
[  396.724976][T15332] syzkaller0: entered promiscuous mode
[  396.758373][T15332] syzkaller0: entered allmulticast mode
[  396.798759][T15348] syzkaller0: entered promiscuous mode
[  396.816108][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2514'.
[  396.828387][T15348] syzkaller0: entered allmulticast mode
[  396.885867][T15345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  396.907422][T15350] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2514'.
[  396.966958][T15344] tipc: Resetting bearer <eth:syzkaller0>
[  397.149143][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  397.316445][T15366] sctp: [Deprecated]: syz.3.2518 (pid 15366) Use of struct sctp_assoc_value in delayed_ack socket option.
[  397.316445][T15366] Use struct sctp_sack_info instead
[  397.452629][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'.
[  397.478654][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2519'.
[  397.953259][ T5944] tipc: Node number set to 2772994831
[  399.221945][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  401.309201][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  401.531364][T15340] tipc: Resetting bearer <eth:syzkaller0>
[  401.554541][T15340] tipc: Disabling bearer <eth:syzkaller0>
[  401.832106][T15388] netlink: 'syz.5.2523': attribute type 1 has an invalid length.
[  401.952395][T15396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2523'.
[  402.073053][T15390] bond2: (slave gretap2): making interface the new active one
[  402.081871][T15390] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  402.147772][T15396] 8021q: adding VLAN 0 to HW filter on device bond2
[  402.903398][T15431] pim6reg1: entered promiscuous mode
[  402.909032][T15431] pim6reg1: entered allmulticast mode
[  403.174065][T15444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2538'.
[  403.241681][T15452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.384867][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  403.521039][T15460] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  403.531849][T15460] netlink: 6052 bytes leftover after parsing attributes in process `syz.3.2543'.
[  403.588099][T15466] netlink: 'syz.0.2544': attribute type 83 has an invalid length.
[  403.611623][T15466] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2544'.
[  403.879852][T15473] netlink: 'syz.3.2545': attribute type 9 has an invalid length.
[  403.934815][T15473] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.2545'.
[  404.095558][T15476] team0: Device vti0 is of different type
[  404.219678][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2549'.
[  404.307380][T15485] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2550'.
[  404.369547][T15485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2550'.
[  404.606889][T15503] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2554'.
[  404.717798][T15503] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2554'.
[  405.466393][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  405.595674][T15531] 8021q: adding VLAN 0 to HW filter on device bond3
[  405.871914][T15546] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3)
[  406.194299][T15560] tipc: Enabled bearer <eth:vlan1>, priority 12
[  406.541730][T15576] netlink: 'syz.0.2575': attribute type 7 has an invalid length.
[  406.609795][T15576] : entered promiscuous mode
[  406.702882][T15583] netlink: 'syz.3.2576': attribute type 1 has an invalid length.
[  407.316367][T15605] __nla_validate_parse: 2 callbacks suppressed
[  407.316387][T15605] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2582'.
[  407.426299][T15613] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2584'.
[  407.438812][T15611] pim6reg1: entered promiscuous mode
[  407.456529][T15611] pim6reg1: entered allmulticast mode
[  407.549538][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  407.735660][T15624] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  408.171318][T15641] netlink: 'syz.1.2591': attribute type 10 has an invalid length.
[  408.898979][T15665] syz_tun: entered promiscuous mode
[  408.905959][T15669] netlink: 'syz.3.2600': attribute type 1 has an invalid length.
[  408.923650][T15675] veth0: entered promiscuous mode
[  408.931438][T15665] veth0: left promiscuous mode
[  409.286345][T15681] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2604'.
[  409.365117][T15681] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2604'.
[  409.395956][T15690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2606'.
[  409.620890][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  409.772421][T15704] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  409.790960][T15704] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  410.070572][T15707] netlink: 'syz.3.2612': attribute type 3 has an invalid length.
[  410.091595][T15707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2612'.
[  411.055864][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2620'.
[  411.122247][T15753] netlink: 'syz.1.2620': attribute type 1 has an invalid length.
[  411.701606][ T5873] Bluetooth: hci1: command 0x0406 tx timeout
[  411.802973][T15776] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2628'.
[  412.470683][T15802] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2632'.
[  412.849160][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2638'.
[  412.931523][T15817] openvswitch: netlink: VXLAN extension 173 out of range max 1
[  413.021813][T15821] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2639'.
[  413.171878][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2642'.
[  413.378038][T15834] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2644'.
[  413.420342][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2644'.
