last executing test programs:

2m52.216798835s ago: executing program 1 (id=622):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) (async)
r2 = accept4(r0, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0, 0x2, 0x3, 0x9b, 0x9, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x7, 0x7, 0x626, 0xffff}}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r8=>0x0}) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x14, 0x25, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
close(r10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
r11 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r11, 0x1, 0xd, &(0x7f0000000080), 0x24) (async)
close(r11) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
pread64(r5, &(0x7f0000002840)=""/4096, 0x1000, 0x100000001) (async)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="ae1bdb0a959b952ca25d0b5d61cbecf0221b410f5b198090b62f7a5485d57f6712502512ef821ee5f879fb45c9b11446be7ade2712935a7b172881d49a93060340bd6b3def93ed2e503f1cbc155cf51894979150861061628165412a5510a39c37ae5a86000000000000c0a3fa1b3c5d88bdc6faf351f44af49ec2937819d2290df5c104a476", @ANYRES16=r3, @ANYBLOB="00032abd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000044) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2)

2m51.741805151s ago: executing program 1 (id=630):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xf}, {}, {0xfff3, 0xd}}, [@filter_kind_options=@f_cgroup={{0xfe4a}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x400000000000154, 0x2042160, &(0x7f0000003700)={0x77359400})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r7, 0x29, 0xcd, 0x0, 0x5c)
r8 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/uts\x00')
ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f00000000c0)={0xfffffdec, 0x2, 0x1000, 0x5, 0xfffffffb, 0x6})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000340), &(0x7f0000000480)=0x4)
sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000a0a01040000000000000000020000030900010073797a3000f9ff00"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'ip6gre0\x00'})

2m50.631606251s ago: executing program 1 (id=639):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e23}]}}]}, 0x4c}}, 0x24004000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, r2, {}, {0x2, 0xffff}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x73e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="733892e9a090b6dd9aa548000000180301040000", @ANYRES32=0x0, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

2m50.270914345s ago: executing program 1 (id=643):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)

2m49.848452043s ago: executing program 1 (id=649):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x3c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', <r1=>0x0, 0x7800, 0x7800, 0xd64, 0xfffffff8, {{0x1b, 0x4, 0x1, 0x10, 0x6c, 0x65, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@noop, @ra={0x94, 0x4}, @generic={0x43, 0x10, "f4509ced80e4b9c029edd928eb16"}, @ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0x7, 0x6, [@dev={0xac, 0x14, 0x14, 0x2c}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x60, 0x1, 0x0, [{@loopback, 0x4}, {@multicast2, 0x8}, {@local, 0x9944}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xae4b}, {@remote, 0x3}]}]}}}}})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r4, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010)
getpid()
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x10, 0x1409, 0x262543c4cee33fe7, 0x70bd2b, 0x1000}, 0x4e}}, 0x20008000)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1412, 0x1}, 0x10}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x885}, 0x90)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14041043}, 0x0)
sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000f33bdc97a8d29ebcae76e05f43000000", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800a500000000000400a6804000a6800a00060008021100000100000a0006000844da00000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000800a50001"], 0x7c}}, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

2m49.566974811s ago: executing program 1 (id=652):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9a}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m41.294581787s ago: executing program 3 (id=715):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace801796ec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000f80)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x3}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x2}, {0x0, 0x0, 0x0, 0x3}}, 0x0, 0x5dfe}, [@lastused={0xc, 0xf, 0xfffffffffffffffd}]}, 0x104}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @private0, 0x3ff}, 0x1c)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004050)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)

2m40.306436478s ago: executing program 3 (id=724):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES32=0x0], 0x30}}, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x4, 0x56}, &(0x7f00000003c0)=0x90)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x25, 0x0, 0xffffffffffffffd6}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r7)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000300)=0x5, 0x4)
sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x3, 0x0)
getsockopt$netlink(r11, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

2m39.667047331s ago: executing program 3 (id=729):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x28000}, 0x4000840)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) (async)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r3=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=<r4=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r6=>0x0})
sendmsg(r5, &(0x7f0000000800)={&(0x7f0000000340)=@xdp={0x2c, 0x1, r6, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)="a023e52a6e2b737ad45564", 0xb}], 0x1, &(0x7f0000000440)=[{0xd8, 0x107, 0x1, "703ce0336e0d9f3e5431c9987cf6e54197167c3803ba3ca67c1a9bca90745577f7e8aadddd9ad2abfa32d4654651a1227ea5f98f31a44e974514e3fb752d93ceee9a46cbb4a1233b827cf2518dd9988769e13eafb631013b757b4cad3189ceee78ae57b8f0185f7c27d2a8818637842f95e9444db8bfeab4af9fde0e63cc063c0f665b728e026e0ec82056a37e71948331b5b5a6a5328f94ae6d83f6a9990a84af8a0b6a2e3848b623b54882a90145b8e48957d769cf2557be9a82d9491f2c1f74c7dcab3789"}, {0x20, 0x114, 0xaeb9, "174514dd230e44260e5519aa0a3d"}, {0x48, 0x111, 0x101, "6d6bd69156c7d19ba1938c42c9a8034c1f49b463eca597646e2e8ce83723396a4de371053862408c1464dd4ab740573765ae"}, {0xc8, 0x115, 0xffff7fff, "a5cc766c29a501f548abd2c7c1d95cbe9dcea702e4c566e420bb24cacc19e57a43eaaf1713eaee51db458e893e62ff568902e4bd33c1232ffd6dbcedec0c3fa6635d1cb3a61aaa407a3c28568dee5f053bdbd7c211e4d2fa7f4083bc9678d6185437d16475e3716e1e1ca898d852e7844633b36babc1c0eee706eddbb448a989be07708e96847eacb6f11a44db8ea344d42bb2f515f82f3dd15a2ea22de4c0463299a5cc75323d6ea11567516c1771c498"}, {0xa8, 0x104, 0x352c, "e975d943b4203f15e205af3f59947be3dc288bfc44c2fe4c71868b9f2f5ed8c3f9cb6faf1dff2b14612d3aa6c2546e51352ad48153f1b63535073a0b6028e26523eb97aff18e036ced81c2f38cd86bb4309b11db77a87db0a1182dd641f23554311402a176e01e7344cc534f5a9bb4df55b6231e1d25b2284383a4de0b7f24a4976c053be7777068a04a99374c624284378e0e3afa4e79"}, {0xf0, 0x111, 0x7, "ab356a0966607b170e623bf9e92947c4b29b038605981ef4eb116d357170da516584e3699dacfd366934b41e658236213816bf61a6f501a57f5f73a07b5fbd392d19786ab500acdfdcaf68926e3320cfad8e0b34cee440058ef7b9e5c3009ba3794ec557e8a57e368563337b8a5ad24674814471ed69f638974e31e85ad933c86580626614e8550b0c0864e84e8bf838c0a71ae7a755691e024a3638cf05372d76a5e29899059358434b611ab5418d7060d2dedd090dc2a35b570d1cbf46d68ac1f2d9ad1349113de4e1d6d98d117e099400a839db4f4c002c037688c5"}], 0x3a0}, 0x240080d1) (async)
sendmsg(r5, &(0x7f0000000800)={&(0x7f0000000340)=@xdp={0x2c, 0x1, r6, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)="a023e52a6e2b737ad45564", 0xb}], 0x1, &(0x7f0000000440)=[{0xd8, 0x107, 0x1, "703ce0336e0d9f3e5431c9987cf6e54197167c3803ba3ca67c1a9bca90745577f7e8aadddd9ad2abfa32d4654651a1227ea5f98f31a44e974514e3fb752d93ceee9a46cbb4a1233b827cf2518dd9988769e13eafb631013b757b4cad3189ceee78ae57b8f0185f7c27d2a8818637842f95e9444db8bfeab4af9fde0e63cc063c0f665b728e026e0ec82056a37e71948331b5b5a6a5328f94ae6d83f6a9990a84af8a0b6a2e3848b623b54882a90145b8e48957d769cf2557be9a82d9491f2c1f74c7dcab3789"}, {0x20, 0x114, 0xaeb9, "174514dd230e44260e5519aa0a3d"}, {0x48, 0x111, 0x101, "6d6bd69156c7d19ba1938c42c9a8034c1f49b463eca597646e2e8ce83723396a4de371053862408c1464dd4ab740573765ae"}, {0xc8, 0x115, 0xffff7fff, "a5cc766c29a501f548abd2c7c1d95cbe9dcea702e4c566e420bb24cacc19e57a43eaaf1713eaee51db458e893e62ff568902e4bd33c1232ffd6dbcedec0c3fa6635d1cb3a61aaa407a3c28568dee5f053bdbd7c211e4d2fa7f4083bc9678d6185437d16475e3716e1e1ca898d852e7844633b36babc1c0eee706eddbb448a989be07708e96847eacb6f11a44db8ea344d42bb2f515f82f3dd15a2ea22de4c0463299a5cc75323d6ea11567516c1771c498"}, {0xa8, 0x104, 0x352c, "e975d943b4203f15e205af3f59947be3dc288bfc44c2fe4c71868b9f2f5ed8c3f9cb6faf1dff2b14612d3aa6c2546e51352ad48153f1b63535073a0b6028e26523eb97aff18e036ced81c2f38cd86bb4309b11db77a87db0a1182dd641f23554311402a176e01e7344cc534f5a9bb4df55b6231e1d25b2284383a4de0b7f24a4976c053be7777068a04a99374c624284378e0e3afa4e79"}, {0xf0, 0x111, 0x7, "ab356a0966607b170e623bf9e92947c4b29b038605981ef4eb116d357170da516584e3699dacfd366934b41e658236213816bf61a6f501a57f5f73a07b5fbd392d19786ab500acdfdcaf68926e3320cfad8e0b34cee440058ef7b9e5c3009ba3794ec557e8a57e368563337b8a5ad24674814471ed69f638974e31e85ad933c86580626614e8550b0c0864e84e8bf838c0a71ae7a755691e024a3638cf05372d76a5e29899059358434b611ab5418d7060d2dedd090dc2a35b570d1cbf46d68ac1f2d9ad1349113de4e1d6d98d117e099400a839db4f4c002c037688c5"}], 0x3a0}, 0x240080d1)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r0)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '*%'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x11) (async)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '*%'}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x11)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@fwd={0x3}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @fwd={0xe}, @fwd={0x1}, @typedef={0xe, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x61, 0x61, 0x5f, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000a40)=""/163, 0x5c, 0xa3, 0x0, 0x4, 0x10000}, 0x28)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b40)={'veth1_to_hsr\x00'})
getsockname$packet(r5, &(0x7f0000000b80)={0x11, 0x0, <r10=>0x0}, &(0x7f0000000bc0)=0x14)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f0000000c00)=0x6, 0x4)
getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) (async)
getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r12, 0x3, r9, &(0x7f0000000cc0)={0x1})
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r13, 0x84, 0x13, &(0x7f0000000d00)=0x200, 0x4)
bind$inet6(r13, &(0x7f0000000d40)={0xa, 0x4e24, 0x3, @empty, 0x5}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0) (async)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'ip6tnl0\x00', r10, 0x4, 0x10, 0x9, 0x1e, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8, 0x800, 0xff}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'ip6tnl0\x00', <r15=>r10, 0x4, 0x10, 0x9, 0x1e, 0x0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8, 0x800, 0xff}})
sendmsg$nl_route(r14, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@bridge_getvlan={0x28, 0x72, 0x20, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r15}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x4040000) (async)
sendmsg$nl_route(r14, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=@bridge_getvlan={0x28, 0x72, 0x20, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r15}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x4040000)
r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0xfffffff8, '\x00', r15, r9, 0x2, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x13, 0x1d, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @map_fd={0x18, 0xb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfff}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @alu={0x4, 0x1, 0x8, 0xa, 0x1, 0x8, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000010c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, r9, 0x8, &(0x7f0000001140)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0xe, 0x0, 0x200}, 0x10, 0x0, r14, 0x6, &(0x7f0000001280)=[0xffffffffffffffff], &(0x7f00000012c0)=[{0x1, 0x4, 0xb, 0x5}, {0x2, 0x5, 0xd, 0x7}, {0x5, 0x4, 0xf}, {0x3, 0x3, 0x8, 0x6}, {0x68000, 0x1, 0x5, 0xd}, {0x5, 0x2, 0xf}], 0x10, 0xca3}, 0x94)