[  413.784830][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  414.103884][T15855] sctp: [Deprecated]: syz.1.2653 (pid 15855) Use of int in maxseg socket option.
[  414.103884][T15855] Use struct sctp_assoc_value instead
[  414.174064][    C1] vcan0: j1939_tp_rxtimer: 0xffff888069265800: rx timeout, send abort
[  414.191557][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069265800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  414.433383][T15864] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  414.809197][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2659'.
[  415.679183][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'.
[  415.860995][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  416.402413][T15929] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2674'.
[  416.623211][T15944] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20004
[  416.733541][T15949] netlink: 'syz.1.2678': attribute type 10 has an invalid length.
[  416.767582][T15949] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  416.856899][T15949] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  417.147831][T15962] netlink: 'syz.1.2683': attribute type 1 has an invalid length.
[  417.162612][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'.
[  417.461515][T15969] netlink: 'syz.1.2686': attribute type 3 has an invalid length.
[  417.479166][T15969] netlink: 'syz.1.2686': attribute type 3 has an invalid length.
[  417.487644][T15969] netlink: 'syz.1.2686': attribute type 3 has an invalid length.
[  417.529541][T15969] netlink: 'syz.1.2686': attribute type 3 has an invalid length.
[  417.556297][T15969] netlink: 'syz.1.2686': attribute type 3 has an invalid length.
[  417.597739][T15969] netlink: 'syz.1.2686': attribute type 3 has an invalid length.
[  417.632766][T15969] netlink: 'syz.1.2686': attribute type 3 has an invalid length.
[  417.653399][T15969] netlink: 'syz.1.2686': attribute type 3 has an invalid length.
[  417.773989][T15982] __nla_validate_parse: 4 callbacks suppressed
[  417.774008][T15982] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2690'.
[  417.941623][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  418.200872][T16000] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2695'.
[  418.398150][T16011] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  418.408263][T16011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2696'.
[  418.418990][T16011] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2696'.
[  418.438428][T16011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2696'.
[  418.447837][T16011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2696'.
[  418.757902][T16021] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2698'.
[  418.897215][T16026] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2700'.
[  419.309055][T16044] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2705'.
[  419.376522][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'.
[  420.021352][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  420.421544][ T5869] Bluetooth: hci0: command tx timeout
[  420.500012][T16090] nbd: must specify at least one socket
[  421.370780][T16127] syzkaller0 speed is unknown, defaulting to 1000
[  421.398045][T16127] syzkaller0 speed is unknown, defaulting to 1000
[  421.421242][T16127] syzkaller0 speed is unknown, defaulting to 1000
[  421.507484][T16127] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  421.684869][T16127] syzkaller0 speed is unknown, defaulting to 1000
[  421.744595][T16127] syzkaller0 speed is unknown, defaulting to 1000
[  421.819976][T16127] syzkaller0 speed is unknown, defaulting to 1000
[  421.844207][T16127] syzkaller0 speed is unknown, defaulting to 1000
[  421.883088][T16127] syzkaller0 speed is unknown, defaulting to 1000
[  421.936567][T16127] syzkaller0 speed is unknown, defaulting to 1000
[  422.035462][T16143] validate_nla: 36 callbacks suppressed
[  422.035483][T16143] netlink: 'syz.1.2732': attribute type 2 has an invalid length.
[  422.111062][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  423.126865][T16172] ieee802154 phy1 wpan1: encryption failed: -22
[  423.532119][T16186] __nla_validate_parse: 9 callbacks suppressed
[  423.532142][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2746'.
[  424.101627][T16208] netlink: 'syz.3.2752': attribute type 10 has an invalid length.
[  424.182837][T16206] vxcan1: left allmulticast mode
[  424.195418][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  424.292767][T16216] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2755'.
[  424.309040][T16218] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2755'.
[  424.395013][T16219] "syz.5.2754" (16219) uses obsolete ecb(arc4) skcipher
[  424.657642][ T8040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.683301][ T8040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.702809][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2759'.
[  424.734454][T16234] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2759'.
[  424.750624][   T24] ------------[ cut here ]------------
[  424.756493][   T24] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  424.767566][   T24] WARNING: CPU: 1 PID: 24 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  424.777463][   T24] Modules linked in:
[  424.781723][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) 
[  424.790996][   T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  424.801121][   T24] Workqueue: mld mld_ifc_work
[  424.805863][   T24] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  424.812195][   T24] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 89 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 42 b7 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  424.831861][   T24] RSP: 0018:ffffc900001e64d8 EFLAGS: 00010246
[  424.837954][   T24] RAX: f8eef68f1dd9de00 RBX: 000000000000000c RCX: ffff88801d680000
[  424.845995][   T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  424.854042][   T24] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  424.862091][   T24] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88807ca2c3e8
[  424.870097][   T24] R13: 0000000000000000 R14: ffff888027480e40 R15: ffff8880274830d8
[  424.878153][   T24] FS:  0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000
[  424.887238][   T24] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.893915][   T24] CR2: 000000110c331b92 CR3: 0000000055300000 CR4: 00000000003526f0
[  424.901955][   T24] Call Trace:
[  424.905258][   T24]  <TASK>
[  424.908237][   T24]  rate_control_send_low+0x194/0x7a0
[  424.913683][   T24]  rate_control_get_rate+0x20b/0x5d0
[  424.919028][   T24]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  424.924790][   T24]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  424.930953][   T24]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  424.937238][   T24]  invoke_tx_handlers_late+0xb6/0x1820
[  424.942826][   T24]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  424.948785][   T24]  ieee80211_tx_dequeue+0x308e/0x4360
[  424.954321][   T24]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  424.960081][   T24]  ? __local_bh_enable_ip+0x12d/0x1c0
[  424.965592][   T24]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  424.971748][   T24]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  424.978377][   T24]  ? __local_bh_enable_ip+0x12d/0x1c0
[  424.983833][   T24]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  424.989592][   T24]  ? do_raw_spin_unlock+0x122/0x240
[  424.994886][   T24]  ieee80211_queue_skb+0x1a31/0x21c0
[  425.000306][   T24]  ieee80211_tx+0x297/0x420
[  425.004851][   T24]  ? __pfx_ieee80211_tx+0x10/0x10
[  425.009957][   T24]  ? ieee80211_xmit+0x315/0x400
[  425.014912][   T24]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  425.020998][   T24]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  425.027214][   T24]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  425.033732][   T24]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  425.040023][   T24]  ieee80211_subif_start_xmit+0xe0/0x510
[  425.045733][   T24]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  425.052055][   T24]  ? __pfx_netif_skb_features+0x10/0x10
[  425.057631][   T24]  ? call_rcu+0x6ff/0x9c0
[  425.062057][   T24]  ? __lock_acquire+0xab9/0xd20
[  425.066961][   T24]  dev_hard_start_xmit+0x2d4/0x830
[  425.072197][   T24]  __dev_queue_xmit+0x1b8d/0x3b50
[  425.077259][   T24]  ? register_lock_class+0x51/0x320
[  425.082552][   T24]  ? __dev_queue_xmit+0x27b/0x3b50
[  425.087725][   T24]  ? __pfx___dev_queue_xmit+0x10/0x10
[  425.093176][   T24]  ? read_seqbegin+0x122/0x250
[  425.097982][   T24]  ? neigh_resolve_output+0x438/0x750
[  425.103412][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.108644][   T24]  ? read_seqbegin+0x1ac/0x250
[  425.113485][   T24]  ? __pfx_read_seqbegin+0x10/0x10
[  425.118625][   T24]  ? __local_bh_enable_ip+0x12d/0x1c0
[  425.125782][   T24]  ? eth_header+0x11b/0x200
[  425.130367][   T24]  ? __asan_memcpy+0x40/0x70
[  425.135022][   T24]  ip6_finish_output2+0x11fb/0x16a0
[  425.140288][   T24]  ? ip6_finish_output2+0x701/0x16a0
[  425.145602][   T24]  ? ip6_mtu+0x7d/0x3f0