2m39.434245597s ago: executing program 3 (id=732):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000fcdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="f1f96d977c7570050034008b00000004060001cbcf9a880a418bacfd2f9b7f02a744ec4901ce47b5509a399b850e42ac4b48a535fe0a1acdb3cc81ddce77ff4d1ba315f56d8893beef563d5362f2886503b384be5bb6df8a8c207dcc98e5ad2f8f860ad9665d7947dbd3698c46f992c68af27d103ff1882a6cee4f49187456f915c1a2000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x28068084)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000fcdbdf252e00000008000300", @ANYRES32=r2, @ANYBLOB="f1f96d977c7570050034008b00000004060001cbcf9a880a418bacfd2f9b7f02a744ec4901ce47b5509a399b850e42ac4b48a535fe0a1acdb3cc81ddce77ff4d1ba315f56d8893beef563d5362f2886503b384be5bb6df8a8c207dcc98e5ad2f8f860ad9665d7947dbd3698c46f992c68af27d103ff1882a6cee4f49187456f915c1a2000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x28068084) (async)

2m38.946348768s ago: executing program 3 (id=735):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080))
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', <r5=>0x0, 0x80, 0x10, 0x80, 0xfffffc01, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x65, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp={0x44, 0x1c, 0x12, 0x0, 0x2, [0x80000, 0x2, 0x3, 0x8, 0x5, 0xffff]}, @timestamp={0x44, 0x18, 0xdd, 0x0, 0xa, [0x113f, 0x5, 0x5, 0x7, 0x2]}, @timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x1, [{@empty, 0x9}]}]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@delqdisc={0x120, 0x25, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x3}, {0xfff2, 0xe}, {0x3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x80}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xff}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xb}}, @qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x6}]}}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x5, 0x7, 0xaa, 0x2, 0xf6ff, 0xf96, 0x4}}, {0xc, 0x2, [0x8, 0x98, 0x4, 0x5]}}, {{0x1c, 0x1, {0xd7, 0x12, 0x2, 0x2, 0x0, 0x4c12, 0x1, 0x8}}, {0x14, 0x2, [0x10, 0xb, 0xd, 0x5, 0x5, 0x101, 0xfffe, 0x4]}}, {{0x1c, 0x1, {0x7f, 0x69, 0xd, 0x5b, 0x0, 0xb, 0x10001}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x76, 0x13}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x888e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x3, 0x0, 0x3}}, {@generic={0x88f7}}}}, 0x1a) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf254500000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

2m38.557292617s ago: executing program 3 (id=739):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
ioctl$FICLONE(r3, 0x40049409, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100)
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=0x0], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
shutdown(r2, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}}, 0xd5)

2m34.486208172s ago: executing program 32 (id=652):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9a}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m23.43960616s ago: executing program 33 (id=739):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
ioctl$FICLONE(r3, 0x40049409, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100)
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=0x0], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
shutdown(r2, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}}, 0xd5)

1m36.162968621s ago: executing program 4 (id=1423):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x81000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x60, 0x1403, 0x1, 0x70bd2c, 0x25dfdc00, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x810)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800)
clock_gettime(0x0, &(0x7f00000011c0)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f00000044c0)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)}, {&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000280)=""/69, 0x45}, {&(0x7f0000000480)=""/149, 0x95}], 0x5, &(0x7f00000005c0)=""/242, 0xf2}, 0x3ff}, {{&(0x7f00000006c0)=@can, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000001240)=""/4096, 0x1000}, 0xeb1}, {{&(0x7f0000000740)=@xdp, 0x80, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/203, 0xcb}, {&(0x7f00000008c0)=""/194, 0xc2}, {&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/130, 0x82}], 0x4, &(0x7f0000002240)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000bc0)=""/163, 0xa3}, {&(0x7f0000000c80)=""/218, 0xda}, {&(0x7f0000000d80)=""/246, 0xf6}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000000e80)=""/201, 0xc9}, {&(0x7f0000000f80)=""/142, 0x8e}, {&(0x7f0000001040)=""/3, 0x3}, {&(0x7f0000001080)=""/225, 0xe1}, {&(0x7f0000004240)=""/158, 0x9e}, {&(0x7f0000004300)=""/230, 0xe6}], 0xa, &(0x7f0000001180)=""/3, 0x3}, 0x80000000}], 0x4, 0x10000, &(0x7f00000045c0)={r3, r4+60000000})
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000100)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000300)=0x2c)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000240)=ANY=[@ANYBLOB="150000005500bbca000000000000000007"], 0x18}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000004600), r5)

1m35.990970068s ago: executing program 4 (id=1426):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)

1m35.359000681s ago: executing program 4 (id=1435):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0)

1m35.173443905s ago: executing program 4 (id=1437):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) (async)
getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x2)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="15ae9ca38f2148f3be52163448412ba8b66cbfff588cd20e14d4050466bf2acbefdbd503be76aeadda97fc4c2fb625d598a184e5dee51a0828d420081d449d1975fb838c7fb32a897448edc11a80b2340d52109d3b13d0987b59402297bcb8ef1e1fcf0a420c2cac48df8204fbe2a448a40000000000006ef04c4a0140e8c13b9cfb38a2afaa59bfda82ca49ac823427e424fb53b79226fa5835790aae37100d60eab8ac5c4949a72dc2a0510f7375028a1b3b21d9e05f8a2ab17bf7869852cf511bf5dd665fa7d71b4bc25081ad794227ebb6c1946b86427a74feb2", 0xdc}, {&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb0500873048b1f5a9c08e6165e35f41", 0x57}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1m35.002771042s ago: executing program 4 (id=1438):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080004000300"/40], 0x40}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c0000080004000300"/40], 0x40}}, 0x0) (async)

1m34.798441935s ago: executing program 4 (id=1442):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)={@cgroup=r0, r0, 0x7, 0xce2d3afaee448c72, 0x4}, 0x20)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0xc, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8094}, 0x8001)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r5 = gettid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2)
syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/net\x00')
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x2b, 0x107, 0xfffffffe, 0x2, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x1}]}, @typed={0x14, 0xc6, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={<r6=>r3, 0x3, 0x8, 0x4})
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={<r7=>0x0, 0x6d, "b0c4837b70fc8fdce1d6a27516c04c0752e35a9e0180438d2cf27a9c0778d8a8dffeb6d6264e14a47bfd3d00d648f323538ec9825ace165b271d8f06ceddf3b48fa37c83ecffd6c37af6f9a6813d00d07ecc80349ce9736d43e33c04d02a63c86528ab19f7d289e8b2ea4dc76f"}, &(0x7f0000000140)=0x75)
setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r7, 0x4}, 0x8)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @default, @bpq0, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast]})
connect$rose(r1, &(0x7f0000000340)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default]}, 0x40)
connect$rose(r1, &(0x7f0000000480)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @bcast}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000002c0)='wg2\x00', 0x4)

1m19.754418191s ago: executing program 34 (id=1442):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000640)={@cgroup=r0, r0, 0x7, 0xce2d3afaee448c72, 0x4}, 0x20)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0xc, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8094}, 0x8001)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r5 = gettid()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2)
syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/net\x00')
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x2b, 0x107, 0xfffffffe, 0x2, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x1}]}, @typed={0x14, 0xc6, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000100)={<r6=>r3, 0x3, 0x8, 0x4})
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={<r7=>0x0, 0x6d, "b0c4837b70fc8fdce1d6a27516c04c0752e35a9e0180438d2cf27a9c0778d8a8dffeb6d6264e14a47bfd3d00d648f323538ec9825ace165b271d8f06ceddf3b48fa37c83ecffd6c37af6f9a6813d00d07ecc80349ce9736d43e33c04d02a63c86528ab19f7d289e8b2ea4dc76f"}, &(0x7f0000000140)=0x75)
setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r7, 0x4}, 0x8)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @default, @bpq0, 0x1, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @bcast]})
connect$rose(r1, &(0x7f0000000340)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default]}, 0x40)
connect$rose(r1, &(0x7f0000000480)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @bcast}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000002c0)='wg2\x00', 0x4)

2.171055653s ago: executing program 2 (id=2588):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x3, &(0x7f0000000100)={[0x3]}, 0x8)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x27}, 0x40000001)
ioctl$TUNSETNOCSUM(r3, 0xff07, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000001a40)={0x2, 'erspan0\x00'}, 0x18)

1.922988341s ago: executing program 2 (id=2591):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, 0x0, 0x0, 0x20048800, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10)
close(r0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r1, 0x3)
accept4(r1, 0x0, 0x0, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)='L{', 0x2}], 0x1)

1.654317617s ago: executing program 0 (id=2596):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0c0000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000308000140000000000900010073797a30000000000900020073797a32", @ANYRESDEC=r1], 0x7c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x23c2f}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xf7e}}]}]}]}, 0x34}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b04f300000000000000020000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523669abf4579f9cd6564e6400f00000045bfe585ab6933a6f6094a0eebad4e35370a000100484d41524b00000008000240000000000900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0xaf, 0x30, 0x200, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0)

1.303004756s ago: executing program 5 (id=2599):
socket(0x10, 0x3, 0x0)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001200add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001a000100000000000000000080"], 0x1c}}, 0x0)

1.302494049s ago: executing program 0 (id=2600):
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2, 0xb, 0x7, 0x5, 0x4, 0x4, 0x7}, 0x9c)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32, @ANYBLOB="1400"], 0x48}}, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f0000000180)) (async)
getsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f0000000180))
syz_init_net_socket$nfc_raw(0x27, 0x7, 0x0) (async)
syz_init_net_socket$nfc_raw(0x27, 0x7, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x9, 0x10, 0x1, 0x1}, &(0x7f0000000340)=0x18) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x9, 0x10, 0x1, 0x1}, &(0x7f0000000340)=0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup(r6, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f0000000180), 0x2, 0x0)
sendfile(r5, r8, 0x0, 0x7) (async)
sendfile(r5, r8, 0x0, 0x7)
accept(r0, &(0x7f0000000280)=@nl=@proc, &(0x7f00000000c0)=0x80)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r10=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000480)={r10}, &(0x7f00000004c0)=0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

1.297713056s ago: executing program 6 (id=2601):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002800)={<r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000002c40)) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x1000) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000))

1.205801251s ago: executing program 7 (id=2602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
socket$nl_crypto(0x10, 0x3, 0x15) (async)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0) (async)
sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000100009050000000000000000b1ff2e5c5360538c5698b6b7f39c417223b4d07456d68ee6758887d396e5c839d5a9000080afc7872d3c4a648166b916526af53872845d1f1ac1df1d4db700301c32882813fb5aad2faf74aaeeb870af1ed5a0fd551829fcd1dcccc26cf6a064e1c271394e2ef9ba127e7a8091b7ae725cf193b9cf29aa4de9082491d489819b"], 0xe0}], 0x1}, 0x0)
sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x702, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800)

1.095074879s ago: executing program 6 (id=2603):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0xfd58, 0x0})