[  425.149799][   T24]  ? __pfx_ip6_finish_output2+0x10/0x10
[  425.155399][   T24]  ? ip6_mtu+0x7d/0x3f0
[  425.159594][   T24]  ? ip6_mtu+0x321/0x3f0
[  425.163913][   T24]  ? ip6_finish_output+0x2ef/0x4e0
[  425.169070][   T24]  NF_HOOK+0x9e/0x380
[  425.173139][   T24]  ? NF_HOOK+0x101/0x380
[  425.177419][   T24]  ? __pfx_NF_HOOK+0x10/0x10
[  425.182088][   T24]  ? __pfx_dst_output+0x10/0x10
[  425.186970][   T24]  ? icmp6_dst_alloc+0x3a5/0x420
[  425.191973][   T24]  ? icmp6_dst_alloc+0x3a5/0x420
[  425.196978][   T24]  mld_sendpack+0x800/0xd80
[  425.201562][   T24]  ? mld_sendpack+0x1de/0xd80
[  425.206272][   T24]  ? __pfx_mld_sendpack+0x10/0x10
[  425.211388][   T24]  mld_ifc_work+0x83e/0xd60
[  425.215930][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.221203][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  425.226964][   T24]  process_scheduled_works+0xae1/0x17b0
[  425.232612][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  425.238636][   T24]  worker_thread+0x8a0/0xda0
[  425.243323][   T24]  kthread+0x70e/0x8a0
[  425.247437][   T24]  ? __pfx_worker_thread+0x10/0x10
[  425.252612][   T24]  ? __pfx_kthread+0x10/0x10
[  425.257244][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.262599][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.267860][   T24]  ? __pfx_kthread+0x10/0x10
[  425.272539][   T24]  ret_from_fork+0x436/0x7d0
[  425.277171][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  425.282375][   T24]  ? __switch_to_asm+0x39/0x70
[  425.287175][   T24]  ? __switch_to_asm+0x33/0x70
[  425.292019][   T24]  ? __pfx_kthread+0x10/0x10
[  425.296648][   T24]  ret_from_fork_asm+0x1a/0x30
[  425.301509][   T24]  </TASK>
[  425.304569][   T24] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  425.311877][   T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) 
[  425.321188][   T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  425.331263][   T24] Workqueue: mld mld_ifc_work
[  425.335963][   T24] Call Trace:
[  425.339251][   T24]  <TASK>
[  425.342198][   T24]  dump_stack_lvl+0x99/0x250
[  425.346832][   T24]  ? __asan_memcpy+0x40/0x70
[  425.351526][   T24]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.356737][   T24]  ? __pfx__printk+0x10/0x10
[  425.361357][   T24]  vpanic+0x281/0x750
[  425.365372][   T24]  ? __pfx__printk+0x10/0x10
[  425.370059][   T24]  ? __pfx_vpanic+0x10/0x10
[  425.374574][   T24]  ? is_bpf_text_address+0x292/0x2b0
[  425.379906][   T24]  panic+0xb9/0xc0
[  425.383638][   T24]  ? __pfx_panic+0x10/0x10
[  425.388103][   T24]  __warn+0x31b/0x4b0
[  425.392088][   T24]  ? __rate_control_send_low+0x5df/0x820
[  425.397739][   T24]  ? __rate_control_send_low+0x5df/0x820
[  425.403379][   T24]  report_bug+0x2be/0x4f0
[  425.407722][   T24]  ? __rate_control_send_low+0x5df/0x820
[  425.413376][   T24]  ? __rate_control_send_low+0x5df/0x820
[  425.419022][   T24]  ? __rate_control_send_low+0x5e1/0x820
[  425.424660][   T24]  handle_bug+0x84/0x160
[  425.428915][   T24]  exc_invalid_op+0x1a/0x50
[  425.433428][   T24]  asm_exc_invalid_op+0x1a/0x20
[  425.438285][   T24] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  425.444540][   T24] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 89 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 42 b7 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  425.464152][   T24] RSP: 0018:ffffc900001e64d8 EFLAGS: 00010246
[  425.470232][   T24] RAX: f8eef68f1dd9de00 RBX: 000000000000000c RCX: ffff88801d680000
[  425.478214][   T24] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  425.486275][   T24] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  425.494251][   T24] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: ffff88807ca2c3e8
[  425.502237][   T24] R13: 0000000000000000 R14: ffff888027480e40 R15: ffff8880274830d8
[  425.510265][   T24]  ? __rate_control_send_low+0x5de/0x820
[  425.515947][   T24]  rate_control_send_low+0x194/0x7a0
[  425.521258][   T24]  rate_control_get_rate+0x20b/0x5d0
[  425.526561][   T24]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  425.532227][   T24]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  425.538332][   T24]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  425.544689][   T24]  invoke_tx_handlers_late+0xb6/0x1820