1.094548127s ago: executing program 0 (id=2604):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000740)) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000fddbdf250200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900f40000002f000000080026007f170400"], 0x30}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a40)={0x240, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x222, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x4}, 0x1, 0xe8, @device_a, 0x7, 0x7ca7, 0xc}}, @measure_req={0x26, 0x11, {0x40, 0x2, 0xc7, "643eb0eac0c1710d8fe555ed068f"}}, @perr={0x84, 0x116, {0x9, 0x12, [{{}, @device_b, 0x401, @void, 0x39}, {{}, @device_b, 0x1, @void, 0x1f}, {{0x0, 0x1}, @device_b, 0xffffffff, @value=@broadcast, 0x3e}, {{}, @broadcast, 0x4, @void, 0x17}, {{}, @device_b, 0xbf, @void, 0xb}, {{}, @device_a, 0x0, @void, 0xf}, {{0x0, 0x1}, @device_a, 0x7, @value, 0xe}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x21}, {{}, @device_b, 0x7f, @void, 0x9}, {{0x0, 0x1}, @broadcast, 0x1ff, @value, 0x2b}, {{}, @device_a, 0xfffffff9, @void, 0x4}, {{0x0, 0x1}, @device_a, 0x401, @value=@device_b, 0x22}, {{}, @device_b, 0x6, @void, 0xb}, {{}, @device_a, 0x7, @void, 0x23}, {{0x0, 0x1}, @device_a, 0x0, @value=@device_b, 0x40}, {{}, @broadcast, 0x5, @void, 0x27}, {{}, @broadcast, 0x72fc00cf, @void, 0x24}, {{0x0, 0x1}, @device_b, 0x401, @value, 0x26}]}}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0xd2, {0x1, 0x1, 0xa6, "b0b3c2f2a012b56ce4c213f7a0e2b7a7f0cd41fe38bea53b1860e2ffaf5f9a27da6bf6e7cefbd0d825fbf60707fb0ab32c96d8a3ef118cf0fd6521f9df2fc8d48f59879ccbe0b9fca8bbe2fefc806c85453bb1ebe21d4568a6cc5cf4df5831f403ee6e148c8baa1f25475725ce14f554119f6923f9a0cd8ddaacc3fb6b211ff74bd18c2d2fd70cce67158ee9320c7883101de09fef87f61a01edad7d6a91a13a8e4c7691a7a15e3ad4224c698060d9cb9aee2217113556aa24b399b6d2581c053cc708497227eabfdaeb7134f59511"}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0xa1}, 0x20000014) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0)
getsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f0000000040)) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00000052000100000000000000000002"], 0x1c}}, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000008000)=@newtfilter={0x24, 0x2c, 0x40c, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0x5, 0x3}, {0x10, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async)
r8 = socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r11=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x0, 0x14, {{0x5, 0x4, 0x1, 0x34, 0x14, 0x64, 0x0, 0x94, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}}}}}) (async)
pipe(&(0x7f0000000200)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
write(r13, &(0x7f0000000340), 0x11000) (async)
vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async)
r14 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r11, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1400000000000000010000000c"], 0x14}, 0x800)

1.092714781s ago: executing program 7 (id=2605):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0)
ppoll(&(0x7f0000000040)=[{r2, 0x290}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000240)=0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r6=>0x0})
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r7, 0x101, 0x7, &(0x7f0000000140), &(0x7f00000002c0)=0x4)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010"], 0x78}}, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r9, &(0x7f0000000140)}, 0x20)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000020000000900010073797a320000000014000200626f6e64300000000000000000924f0b62116903ed8ab64e000000"], 0x34}}, 0xc800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000100001002bbd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0000000004000000180012800b00010067656e65766500000800028004000e00"], 0x38}}, 0x0)

1.081300356s ago: executing program 5 (id=2606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp(0x2, 0x3, 0x2)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000080)=""/107, &(0x7f0000000100)=0x6b)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r1, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4ba, &(0x7f00000009c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x484, 0x6, 0x0, @remote, @local, {[@hopopts={0x3a, 0x42, '\x00', [@generic={0x0, 0xe2, "327c7b3717cd870617dbeec25a20cedb9ab97d6920bd0e7ec649c064e2bb5c573d88de3de40abbe6e36e1fb1f85309c396cfd719914fa99a1ffb0a1f964598f9c7f6eb73c5f5c2ae3347465a605f5973bc5e616479105afeb294fdc0661129b32bf215e68df2281cbe8ef1b1c693102e42989e2ac26952eb2a662e15129ff4de5e7be39329552bc0e3e219c46ecb0c5e715b0e1fab84382854932febe481e33c377b5d61a10f9a478d4ea4121ba535ddb812ccd66cbfd1454ff848dedcef6d21b66b02eed30c57d89c0ac391508f8f02940b2a8a159f56bf574f0776ba74f9ff4579"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x8, [0x8, 0x2000008, 0xfffffffffffffff7]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x1c}}, @hao={0xc9, 0x10, @mcast2}, @generic={0x5, 0xe2, "6c09e7dcb13ccdfc9ac9811e3a2875496b2fdcd9acd987b4c163a3d0910d70b34f7e7c546cd4bf35a0a993f1774a7367305cfe67539d76fd300154e58e9577d6497d79d86f3c26078c53c82696e73c82a6a0fee99875d4ff73c873311038c4517d6c96c8ce1dff89dbe29e04c3a428151143974b9729a7e47007081cd944e167192f2d4da010a44c0b35f9bd63a4214d1a9d6376a3b6b27480589eeaf1182369ee86af158850c5c279899673b54a28f6ce67dc187c77cf6e7bee3248bc1235a9ee5a150f0d6a54837640cb6b6d6d5ffd33b19e6f75e7a9909896feb9960aeefec712"}]}, @srh={0x2c, 0x4, 0x4, 0x2, 0xe, 0x30, 0x9, [@private1, @loopback]}, @dstopts={0x5c, 0x1d, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @generic={0x10, 0xcc, "225b58ec37b7542835ea5602c094774f7d782798339c51a52ffe770ef6d080a87aac396bb2169c8eb2373fd3f93d18c0c009bde9e3a56503cb6705e1a4f4cd12885106573ccb1fa8c09d1d8e1bd8e09558b2fc2f546c3f47101c632e9030236eda5b7ace119bf314ae5f8a8dadf98360aa6d9972cebda3d3e1185eca87cd69dd66963e2bdc1935e1f8e03876a8997e075a18b459dc0836535dfc7ceeb870552de95e825b9de8d2198b071e84da19c8c5df855f76f0a695b391629d82f05923e10bf5f7a0c930527c4c6c2585"}, @pad1, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x20, 0x0, 0x5, 0x0, 0x0, 0x1, 0x65}, @hopopts={0x2f, 0x12, '\x00', [@ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x4, 0x84, "019e603c1b11958297af46847b4e8fff037dd6dc89c3ec591468c746f808989a13f110c63ab38a4228f81159eed133a740b2ba2ba98e752b229865ad7f6e273df18a62db0e813feca47479c7d36fa40e84b6cb062e53702e41096388723c922838facad30010b47393305a0b3f4973e001f73f5ccddca6dac84f64a16bb24d8ea80693a8"}, @padn={0x1, 0x1, [0x0]}, @padn]}, @hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}, @hopopts={0x5e, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x28, {0x2, 0x8, 0x9, 0x5692, [0x1, 0x100000001, 0x2, 0x3f]}}]}, @srh={0x84, 0x6, 0x4, 0x3, 0x2, 0x0, 0x0, [@empty, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x16, 0x0, 0x7, 0x0, 0x0, 0x2, 0x65}], {{0x0, 0x4e25, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0)
r2 = socket$kcm(0x21, 0x7, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x40080)
close(r2)
socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="200033008000e100ffffffffffff080211000000"], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000fdff104d00000000009500"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.00525059s ago: executing program 2 (id=2607):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35}, 0x90) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
sendto$phonet(r0, &(0x7f0000000540)="7b898fb18b636aa0548f6a533f97ea4c31f1645b88cf7ced03efedbec4a52cdb97a84ab2edb588d2c4318b83c3807c812d161b12ed7c05816727dd688558e9c4b7889e79c975e1ec537e8dd75a438777e296342e3a37ec0ccf83ada2f5cf811bbe53b8d6417fe608bd3e16bf6170e6f565ec6d49c1272b1fdff3e57fd60d1a21170022a24674344045d0adcb27336760680526ca56cf8f38771a999922fa1c3dde552280b94681669e48dcc955ae9a65cf3c4e73d63d581a3f893bedfa0aa00b8f07bd1ab48bc59c92650042c8", 0xcd, 0x40000, &(0x7f00000000c0)={0x23, 0x9, 0x4, 0x7}, 0x10) (async)
syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x10, 0x6, 0x0, @remote, @local, {[], {{0x0, 0xe22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1d3622fb24b095"}, @fastopen={0x22, 0x6, "5f83c50f"}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060ae904000000000000000002000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) (rerun: 64)

815.152782ms ago: executing program 0 (id=2608):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESDEC=r2, @ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="08000500060000000c00178004afa2a8f90007"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

814.373799ms ago: executing program 2 (id=2609):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x7c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xfff}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_FWMARK={0x8}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

812.457774ms ago: executing program 7 (id=2610):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r1)

801.075392ms ago: executing program 5 (id=2611):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) (async, rerun: 64)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040)) (async)
r2 = socket$kcm(0x11, 0xa, 0x300)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000700000000000000000095", @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r3}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r4}, 0x10) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) (async, rerun: 32)
syz_emit_ethernet(0x34, &(0x7f00000004c0)={@local, @random="99879e18f3ff", @void, {@generic={0x8906, "434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacbcb6245fd5539d8ffe6a8f98cecd73"}}}, 0x0) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)

757.718873ms ago: executing program 6 (id=2612):
r0 = socket$pptp(0x18, 0x1, 0x2)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x5, 0x8, 0xfffffffffffffffe})
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x2)
close(r1)
write$ppp(r1, &(0x7f0000000080)="e4964715b5cbf68c001b6d1cd6f5ff8309379701adfd733eba89463a2721c0ec6249da85f55c86318e89999a124003faf5fda7c6ed59fa3c4482188ec51f9bf4710318da85d36516e7330e82fb", 0x4d)
ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000100))
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000140))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80)
close(r0)
connect$pptp(r1, &(0x7f00000002c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2)
sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2eb913b2cbd85637}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, 0x1401, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4090)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000000640)=0xe8)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '-%.$'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x90)
r6 = socket(0x1d, 0x0, 0xffffffff)
getsockname$packet(r1, &(0x7f00000007c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff3c7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000c085)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940), r5)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x74, r8, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x30d}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, ',\xee$'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ac}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={r1, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x98, r9, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r1, 0x4)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r6)
sendmsg$NL80211_CMD_SET_WDS_PEER(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x80, r11, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="59b63f3ff793"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="17e5db99ab34"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000ec0)={@rand_addr=' \x01\x00', 0x4a, r7})
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000f00)={{r1}, "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"})

619.060577ms ago: executing program 2 (id=2613):
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x204, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)={0x5c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x3d, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4001, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0xffff}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @void, @void}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

618.013593ms ago: executing program 0 (id=2614):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000180)=0x14)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x93f, @mcast2, 0x7}, 0x1c)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8)
close(r8)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x400, 0x1, 0x800, r3, 0x4, '\x00', r4, r8, 0x3, 0x3, 0x4, 0x3}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r9, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r10, 0x417, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x4044040)
socket$nl_audit(0x10, 0x3, 0x9) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=0x14) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x93f, @mcast2, 0x7}, 0x1c) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) (async)
close(r8) (async)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x400, 0x1, 0x800, r3, 0x4, '\x00', r4, r8, 0x3, 0x3, 0x4, 0x3}, 0x50) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r9, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r10, 0x417, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x4044040) (async)

584.808652ms ago: executing program 7 (id=2615):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x3aa}]}, 0x24}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, [@RTA_PRIORITY={0x8, 0x6, 0x3aa}]}, 0x24}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) (async)

511.989253ms ago: executing program 6 (id=2616):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

430.964046ms ago: executing program 0 (id=2617):
socket$kcm(0x21, 0x2, 0x2)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000000206050000000005000400000000000900020073797a120000007f0000000900"/45], 0x3c}}, 0x840)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xd0, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xece}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24d7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d66}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeab}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc000}, 0x8000)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

388.930926ms ago: executing program 5 (id=2618):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='memory.min\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x60004, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="180800000000000000000800000000001811d64f09e10000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008004608f0ff60e8cf40bf980000000000005608f8ffffff00008500000007c6a8e5d01c6b4d7ebf000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

331.663154ms ago: executing program 7 (id=2619):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x19c, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x986}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffff800}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0xc0, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfe}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x26643ab7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x388617a5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x19c}}, 0x20000000) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x11) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x613, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x800) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x53}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
ioctl(r0, 0x80000, &(0x7f00000006c0)="8ee83e4288b2edc2774a4043fe98a67aab43a45caafdf3f928b2a5f9730f25e86b1f3bd2be1daa1ade464f23e3db2def0e656adb260697123bdad7f8869fbc")
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000700)={'team_slave_0\x00', 0x9}) (async)
r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000740), &(0x7f0000000780)=0x10, 0x80000) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000840)={'syztnl1\x00', r5, 0x20, 0x7800, 0x4, 0x9e, {{0x2f, 0x4, 0x0, 0xc, 0xbc, 0x68, 0x0, 0xa, 0x4, 0x0, @remote, @loopback, {[@noop, @lsrr={0x83, 0x7, 0x48, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x1c, 0xa8, 0x0, 0x6, [0x9, 0x10001, 0x4, 0x93b, 0x5, 0x7]}, @cipso={0x86, 0x4e, 0x2, [{0x6, 0xe, "f3223fe71665d6e48fd6c57e"}, {0x1, 0xa, "5ff526fd6ab836f3"}, {0x1, 0x8, "f4aa3912e0c4"}, {0x7, 0x8, "2b770d5a4f7f"}, {0x7, 0xa, "1412dbec2dc3973c"}, {0x1, 0xe, "387f9ec7a846aea7ae29005e"}, {0x1, 0x8, "238de0364a3f"}]}, @rr={0x7, 0x1f, 0x64, [@local, @private=0xa010102, @rand_addr=0x64010101, @rand_addr=0x64010101, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x9a, 0x3, 0x5, [{@remote, 0x1}, {@multicast2, 0x200}]}]}}}}}) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r6 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000980)={@ipv4={'\x00', '\xff\xff', @remote}, 0x45, r5}) (async)
syz_emit_ethernet(0x2d, &(0x7f00000009c0)={@multicast, @local, @void, {@arp={0x806, @generic={0x3b, 0x2cd4, 0x6, 0x5, 0x4, @empty, "e43ca5d709", @empty, "58ae833797ec"}}}}, &(0x7f0000000a00)={0x0, 0x1, [0xacc, 0x1d2, 0xad7, 0x6f3]})
sendmsg$nl_route(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=@ipv4_delrule={0x44, 0x21, 0x104, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x10000}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3a}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x80000001}, @FRA_DST={0x8, 0x1, @multicast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) (async, rerun: 64)
r7 = socket$netlink(0x10, 0x3, 0x9) (rerun: 64)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, r8, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x2, 0x4c92, 0xabc8]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'wpan3\x00', <r11=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wpan4\x00', <r12=>0x0}) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan4\x00', <r13=>0x0}) (rerun: 32)
sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x60, r10, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004000)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r14, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ca0abc935f2d805f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000840}, 0x40820)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r14, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf, 0x3}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8864}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40050}, 0x6)

274.906317ms ago: executing program 2 (id=2620):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x70bd27, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x1d}, 0x6e6ba8, 0x4b75cd6ef3e93cb3}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, @in=@broadcast, @in6=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r2, 0x1, 0x1e, 0x0, &(0x7f00000004c0))
bind$inet6(r1, &(0x7f0000000380)={0xa, 0xe22, 0x80, @mcast2, 0x1}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
syz_emit_ethernet(0xae, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0)
r4 = accept(r0, 0x0, &(0x7f00000000c0))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a0001f40000ef000000000081040000000000000000000014000100"], 0x30}}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001740)={0x890, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x15}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x36}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x52}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}], @NL80211_ATTR_CSA_IES={0x850, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0xc, 0x9, 0xbd, 0x5, 0x0, 0x0, 0x8000]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xe1, 0x7f, [@prep={0x83, 0x1f, {{}, 0x9, 0x3, @broadcast, 0x0, @void, 0x800, 0x100, @device_a, 0xffffffff}}, @random={0x8e, 0xba, "6bee59ff9f726e405ad4efe3f1cbbed32cce2ee59bc0f8b8772baad813a8c57fe7dbcfc650611b7c612924ac76a4412eb853638a8ff0c5dbca4ab5811b5c6e3a89dc0369c1f4c2b64db6a09def4628aee211700b4b29591d4132fb2c37c8ba183e4690cedbf306da8e7dc80f09d54989debec920a97d109d2edd18131094deb592eab3143235acc8cfe33b10df34f77353db45e80b3196dd94fa3607959bceee4451f8b7bd2df5673a1b77ba20e88f08222fb915a76971a09082"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1d3, 0x7f, [@prep={0x83, 0x1f, {{}, 0x4, 0x9, @device_a, 0x9, @void, 0x1, 0x9, @device_b, 0x15dd}}, @random={0x6, 0xa5, "8c2f616826c13470ce390861741b20cb014c6675c840bb6f1e6bd4cb095fa60b7629aa3962734b3f6c0beb19909a0d58d0d5cada44cd87d093dbd6c70cc4ee21ed7b359a765f00d06437aba5bc3ec0684721e16465689efe8661f5968d09b129b9a5a83b715199051663ddb318ba92a7075fea80aed0222044c65d22343712ce4e7d3a4a10d16e5d0987d42353b16a039ae4cf8411d341481449c822e0b7d04382c21011fb"}, @perr={0x84, 0xf7, {0x5, 0x11, [{{}, @broadcast, 0x7ff, @void, 0x38}, {{}, @device_b, 0x2, @void, 0x41}, {{}, @device_a, 0x5, @void, 0xb}, {{}, @broadcast, 0x1000, @void, 0x41}, {{0x0, 0x1}, @device_a, 0x800, @value=@broadcast, 0x1}, {{}, @device_a, 0x4, @void, 0x2f}, {{}, @device_b, 0x4, @void, 0x1f}, {{}, @device_b, 0x7fffffff, @void, 0x42}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0x34}, {{}, @device_b, 0x100, @void, 0x34}, {{}, @device_a, 0x8, @void, 0x15}, {{}, @broadcast, 0xb07, @void, 0x2d}, {{}, @device_b, 0x4, @void, 0x2a}, {{0x0, 0x1}, @broadcast, 0xfffffff8, @value=@broadcast, 0x31}, {{}, @broadcast, 0x6, @void, 0x1e}, {{0x0, 0x1}, @device_b, 0xe, @value=@broadcast, 0x3a}, {{}, @broadcast, 0x4, @void, 0x6}]}}, @challenge={0x10, 0x1, 0xde}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0x7}}, @dsss={0x3, 0x1, 0x9c}, @challenge={0x10, 0x1, 0xe3}]}, @NL80211_ATTR_PROBE_RESP={0x57e, 0x91, "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"}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x77}]}, 0x890}, 0x1, 0x0, 0x0, 0x24008000}, 0x4080)

274.600157ms ago: executing program 6 (id=2621):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x99b}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

216.529409ms ago: executing program 5 (id=2622):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x38, r1, 0x1, 0x2, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x38, r1, 0x1, 0x2, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x38}}, 0x0) (async)

132.162367ms ago: executing program 7 (id=2623):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0xe}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r1], 0x20)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f00000001c0)="9f9553")
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x6, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="f57d761f4f34557b9080f3e5a3249b64c337e712cf98884347edd0c09383007724b4b8956f678ea265b923c061bab51f6df8b3257327142196e9c79b0067b246464dde564889412ba29793b69bb29cd57c79e369b64a047277b8c2f3570def99b4e6966288d8c1163f43539ccd0b27a0741250e617e658e2a0bd1760ae5cc78317d909b90791cdaa52b9f84c86e895cdbcdc7fb75ff265c45aa5d16d153cd4f4b94b62fa8475c0fea1be4e71e0db34cc6e03d4b52fee846f57455a64df9cfb580dce58"], &(0x7f0000000100)='GPL\x00', 0x3cf1a953, 0x57, &(0x7f0000000140)=""/87, 0x41000, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r2}, 0x20)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockname$packet(r4, 0x0, &(0x7f0000000000))
close(r2)

827.03µs ago: executing program 5 (id=2625):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRESOCT, @ANYRES16=r0, @ANYBLOB="00000000000000000000000000000000000000000010"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)

0s ago: executing program 6 (id=2626):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0xfec2, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

kernel console output (not intermixed with test programs):