[  425.550188][   T24]  ? ieee80211_tx_h_select_key+0xd1b/0x19f0
[  425.556124][   T24]  ieee80211_tx_dequeue+0x308e/0x4360
[  425.561658][   T24]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  425.567394][   T24]  ? __local_bh_enable_ip+0x12d/0x1c0
[  425.572810][   T24]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  425.578943][   T24]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  425.585544][   T24]  ? __local_bh_enable_ip+0x12d/0x1c0
[  425.590923][   T24]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  425.596650][   T24]  ? do_raw_spin_unlock+0x122/0x240
[  425.601864][   T24]  ieee80211_queue_skb+0x1a31/0x21c0
[  425.607196][   T24]  ieee80211_tx+0x297/0x420
[  425.611715][   T24]  ? __pfx_ieee80211_tx+0x10/0x10
[  425.616870][   T24]  ? ieee80211_xmit+0x315/0x400
[  425.621735][   T24]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  425.627729][   T24]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  425.633911][   T24]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  425.640343][   T24]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  425.646689][   T24]  ieee80211_subif_start_xmit+0xe0/0x510
[  425.652337][   T24]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  425.658588][   T24]  ? __pfx_netif_skb_features+0x10/0x10
[  425.664147][   T24]  ? call_rcu+0x6ff/0x9c0
[  425.668500][   T24]  ? __lock_acquire+0xab9/0xd20
[  425.673377][   T24]  dev_hard_start_xmit+0x2d4/0x830
[  425.678551][   T24]  __dev_queue_xmit+0x1b8d/0x3b50
[  425.683587][   T24]  ? register_lock_class+0x51/0x320
[  425.688804][   T24]  ? __dev_queue_xmit+0x27b/0x3b50
[  425.693936][   T24]  ? __pfx___dev_queue_xmit+0x10/0x10
[  425.699331][   T24]  ? read_seqbegin+0x122/0x250
[  425.704097][   T24]  ? neigh_resolve_output+0x438/0x750
[  425.709478][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.714686][   T24]  ? read_seqbegin+0x1ac/0x250
[  425.719460][   T24]  ? __pfx_read_seqbegin+0x10/0x10
[  425.724579][   T24]  ? __local_bh_enable_ip+0x12d/0x1c0
[  425.729969][   T24]  ? eth_header+0x11b/0x200
[  425.734487][   T24]  ? __asan_memcpy+0x40/0x70
[  425.739115][   T24]  ip6_finish_output2+0x11fb/0x16a0
[  425.744356][   T24]  ? ip6_finish_output2+0x701/0x16a0
[  425.749663][   T24]  ? ip6_mtu+0x7d/0x3f0
[  425.753842][   T24]  ? __pfx_ip6_finish_output2+0x10/0x10
[  425.759395][   T24]  ? ip6_mtu+0x7d/0x3f0
[  425.763572][   T24]  ? ip6_mtu+0x321/0x3f0
[  425.767832][   T24]  ? ip6_finish_output+0x2ef/0x4e0
[  425.772963][   T24]  NF_HOOK+0x9e/0x380
[  425.776980][   T24]  ? NF_HOOK+0x101/0x380
[  425.781243][   T24]  ? __pfx_NF_HOOK+0x10/0x10
[  425.785858][   T24]  ? __pfx_dst_output+0x10/0x10
[  425.790725][   T24]  ? icmp6_dst_alloc+0x3a5/0x420
[  425.795785][   T24]  ? icmp6_dst_alloc+0x3a5/0x420
[  425.800746][   T24]  mld_sendpack+0x800/0xd80
[  425.805280][   T24]  ? mld_sendpack+0x1de/0xd80
[  425.809977][   T24]  ? __pfx_mld_sendpack+0x10/0x10
[  425.815043][   T24]  mld_ifc_work+0x83e/0xd60
[  425.819650][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.824863][   T24]  ? process_scheduled_works+0x9ef/0x17b0
[  425.830633][   T24]  process_scheduled_works+0xae1/0x17b0
[  425.836213][   T24]  ? __pfx_process_scheduled_works+0x10/0x10
[  425.842308][   T24]  worker_thread+0x8a0/0xda0
[  425.846934][   T24]  kthread+0x70e/0x8a0
[  425.851116][   T24]  ? __pfx_worker_thread+0x10/0x10
[  425.856238][   T24]  ? __pfx_kthread+0x10/0x10
[  425.860842][   T24]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.866056][   T24]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.871264][   T24]  ? __pfx_kthread+0x10/0x10
[  425.875887][   T24]  ret_from_fork+0x436/0x7d0
[  425.880507][   T24]  ? __pfx_ret_from_fork+0x10/0x10
[  425.885641][   T24]  ? __switch_to_asm+0x39/0x70
[  425.890428][   T24]  ? __switch_to_asm+0x33/0x70
[  425.895199][   T24]  ? __pfx_kthread+0x10/0x10
[  425.899975][   T24]  ret_from_fork_asm+0x1a/0x30
[  425.904770][   T24]  </TASK>
[  425.908168][   T24] Kernel Offset: disabled
[  425.912498][   T24] Rebooting in 86400 seconds..