tting bearer <eth:syzkaller0>
[  151.342848][ T7941] tipc: Disabling bearer <eth:syzkaller0>
[  151.410053][ T1160] net_ratelimit: 29 callbacks suppressed
[  151.410075][ T1160] bond2: (slave wlan0): failed to get link speed/duplex
[  151.530914][ T7975] lo speed is unknown, defaulting to 1000
[  151.603431][   T36] bond2: (slave wlan0): failed to get link speed/duplex
[  151.713905][ T7992] __nla_validate_parse: 1 callbacks suppressed
[  151.713924][ T7992] netlink: 788 bytes leftover after parsing attributes in process `syz.1.518'.
[  151.749936][   T36] bond2: (slave wlan0): failed to get link speed/duplex
[  151.864053][ T7996] netlink: 830 bytes leftover after parsing attributes in process `syz.0.522'.
[  151.920577][ T1160] bond2: (slave wlan0): failed to get link speed/duplex
[  151.965957][ T8002] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  152.199041][ T4289] bond2: (slave wlan0): failed to get link speed/duplex
[  152.220419][ T8014] ieee802154 phy0 wpan0: encryption failed: -22
[  152.309166][ T1160] bond2: (slave wlan0): failed to get link speed/duplex
[  152.449029][ T1160] bond2: (slave wlan0): failed to get link speed/duplex
[  152.561224][   T36] bond2: (slave wlan0): failed to get link speed/duplex
[  152.692788][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'.
[  152.692874][   T12] bond2: (slave wlan0): failed to get link speed/duplex
[  152.806795][ T8037] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  152.894997][ T8037] netlink: 184 bytes leftover after parsing attributes in process `syz.1.532'.
[  152.984632][ T4289] bond2: (slave wlan0): failed to get link speed/duplex
[  153.137102][ T8054] pim6reg1: entered promiscuous mode
[  153.155571][ T8054] pim6reg1: entered allmulticast mode
[  153.361830][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'.
[  153.996432][ T8098] netlink: 60 bytes leftover after parsing attributes in process `syz.0.547'.
[  154.201151][ T8106] netlink: 'syz.2.549': attribute type 4 has an invalid length.
[  154.485832][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.554'.
[  154.627820][ T8122] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.555'.
[  154.806119][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[  155.098548][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'.
[  155.191968][ T8155] netem: change failed
[  155.503235][ T8172] netlink: 'syz.1.569': attribute type 39 has an invalid length.
[  156.571144][   T69] net_ratelimit: 23 callbacks suppressed
[  156.571164][   T69] bond2: (slave wlan0): failed to get link speed/duplex
[  156.589311][ T8216] IPVS: length: 24 != 120
[  156.821054][ T8228] __nla_validate_parse: 5 callbacks suppressed
[  156.821075][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'.
[  156.831604][ T8230] netlink: 'syz.3.588': attribute type 1 has an invalid length.
[  156.855030][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'.
[  156.857490][ T8216] bond2: (slave wlan0): Releasing active interface
[  156.875047][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'.
[  156.879264][ T8216] bond2: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  156.924645][ T8216] vlan2: entered promiscuous mode
[  156.930320][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'.
[  157.537190][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.597'.
[  157.627118][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.600'.
[  157.998555][ T8275] tipc: Started in network mode
[  158.007946][ T8275] tipc: Node identity 9a0429cdd9e2, cluster identity 4711
[  158.025634][ T8275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.054545][ T8280] syzkaller0: entered promiscuous mode
[  158.086168][ T8280] syzkaller0: entered allmulticast mode
[  158.155548][ T8275] tipc: Resetting bearer <eth:syzkaller0>
[  158.218184][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'.
[  158.254709][ T8274] tipc: Resetting bearer <eth:syzkaller0>
[  158.261283][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'.
[  158.357030][ T8274] tipc: Disabling bearer <eth:syzkaller0>
[  158.447084][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'.
[  158.494597][ T8296] netlink: 160 bytes leftover after parsing attributes in process `syz.1.612'.
[  158.535240][ T8299] netlink: 'syz.3.613': attribute type 4 has an invalid length.
[  158.599354][ T8304] netlink: 'syz.3.613': attribute type 4 has an invalid length.
[  158.630417][ T8303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.721913][ T8303] syzkaller0: entered promiscuous mode
[  158.727465][ T8303] syzkaller0: entered allmulticast mode
[  158.775296][ T8308] syz_tun (unregistering): left promiscuous mode
[  158.810843][ T8303] tipc: Resetting bearer <eth:syzkaller0>
[  158.975807][ T8321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.237876][ T8302] tipc: Resetting bearer <eth:syzkaller0>
[  159.258551][ T8302] tipc: Disabling bearer <eth:syzkaller0>
[  159.809984][ T8356] dvmrp1: left allmulticast mode
[  161.397993][ T8430] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  161.466428][ T8430] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  161.584607][ T8427] netlink: 'syz.2.642': attribute type 16 has an invalid length.
[  161.597160][ T8427] netlink: 'syz.2.642': attribute type 17 has an invalid length.
[  161.685138][ T8427] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  162.033866][ T8455] __nla_validate_parse: 10 callbacks suppressed
[  162.033887][ T8455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.651'.
[  162.134424][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'.
[  162.228283][ T8466] blkio.reset_stats is deprecated
[  162.350344][   T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2a
[  162.350543][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  162.372581][ T8471] hsr0 speed is unknown, defaulting to 1000
[  162.378601][ T8471] hsr0 speed is unknown, defaulting to 1000
[  162.420192][ T8471] hsr0 speed is unknown, defaulting to 1000
[  162.428264][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  162.512614][ T8471] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  162.743080][ T8471] hsr0 speed is unknown, defaulting to 1000
[  162.768756][ T8471] hsr0 speed is unknown, defaulting to 1000
[  162.823478][ T8471] hsr0 speed is unknown, defaulting to 1000
[  162.882267][ T8471] hsr0 speed is unknown, defaulting to 1000
[  162.923775][ T8471] hsr0 speed is unknown, defaulting to 1000
[  163.209450][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'.
[  163.232050][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'.
[  163.319488][ T8504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'.
[  163.356384][ T8504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.665'.
[  163.810297][ T8521] netlink: 'syz.3.668': attribute type 10 has an invalid length.
[  163.829854][ T8523] netlink: 'syz.4.670': attribute type 1 has an invalid length.
[  163.868082][ T8523] netlink: 224 bytes leftover after parsing attributes in process `syz.4.670'.
[  164.000468][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'.
[  164.090980][ T8527] syzkaller0: entered promiscuous mode
[  164.096525][ T8527] syzkaller0: entered allmulticast mode
[  164.767603][ T8549] openvswitch: netlink: Missing key (keys=40, expected=80)
[  166.286469][ T8556] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  166.746608][ T8576] sock: sock_timestamping_bind_phc: sock not bind to device
[  167.243390][ T8594] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.256488][ T8594] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.320749][ T8601] __nla_validate_parse: 2 callbacks suppressed
[  167.320785][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'.
[  167.374179][ T8601] tc_dump_action: action bad kind
[  167.374696][ T8592] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  167.629914][ T8608] kthread_run failed with err -4
[  168.125564][ T8637] netlink: 248 bytes leftover after parsing attributes in process `syz.2.694'.
[  168.170758][   T12] vlan2: left promiscuous mode
[  168.203066][ T8638] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  168.813946][ T8656] netlink: 'syz.3.696': attribute type 10 has an invalid length.
[  168.928809][ T8656] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  169.196445][ T8673] netlink: 68 bytes leftover after parsing attributes in process `syz.4.701'.
[  169.292971][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'.
[  169.327206][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'.
[  169.487748][ T8684] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  169.827025][ T8703] sctp: [Deprecated]: syz.3.708 (pid 8703) Use of int in max_burst socket option.
[  169.827025][ T8703] Use struct sctp_assoc_value instead
[  169.908277][ T8708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.276887][ T8728] netlink: 'syz.3.715': attribute type 21 has an invalid length.
[  170.285050][ T8716] lo speed is unknown, defaulting to 1000
[  170.286877][ T8716] hsr0 speed is unknown, defaulting to 1000
[  170.563278][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'.
[  170.573105][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'.
[  170.819856][ T8747] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.720'.
[  171.323676][ T8761] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  171.383082][ T8766] netlink: 'syz.4.725': attribute type 4 has an invalid length.
[  171.461411][ T8769] netlink: 'syz.4.725': attribute type 4 has an invalid length.
[  171.498174][ T8761] bridge_slave_0: left allmulticast mode
[  171.530135][ T8761] bridge_slave_0: left promiscuous mode
[  171.556438][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.588055][ T8761] bridge_slave_1: left allmulticast mode
[  171.597112][ T8761] bridge_slave_1: left promiscuous mode
[  171.603228][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.632914][ T8761] bond0: (slave bond_slave_0): Releasing backup interface
[  171.657711][ T8761] bond0: (slave bond_slave_1): Releasing backup interface
[  171.694285][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.703387][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.713906][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.722891][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.737709][ T8761] bond0: (slave wlan1): Releasing backup interface
[  171.749529][ T8761] bond0: (slave bond1): Releasing backup interface
[  171.768481][ T2154] lo speed is unknown, defaulting to 1000
[  171.777197][ T1212] lo speed is unknown, defaulting to 1000
[  171.835434][ T8776] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  172.062024][ T8786] bridge_slave_0: left allmulticast mode
[  172.079247][ T8786] bridge_slave_0: left promiscuous mode
[  172.116188][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.147890][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.732'.
[  172.167831][ T8794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.734'.
[  172.210605][ T8786] bond0: (slave bridge_slave_1): Releasing backup interface
[  172.250859][ T8786] bond0: (slave bond_slave_0): Releasing backup interface
[  172.290832][ T8786] bond0: (slave bond_slave_1): Releasing backup interface
[  172.353133][ T8786] team0: Port device team_slave_0 removed
[  172.383045][ T8786] team0: Port device team_slave_1 removed
[  172.394486][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.402270][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.413377][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.422749][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.477209][ T8796] team0: Mode changed to "loadbalance"
[  172.710936][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  172.794604][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'.
[  172.809403][ T8817] netlink: 'syz.4.737': attribute type 8 has an invalid length.
[  172.916671][ T8814] bond4: entered promiscuous mode
[  172.918212][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  172.922346][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'.
[  172.964243][ T8822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'.
[  172.990561][ T8820] macvtap1: entered allmulticast mode
[  172.996174][ T8820] veth0_macvtap: entered allmulticast mode
[  173.150635][ T8831] netlink: 'syz.3.739': attribute type 10 has an invalid length.
[  173.194231][ T8831] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  173.211263][ T8831] bond0: (slave wlan1): refused to change device type
[  174.060436][ T8858] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  174.199931][ T8861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.748'.
[  174.235155][ T8861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.748'.
[  174.389553][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'.
[  174.529791][ T8872] block nbd1: server does not support multiple connections per device.
[  174.558250][ T8872] block nbd1: shutting down sockets
[  174.599971][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'.
[  174.612913][ T8876] netlink: 256 bytes leftover after parsing attributes in process `syz.2.752'.
[  174.727474][ T8885] netlink: 'syz.4.753': attribute type 4 has an invalid length.
[  174.761031][ T5959] lo speed is unknown, defaulting to 1000
[  174.771245][ T5959] syz2: Port: 1 Link DOWN
[  175.023861][ T8889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.103439][ T5959] lo speed is unknown, defaulting to 1000
[  175.121798][ T5959] syz2: Port: 1 Link ACTIVE
[  175.516619][ T8917] netlink: 'syz.0.762': attribute type 1 has an invalid length.
[  176.744447][ T8960] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20002
[  176.980217][ T8969] veth0: entered promiscuous mode
[  176.995166][ T8968] veth0: left promiscuous mode
[  177.217626][ T8976] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.290027][ T8982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.715205][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  177.726045][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  177.736149][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  177.746301][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  177.757031][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  177.916797][ T8998] lo speed is unknown, defaulting to 1000
[  178.013689][ T8998] hsr0 speed is unknown, defaulting to 1000
[  178.476915][ T9030] ieee802154 phy0 wpan0: encryption failed: -22
[  178.738070][ T9044] __nla_validate_parse: 3 callbacks suppressed
[  178.738090][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.794'.
[  178.901711][ T9046] veth7: entered allmulticast mode
[  178.912747][ T9043] tipc: Enabling <eth:lo> not permitted
[  178.919139][ T9043] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  179.068065][ T8998] chnl_net:caif_netlink_parms(): no params data found
[  179.579695][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.615988][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.636595][ T8998] bridge_slave_0: entered allmulticast mode
[  179.648420][ T8998] bridge_slave_0: entered promiscuous mode
[  179.667712][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.688747][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.705506][ T8998] bridge_slave_1: entered allmulticast mode
[  179.723694][ T8998] bridge_slave_1: entered promiscuous mode
[  179.839405][ T5883] Bluetooth: hci5: command tx timeout
[  179.852150][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.869746][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.971744][ T8998] team0: Port device team_slave_0 added
[  179.983887][ T8998] team0: Port device team_slave_1 added
[  180.100939][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.112725][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.140049][ T8998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.177468][ T9086] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  180.191702][ T9086] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  180.245481][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.253563][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  180.281037][ T8998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.496329][ T8998] hsr_slave_0: entered promiscuous mode
[  180.514619][ T8998] hsr_slave_1: entered promiscuous mode
[  180.542813][ T8998] debugfs: 'hsr0' already exists in 'hsr'
[  180.552564][ T8998] Cannot create hsr debugfs directory
[  180.597569][ T9093] lo speed is unknown, defaulting to 1000
[  180.627346][ T9093] hsr0 speed is unknown, defaulting to 1000
[  181.027981][ T8998] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  181.078385][ T8998] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  181.113349][ T8998] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  181.133227][ T8998] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  181.455174][ T8998] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.526924][ T8998] 8021q: adding VLAN 0 to HW filter on device team0
[  181.576356][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.584437][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.627958][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.635259][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.648238][ T9133] netlink: 36 bytes leftover after parsing attributes in process `syz.4.813'.
[  181.778735][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.814'.
[  181.920850][ T5883] Bluetooth: hci5: command tx timeout
[  182.010701][ T9143] netlink: 'syz.2.816': attribute type 10 has an invalid length.
[  182.071064][ T9143] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  182.083542][ T9143] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  182.237816][ T8998] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.524130][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.821'.
[  183.167400][ T8998] veth0_vlan: entered promiscuous mode
[  183.235192][ T8998] veth1_vlan: entered promiscuous mode
[  183.332780][ T8998] veth0_macvtap: entered promiscuous mode
[  183.473068][ T8998] veth1_macvtap: entered promiscuous mode
[  183.536424][ T8998] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.557643][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.828'.
[  183.642053][ T8998] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.719877][ T1151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.750182][ T1151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.790676][ T1151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.815374][ T9200] netlink: 284 bytes leftover after parsing attributes in process `syz.0.830'.
[  183.843463][ T1151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.860816][ T9200] netlink: 'syz.0.830': attribute type 1 has an invalid length.
[  183.868525][ T9200] netlink: 224 bytes leftover after parsing attributes in process `syz.0.830'.
[  183.922785][ T9202] netlink: 'syz.2.831': attribute type 29 has an invalid length.
[  183.984796][ T9206] netlink: 'syz.2.831': attribute type 29 has an invalid length.
[  184.000919][ T5883] Bluetooth: hci5: command tx timeout
[  184.069867][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.089386][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.096994][ T9210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.833'.
[  184.173057][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.176196][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'.
[  184.181832][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.405774][ T9219] netlink: 'syz.0.836': attribute type 2 has an invalid length.
[  184.488076][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'.
[  184.519007][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'.
[  184.563902][ T9218] syzkaller0: entered promiscuous mode
[  184.594678][ T9218] syzkaller0: entered allmulticast mode
[  184.764064][ T9232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.066368][ T9247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.843'.
[  185.892222][ T1212] tipc: Node number set to 1139157453
[  186.079038][ T5883] Bluetooth: hci5: command tx timeout
[  186.453315][ T9245] netlink: 820 bytes leftover after parsing attributes in process `syz.2.842'.
[  186.462516][ T9245] netlink: 3649 bytes leftover after parsing attributes in process `syz.2.842'.
[  186.679416][ T9259] netlink: 96 bytes leftover after parsing attributes in process `syz.5.845'.
[  186.846463][ T9272] netlink: 'syz.0.849': attribute type 21 has an invalid length.
[  186.882788][ T9272] IPv6: NLM_F_CREATE should be specified when creating new route
[  186.911755][ T9272] veth0_to_team: entered promiscuous mode
[  186.917723][ T9272] veth0_to_team: entered allmulticast mode
[  187.172644][ T9282] netlink: 'syz.2.853': attribute type 3 has an invalid length.
[  188.765077][ T9350] batadv1: entered allmulticast mode
[  189.026021][ T9354] syzkaller1: entered promiscuous mode
[  189.049471][ T9354] syzkaller1: entered allmulticast mode
[  189.241566][ T5881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  189.254910][ T5881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  189.263808][ T5881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  189.272925][ T5881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  189.282454][ T5881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  189.656862][ T9361] lo speed is unknown, defaulting to 1000
[  189.691326][ T9361] hsr0 speed is unknown, defaulting to 1000
[  189.836462][ T9377] tipc: Started in network mode
[  189.858153][ T9377] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  189.891781][ T9377] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  190.442614][ T9392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.516639][ T9392] __nla_validate_parse: 2 callbacks suppressed
[  190.516660][ T9392] netlink: 108 bytes leftover after parsing attributes in process `syz.2.882'.
[  190.617259][ T9361] chnl_net:caif_netlink_parms(): no params data found
[  190.834291][ T9418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.888'.
[  190.878582][ T9420] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  190.900846][ T1212] tipc: Node number set to 10136234
[  191.104790][ T9435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.894'.
[  191.360891][ T5883] Bluetooth: hci6: command tx timeout
[  191.656416][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'.
[  191.667684][ T9435] team0 (unregistering): Port device team_slave_0 removed
[  191.691612][ T9435] team0 (unregistering): Port device team_slave_1 removed
[  191.722587][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.730353][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.737621][ T9361] bridge_slave_0: entered allmulticast mode
[  191.746547][ T9361] bridge_slave_0: entered promiscuous mode
[  191.771889][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.784923][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.796546][ T9361] bridge_slave_1: entered allmulticast mode
[  191.813570][ T9361] bridge_slave_1: entered promiscuous mode
[  192.080976][ T9361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.121830][ T9361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.158138][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.900'.
[  192.192938][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'.
[  192.288777][ T9361] team0: Port device team_slave_0 added
[  192.395433][ T9471] 8021q: adding VLAN 0 to HW filter on device bond2
[  192.415042][ T9361] team0: Port device team_slave_1 added
[  192.529561][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.536797][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.565028][ T9361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.579961][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.602342][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.630562][ T9361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.736592][ T9361] hsr_slave_0: entered promiscuous mode
[  192.740357][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'.
[  192.750298][ T9361] hsr_slave_1: entered promiscuous mode
[  192.757792][ T9361] debugfs: 'hsr0' already exists in 'hsr'
[  192.764358][ T9361] Cannot create hsr debugfs directory
[  192.896795][ T9500] netlink: 96 bytes leftover after parsing attributes in process `syz.0.907'.
[  193.379857][ T9361] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  193.425158][ T9361] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  193.439152][ T5883] Bluetooth: hci6: command tx timeout
[  193.557842][ T9361] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  193.645943][ T9361] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  194.078573][ T9361] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.164289][ T9361] 8021q: adding VLAN 0 to HW filter on device team0
[  194.219261][ T9548] netlink: 256 bytes leftover after parsing attributes in process `syz.2.921'.
[  194.243438][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.250706][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.288509][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.295801][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.488468][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.932292][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'.
[  194.998445][ T9574] syz.5.927 (9574) used greatest stack depth: 19736 bytes left
[  195.268369][ T9589] netlink: 'syz.4.930': attribute type 10 has an invalid length.
[  195.376741][ T9593] C: renamed from lo (while UP)
[  195.392535][ T9593] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  195.529476][ T5883] Bluetooth: hci6: command tx timeout
[  195.602455][ T9361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.417437][ T9643] __nla_validate_parse: 1 callbacks suppressed
[  196.417457][ T9643] netlink: 84 bytes leftover after parsing attributes in process `syz.0.940'.
[  196.607943][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.941'.
[  196.671177][ T9648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.941'.
[  196.830524][ T9361] veth0_vlan: entered promiscuous mode
[  196.880666][ T9361] veth1_vlan: entered promiscuous mode
[  196.911509][ T9660] netlink: 'syz.2.944': attribute type 10 has an invalid length.
[  196.995220][ T9361] veth0_macvtap: entered promiscuous mode
[  197.067308][ T9361] veth1_macvtap: entered promiscuous mode
[  197.172630][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.219039][ T9672] netlink: 'syz.2.948': attribute type 1 has an invalid length.
[  197.221519][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.396384][ T1157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.442810][ T1157] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.506974][ T1157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.525653][ T9684] netlink: 'syz.5.952': attribute type 1 has an invalid length.
[  197.536317][ T1157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.601387][ T5883] Bluetooth: hci6: command tx timeout
[  197.796884][ T9698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.955'.
[  197.941747][ T9703] netlink: 'syz.2.956': attribute type 1 has an invalid length.
[  197.982254][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.015296][ T9703] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  198.017190][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.202303][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.960'.
[  198.212931][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.218741][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'.
[  198.239170][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.889482][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.966'.
[  198.922051][ T9747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.966'.
[  198.972108][ T9746] netlink: 'syz.2.966': attribute type 7 has an invalid length.
[  198.999401][ T9747] netlink: 'syz.2.966': attribute type 7 has an invalid length.
[  199.013202][ T9746] netlink: 'syz.2.966': attribute type 8 has an invalid length.
[  199.021809][ T9747] netlink: 'syz.2.966': attribute type 8 has an invalid length.
[  199.031912][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'.
[  199.045673][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'.
[  199.140055][ T9760] netlink: 'syz.5.967': attribute type 1 has an invalid length.
[  199.290258][ T9765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.486847][ T9770] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  199.924729][ T9782] NCSI netlink: No device for ifindex 458760
[  200.161071][ T9765] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  201.314466][ T1212] IPVS: starting estimator thread 0...
[  201.339789][ T9822] validate_nla: 2 callbacks suppressed
[  201.339808][ T9822] netlink: 'syz.4.990': attribute type 10 has an invalid length.
[  201.384812][ T9822] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  201.419279][ T9823] IPVS: using max 25 ests per chain, 60000 per kthread
[  201.442356][ T5883] Bluetooth: hci1: command 0x0401 tx timeout
[  201.525694][ T9830] __nla_validate_parse: 10 callbacks suppressed
[  201.525718][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.992'.
[  201.572602][ T9830] netlink: 348 bytes leftover after parsing attributes in process `syz.6.992'.
[  201.793928][ T9840] netlink: 20 bytes leftover after parsing attributes in process `syz.6.996'.
[  201.830127][ T9840] netlink: 120 bytes leftover after parsing attributes in process `syz.6.996'.
[  201.866481][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.996'.
[  201.898146][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'.
[  201.919682][ T9844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.995'.
[  201.980653][ T9844] geneve3: entered promiscuous mode
[  202.023161][ T9844] geneve3: entered allmulticast mode
[  202.735025][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  202.744863][ T9888] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1012'.
[  203.054922][ T9898] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  203.097376][ T9896] netlink: 'syz.2.1014': attribute type 21 has an invalid length.
[  203.147700][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1014'.
[  203.241241][ T9908] netlink: 'syz.4.1020': attribute type 10 has an invalid length.
[  203.381777][ T9912] Driver unsupported XDP return value 0 on prog  (id 243) dev N/A, expect packet loss!
[  203.466924][ T9920] netlink: 'syz.2.1022': attribute type 1 has an invalid length.
[  203.579891][ T9922] netlink: 'syz.4.1023': attribute type 26 has an invalid length.
[  203.591236][ T9922] netlink: 'syz.4.1023': attribute type 26 has an invalid length.
[  203.625213][ T9922] netlink: 'syz.4.1023': attribute type 26 has an invalid length.
[  204.264382][ T9953] syz_tun: entered allmulticast mode
[  204.327585][ T9953] dvmrp1: entered allmulticast mode
[  204.606410][ T9964] gretap0: entered promiscuous mode
[  204.642818][ T9964] gretap0: left promiscuous mode
[  205.014741][ T9945] syz_tun: left allmulticast mode
[  205.298221][ T9987] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  205.310205][ T5856] IPVS: starting estimator thread 0...
[  205.401705][ T9998] IPVS: using max 27 ests per chain, 64800 per kthread
[  206.348849][T10040] veth0: entered promiscuous mode
[  206.817307][T10057] netlink: 'syz.5.1067': attribute type 10 has an invalid length.
[  206.924390][T10058] __nla_validate_parse: 20 callbacks suppressed
[  206.924410][T10058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'.
[  206.979022][T10060] netlink: 'syz.5.1067': attribute type 11 has an invalid length.
[  207.013273][T10060] netlink: 'syz.5.1067': attribute type 11 has an invalid length.
[  207.045993][T10057] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  207.061291][T10060] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1067'.
[  207.094744][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1068'.
[  207.165966][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1068'.
[  207.442860][T10077] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1071'.
[  207.669161][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'.
[  207.714928][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'.
[  209.277246][T10146] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.299591][T10146] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  209.315200][T10150] netlink: 'syz.6.1093': attribute type 4 has an invalid length.
[  209.374115][T10146] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  209.514135][T10146] netlink: 'syz.6.1093': attribute type 3 has an invalid length.
[  209.522897][T10146] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1093'.
[  209.831842][T10172] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1097'.
[  210.984338][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1108'.
[  211.004824][T10205] netlink: 'syz.5.1108': attribute type 10 has an invalid length.
[  211.036056][T10205] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  211.194689][T10211] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  212.052892][T10249] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  212.167284][T10260] __nla_validate_parse: 3 callbacks suppressed
[  212.167304][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1123'.
[  212.204424][T10258] dvmrp1: entered allmulticast mode
[  212.619637][T10282] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  212.654981][T10282] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1126'.
[  213.146128][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'.
[  213.567550][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'.
[  213.595368][T10322] netlink: 'syz.0.1140': attribute type 2 has an invalid length.
[  213.610489][T10321] 8021q: adding VLAN 0 to HW filter on device bond3
[  213.632373][T10321] macvlan0: entered promiscuous mode
[  213.637994][T10321] macvlan0: entered allmulticast mode
[  213.645513][T10321] bond3: (slave macvlan0): Opening slave failed
[  214.784977][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1156'.
[  214.806668][T10379] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1157'.
[  214.842147][T10379] tipc: Started in network mode
[  214.859081][T10379] tipc: Node identity 8, cluster identity 16
[  214.879872][ T5233] udevd[5233]: worker [5884] terminated by signal 33 (Unknown signal 33)
[  214.888772][T10380] openvswitch: netlink: Flow key attr not present in new flow.
[  214.895028][T10379] tipc: Node number set to 8
[  214.936770][ T5233] udevd[5233]: worker [5884] failed while handling '/devices/virtual/block/loop2'
[  215.135513][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  215.165449][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'.
[  215.184156][T10400] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.208047][T10400] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  215.231987][T10400] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  215.244892][T10400] tipc: Resetting bearer <eth:syzkaller0>
[  215.262733][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'.
[  215.285661][T10400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1163'.
[  215.466852][T10410] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  215.567636][T10413] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  215.944173][T10430] team0: Cannot enslave team device to itself
[  216.079478][ T4289] wlan1: Trigger new scan to find an IBSS to join
[  216.333435][ T1151] tipc: Resetting bearer <eth:syzkaller0>
[  216.364993][T10452] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  216.938602][T10485] netlink: 'syz.4.1190': attribute type 49 has an invalid length.
[  217.042367][ T5880] Bluetooth: hci3: command 0x0406 tx timeout
[  217.048559][ T5871] Bluetooth: hci2: command 0x0406 tx timeout
[  217.048570][   T51] Bluetooth: hci1: command 0x0401 tx timeout
[  217.428017][T10508] netlink: 'syz.4.1196': attribute type 4 has an invalid length.
[  217.482687][T10508] __nla_validate_parse: 8 callbacks suppressed
[  217.482708][T10508] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1196'.
[  217.567774][T10508] `: renamed from bond0 (while UP)
[  217.666917][T10515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.703902][T10518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1199'.
[  218.002816][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'.
[  218.082402][T10528] xfrm1: entered promiscuous mode
[  218.087719][T10528] xfrm1: entered allmulticast mode
[  218.129242][T10537] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1205'.
[  218.344329][T10541] veth1_macvtap: mtu less than device minimum
[  218.384296][T10541] netlink: 'syz.0.1206': attribute type 10 has an invalid length.
[  218.412430][T10541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1206'.
[  218.681328][T10565] netlink: 'syz.5.1210': attribute type 1 has an invalid length.
[  218.733563][T10565] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1210'.
[  218.761072][T10565] netlink: 'syz.5.1210': attribute type 1 has an invalid length.
[  218.788341][T10565] netlink: 'syz.5.1210': attribute type 2 has an invalid length.
[  219.052158][   T49] wlan1: Trigger new scan to find an IBSS to join
[  219.090186][T10579] netlink: 'syz.5.1214': attribute type 1 has an invalid length.
[  219.181444][T10579] 8021q: adding VLAN 0 to HW filter on device bond2
[  219.267101][T10582] bond2: (slave ip6erspan0): making interface the new active one
[  219.292098][T10582] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  219.313521][T10594] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20002
[  219.353215][T10586] netlink: 'syz.2.1218': attribute type 4 has an invalid length.
[  219.566343][T10599] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'.
[  219.641116][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1220'.
[  219.686782][ T5912] IPVS: starting estimator thread 0...
[  219.809727][T10609] IPVS: using max 31 ests per chain, 74400 per kthread
[  219.889778][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1224'.
[  220.011175][T10615] 8021q: adding VLAN 0 to HW filter on device bond1
[  220.046625][T10621] macvlan2: entered promiscuous mode
[  220.052541][T10621] macvlan2: entered allmulticast mode
[  220.059979][T10621] bond1: (slave macvlan2): Opening slave failed
[  220.271144][T10632] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1230'.
[  220.646541][T10654] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  221.482516][T10679] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004
[  222.082187][   T13] wlan1: Trigger new scan to find an IBSS to join
[  222.526171][T10708] __nla_validate_parse: 2 callbacks suppressed
[  222.526194][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1252'.
[  222.570627][T10712] IPv4: Oversized IP packet from 172.20.20.24
[  222.578964][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  222.585593][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  222.720828][T10714] netlink: 'syz.4.1254': attribute type 39 has an invalid length.
[  223.082707][   T13] wlan1: Creating new IBSS network, BSSID 5a:17:57:2b:59:f1
[  223.152103][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'.
[  223.430565][T10737] bridge_slave_0: left allmulticast mode
[  223.458530][T10737] bridge_slave_0: left promiscuous mode
[  223.485944][T10737] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.563029][T10737] bridge_slave_1: left allmulticast mode
[  223.597638][T10737] bridge_slave_1: left promiscuous mode
[  223.614880][T10737] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.683337][T10737] bond0: (slave bond_slave_0): Releasing backup interface
[  223.744192][T10737] bond0: (slave bond_slave_1): Releasing backup interface
[  223.804803][T10737] team0: Port device team_slave_0 removed
[  223.832596][T10737] team0: Port device team_slave_1 removed
[  223.858002][T10737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.873717][T10737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.888231][T10737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.896207][T10737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.916673][T10737] tipc: Resetting bearer <eth:syzkaller0>
[  223.979625][ T5912] hsr0 speed is unknown, defaulting to 1000
[  224.230565][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1269'.
[  224.255702][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1269'.
[  224.276667][T10760] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  224.309958][T10765] netlink: 'syz.2.1270': attribute type 1 has an invalid length.
[  224.438405][T10773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.730587][T10789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.102352][T10809] netlink: 'syz.2.1283': attribute type 10 has an invalid length.
[  225.142992][T10809] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.160046][T10809] bridge_slave_1: left allmulticast mode
[  225.184376][T10809] bridge_slave_1: left promiscuous mode
[  225.222419][T10809] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.275983][T10809] bridge_slave_1: entered allmulticast mode
[  225.289752][T10809] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  225.726301][T10836] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1293'.
[  225.783754][T10836] gretap0: entered promiscuous mode
[  225.815470][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1293'.
[  225.930042][T10846] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1296'.
[  226.070394][T10853] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1299'.
[  226.089176][T10853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.237717][T10860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.335387][T10869] openvswitch: netlink: Tunnel attr 12897 out of range max 16
[  226.582220][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'.
[  226.648565][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  226.664024][T10876] veth1_macvtap: left promiscuous mode
[  227.151910][T10894] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  227.555890][T10919] __nla_validate_parse: 1 callbacks suppressed
[  227.555910][T10919] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1317'.
[  227.705436][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'.
[  227.758314][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'.
[  227.798454][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'.
[  227.835595][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'.
[  227.861460][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'.
[  228.141338][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'.
[  229.361202][T11011] macvtap1: entered allmulticast mode
[  229.374720][T11011] veth0_macvtap: entered allmulticast mode
[  229.401362][T11013] syzkaller0: entered promiscuous mode
[  229.411388][T11013] syzkaller0: entered allmulticast mode
[  229.916236][T11031] netlink: 'syz.6.1352': attribute type 1 has an invalid length.
[  229.934373][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1352'.
[  229.967199][T11036] netlink: 'syz.6.1352': attribute type 1 has an invalid length.
[  230.004735][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1352'.
[  230.453779][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'.
[  230.477453][T11054] pim6reg1: entered promiscuous mode
[  230.483639][T11054] pim6reg1: entered allmulticast mode
[  230.506162][T11059] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  230.568706][T11059] netlink: 'syz.0.1358': attribute type 21 has an invalid length.
[  231.184521][T11082] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  231.718039][T11106] netlink: 'syz.2.1374': attribute type 29 has an invalid length.
[  232.300879][T11134] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  232.758173][T11153] __nla_validate_parse: 7 callbacks suppressed
[  232.758194][T11153] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1386'.
[  232.811531][T11155] netlink: 'syz.6.1387': attribute type 21 has an invalid length.
[  232.839697][T11155] netlink: 'syz.6.1387': attribute type 1 has an invalid length.
[  232.926940][T11169] netlink: 'syz.0.1392': attribute type 2 has an invalid length.
[  233.191734][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1396'.
[  233.325715][T11184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.333057][T11184] IPv6: NLM_F_CREATE should be set when creating new route
[  233.362164][T11185] bond0: (slave dummy0): Releasing backup interface
[  233.429539][T11185] bridge_slave_0: left allmulticast mode
[  233.443094][T11185] bridge_slave_0: left promiscuous mode
[  233.446437][T11190] openvswitch: netlink: Key type 29 is not supported
[  233.456816][T11185] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.506525][T11185] bridge_slave_1: left allmulticast mode
[  233.539275][T11185] bridge_slave_1: left promiscuous mode
[  233.550450][T11185] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.588029][T11185] bond0: (slave bond_slave_0): Releasing backup interface
[  233.640966][T11185] bond0: (slave bond_slave_1): Releasing backup interface
[  233.688399][T11185] team0: Port device team_slave_0 removed
[  233.702947][T11185] team0: Port device team_slave_1 removed
[  233.710007][T11185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.717512][T11185] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.726802][T11185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.734661][T11185] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.763295][T11185] bond0: (slave wlan1): Releasing backup interface
[  233.787195][T11185] bond2: (slave ip6erspan0): Releasing active interface
[  233.823109][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1404'.
[  233.837798][T11208] netlink: 'syz.6.1404': attribute type 7 has an invalid length.
[  233.847648][T11208] netlink: 'syz.6.1404': attribute type 8 has an invalid length.
[  233.856156][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1404'.
[  233.941065][T11196] team0: Mode changed to "loadbalance"
[  233.985301][T11191] vlan0: entered promiscuous mode
[  234.110426][ T5881] block nbd0: Receive control failed (result -32)
[  234.316519][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1409'.
[  234.553542][T11239] bridge0: entered allmulticast mode
[  234.594487][T11235] pim6reg: entered allmulticast mode
[  234.624276][T11242] netlink: 'syz.4.1413': attribute type 13 has an invalid length.
[  234.772658][T11242] 8021q: adding VLAN 0 to HW filter on device `
[  234.795920][T11242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  234.890614][T11246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1414'.
[  234.903088][T11246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.931906][T11245] tipc: Disabling bearer <eth:syzkaller0>
[  235.049832][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'.
[  235.122100][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1417'.
[  235.177915][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'.
[  235.701629][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'.
[  235.891616][T11298] netlink: 'syz.0.1432': attribute type 1 has an invalid length.
[  235.920369][T11296] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20000
[  236.931213][T11336] netlink: 'syz.4.1442': attribute type 1 has an invalid length.
[  238.604393][T11418] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  238.634316][T11418] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  238.731305][T11430] wg1: entered promiscuous mode
[  238.743827][T11432] netlink: 'syz.5.1468': attribute type 10 has an invalid length.
[  238.769129][T11432] syz_tun: entered promiscuous mode
[  238.830137][T11432] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  239.030834][T11443] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  239.324710][T11451] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  239.370879][T11451] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  239.485957][T11459] __nla_validate_parse: 5 callbacks suppressed
[  239.485977][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'.
[  239.693292][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1478'.
[  239.777958][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1478'.
[  239.863808][T11471] netlink: 548 bytes leftover after parsing attributes in process `syz.6.1481'.
[  239.881521][T11471] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1481'.
[  239.896050][T11476] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1482'.
[  239.912032][T11471] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1481'.
[  239.953216][T11466] macvtap1: entered promiscuous mode
[  239.964388][T11466] macvtap1: entered allmulticast mode
[  239.973015][T11466] vlan0: entered allmulticast mode
[  239.980407][T11466] veth0_vlan: entered allmulticast mode
[  240.044646][T11482] netem: change failed
[  240.100603][T11476] netlink: 'syz.2.1482': attribute type 1 has an invalid length.
[  240.108490][T11476] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1482'.
[  240.118266][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'.
[  240.141628][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1482'.
[  240.682860][T11511] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.805038][T11510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.946745][T11543] IPv6: NLM_F_CREATE should be specified when creating new route
[  242.055638][T11546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.183568][T11546] syzkaller0: entered promiscuous mode
[  242.189467][T11546] syzkaller0: entered allmulticast mode
[  242.197472][T11546] tipc: Resetting bearer <eth:syzkaller0>
[  242.253596][T11545] tipc: Resetting bearer <eth:syzkaller0>
[  244.205242][T11545] tipc: Disabling bearer <eth:syzkaller0>
[  244.332956][T11572] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.363838][T11572] tipc: Resetting bearer <eth:syzkaller0>
[  244.649149][T11586] bond3: entered promiscuous mode
[  244.654334][T11586] bond3: entered allmulticast mode
[  244.662015][T11586] 8021q: adding VLAN 0 to HW filter on device bond3
[  244.796165][T11599] __nla_validate_parse: 4 callbacks suppressed
[  244.796187][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1511'.
[  244.872543][T11609] netlink: 'syz.2.1513': attribute type 10 has an invalid length.
[  245.235361][T11586] bond3 (unregistering): Released all slaves
[  245.338762][T11609] dummy0: entered allmulticast mode
[  245.363940][T11609] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  245.384833][T11609] netlink: 'syz.2.1513': attribute type 10 has an invalid length.
[  245.411044][T11609] netlink: 'syz.2.1513': attribute type 10 has an invalid length.
[  245.414054][T11627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.467226][T11609] netlink: 'syz.2.1513': attribute type 10 has an invalid length.
[  245.480235][T11627] tipc: Disabling bearer <eth:syzkaller0>
[  245.506316][T11609] netlink: 'syz.2.1513': attribute type 10 has an invalid length.
[  245.528593][T11633] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  245.546992][T11633] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.555006][T11633] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.589314][T11609] netlink: 'syz.2.1513': attribute type 10 has an invalid length.
[  245.612472][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1523'.
[  245.629784][T11609] netlink: 'syz.2.1513': attribute type 10 has an invalid length.
[  245.637919][T11609] netlink: 'syz.2.1513': attribute type 10 has an invalid length.
[  245.916041][T11646] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1528'.
[  245.968454][T11647] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1529'.
[  246.100433][T11655] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1531'.
[  246.113723][T11655] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1531'.
[  246.423251][T11669] nftables ruleset with unbound set
[  246.442582][T11668] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1536'.
[  246.453610][T11668] netlink: 'syz.2.1536': attribute type 10 has an invalid length.
[  246.498654][T11668] geneve1: entered allmulticast mode
[  246.508691][T11668] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  246.522492][T11671] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1535'.
[  246.625194][T11677] tipc: Can't bind to reserved service type 1
[  246.865336][T11683] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1540'.
[  246.882643][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'.
[  246.895418][T11683] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  246.906347][T11683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.954730][T11687] 8021q: adding VLAN 0 to HW filter on device bond3
[  246.977647][T11690] netlink: 'syz.2.1543': attribute type 1 has an invalid length.
[  247.076153][T11693] pim6reg1: entered promiscuous mode
[  247.081727][T11693] pim6reg1: entered allmulticast mode
[  247.632355][T11720] openvswitch: netlink: IP tunnel dst address not specified
[  247.680923][T11720] smc: net device erspan0 applied user defined pnetid SYZ0
[  247.967893][T11738] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  248.176899][T11744] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004
[  248.541063][T11762] tipc: Enabled bearer <ib:gretap0>, priority 10
[  249.953375][T11830] __nla_validate_parse: 7 callbacks suppressed
[  249.953397][T11830] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1582'.
[  250.022262][T11832] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  250.099267][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1585'.
[  250.110336][T11832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1583'.
[  250.575129][T11859] validate_nla: 1 callbacks suppressed
[  250.575149][T11859] netlink: 'syz.6.1592': attribute type 3 has an invalid length.
[  250.597833][T11859] netlink: 'syz.6.1592': attribute type 1 has an invalid length.
[  250.718480][T11863] netlink: 'syz.2.1594': attribute type 8 has an invalid length.
[  250.743701][T11865] veth0: entered promiscuous mode
[  250.775647][T11864] veth0: left promiscuous mode
[  250.883168][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1594'.
[  251.045720][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'.
[  251.070083][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'.
[  251.440016][T11930] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1608'.
[  251.455925][T11930] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1608'.
[  251.560345][T11935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1610'.
[  251.625211][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1611'.
[  252.885187][ T5865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  252.898194][ T5865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  252.918093][ T5865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  252.929455][ T5865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  252.937748][ T5865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  253.087732][T11980] C speed is unknown, defaulting to 1000
[  253.142213][T11980] hsr0 speed is unknown, defaulting to 1000
[  253.373077][    C1] vcan0: j1939_session_tx_dat: 0xffff8880567ff000: queue data error: -100
[  254.246807][T11980] chnl_net:caif_netlink_parms(): no params data found
[  254.426071][T12030] netlink: 'syz.2.1637': attribute type 8 has an invalid length.
[  254.666227][T11980] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.694368][T11980] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.709830][T11980] bridge_slave_0: entered allmulticast mode
[  254.718091][T11980] bridge_slave_0: entered promiscuous mode
[  254.790248][T11980] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.797550][T11980] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.826147][T11980] bridge_slave_1: entered allmulticast mode
[  254.850272][T11980] bridge_slave_1: entered promiscuous mode
[  255.039837][ T5881] Bluetooth: hci7: command tx timeout
[  255.069875][T12061] netlink: 'syz.5.1646': attribute type 4 has an invalid length.
[  255.092394][T11980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.124701][T11980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.140535][T12061] netlink: 'syz.5.1646': attribute type 3 has an invalid length.
[  255.148355][T12061] netlink: 'syz.5.1646': attribute type 1 has an invalid length.
[  255.225976][T12071] netlink: 'syz.2.1649': attribute type 3 has an invalid length.
[  255.236853][T12071] netlink: 'syz.2.1649': attribute type 3 has an invalid length.
[  255.322732][T12069] netlink: 'syz.6.1648': attribute type 1 has an invalid length.
[  255.331208][T12069] __nla_validate_parse: 7 callbacks suppressed
[  255.331228][T12069] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1648'.
[  255.361920][T11980] team0: Port device team_slave_0 added
[  255.383662][T11980] team0: Port device team_slave_1 added
[  255.545126][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1651'.
[  255.560180][T11980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.577785][T11980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.645253][T11980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.748556][T11980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.789925][T11980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.831109][T11980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.926250][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  256.074122][T11980] hsr_slave_0: entered promiscuous mode
[  256.104718][T11980] hsr_slave_1: entered promiscuous mode
[  256.121867][T11980] debugfs: 'hsr0' already exists in 'hsr'
[  256.127665][T11980] Cannot create hsr debugfs directory
[  256.707367][T12142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1670'.
[  256.772390][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1670'.
[  257.119428][ T5881] Bluetooth: hci7: command tx timeout
[  257.322548][T11980] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  257.364751][T11980] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  257.422672][T11980] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  257.472954][T11980] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  257.566334][T12172] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1681'.
[  257.895673][T11980] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.915482][T12185] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1684'.
[  257.932566][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'.
[  257.981719][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1686'.
[  258.002148][T11980] 8021q: adding VLAN 0 to HW filter on device team0
[  258.031239][T11919] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.038496][T11919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.093712][T11919] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.101071][T11919] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.541391][T12209] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1691'.
[  258.711699][T12218] sctp: [Deprecated]: syz.6.1694 (pid 12218) Use of int in max_burst socket option.
[  258.711699][T12218] Use struct sctp_assoc_value instead
[  258.718983][T12220] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_batadv, syncid = 2, id = 0
[  259.152658][T11980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.196032][T12240] syz.6.1701 (12240) used obsolete PPPIOCDETACH ioctl
[  259.204164][ T5881] Bluetooth: hci7: command tx timeout
[  259.270235][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1701'.
[  259.369610][T12240] bond2: entered promiscuous mode
[  259.374961][T12240] bond2: entered allmulticast mode
[  259.383483][T12240] 8021q: adding VLAN 0 to HW filter on device bond2
[  259.395332][T12238] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  259.409774][T12238] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  259.467155][T12236] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  259.490783][T12236] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  259.521027][ T2154] hid (null): unknown global tag 0xe
[  259.527764][ T2154] hid (null): nested delimiters
[  260.270892][T11980] veth0_vlan: entered promiscuous mode
[  260.333938][T11980] veth1_vlan: entered promiscuous mode
[  260.470077][T12283] syzkaller1: entered promiscuous mode
[  260.475624][T12283] syzkaller1: entered allmulticast mode
[  260.549774][T12287] dvmrp0: entered allmulticast mode
[  260.662935][T12287] dvmrp0: left allmulticast mode
[  260.668084][T12287] dvmrp1: left allmulticast mode
[  260.817514][T11980] veth0_macvtap: entered promiscuous mode
[  260.891818][T11980] veth1_macvtap: entered promiscuous mode
[  260.915302][ T2154] hid (null): report_id 0 is invalid
[  260.969325][T11980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.011881][T11980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.066702][T11918] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.126343][T11918] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.161665][T12307] __nla_validate_parse: 3 callbacks suppressed
[  261.161687][T12307] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1723'.
[  261.209570][T11918] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.238341][T11918] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.280184][ T5881] Bluetooth: hci7: command tx timeout
[  261.499727][T11915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.543098][T11915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.580411][T12316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'.
[  261.649351][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1726'.
[  261.681531][T11920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.713239][T11920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.739201][T12318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1726'.
[  261.771898][T12317] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1726'.
[  261.778517][ T2154] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe
[  261.798122][ T2154] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed
[  261.816558][ T2154] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22
[  262.558670][T12354] tipc: Resetting bearer <eth:syzkaller0>
[  262.725866][T12359] team0: Mode changed to "loadbalance"
[  263.158383][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1742'.
[  263.206481][T12374] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[  263.545583][T12397] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1747'.
[  263.635833][T12408] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1749'.
[  264.072584][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1746'.
[  264.350680][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1757'.
[  264.525525][T12431] pimreg: entered allmulticast mode
[  264.977437][T12460] ieee802154 phy0 wpan0: encryption failed: -22
[  265.381866][T12476] validate_nla: 1 callbacks suppressed
[  265.381895][T12476] netlink: 'syz.5.1769': attribute type 1 has an invalid length.
[  265.576466][T12476] 8021q: adding VLAN 0 to HW filter on device bond3
[  265.658461][T12482] bond3: (slave wlan0): Enslaving as an active interface with a down link
[  265.741099][T12476] vlan2: entered allmulticast mode
[  265.759424][T12476] veth1: entered allmulticast mode
[  265.798838][T12476] veth1: entered promiscuous mode
[  265.809532][T12476] veth1: left promiscuous mode
[  265.817347][T12476] bond3: (slave vlan2): making interface the new active one
[  265.850528][T12476] veth1: entered promiscuous mode
[  265.856786][T12476] vlan2: entered promiscuous mode
[  265.884853][T12476] bond3: (slave vlan2): Enslaving as an active interface with an up link
[  265.935888][T12485] syzkaller1: entered promiscuous mode
[  265.951869][T12485] syzkaller1: entered allmulticast mode
[  266.007471][T12469] lec:lec_atm_close: lec0: Shut down!
[  266.335167][T12512] __nla_validate_parse: 3 callbacks suppressed
[  266.335187][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1779'.
[  266.434196][T12512] netlink: 'syz.5.1779': attribute type 1 has an invalid length.
[  266.463245][T12516] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.482913][T12512] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1779'.
[  266.530734][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1779'.
[  266.840796][T12531] veth3: entered promiscuous mode
[  266.848761][T12531] veth3: entered allmulticast mode
[  266.877251][T12540] netlink: 'syz.2.1788': attribute type 11 has an invalid length.
[  266.889406][T12540] netlink: 'syz.2.1788': attribute type 11 has an invalid length.
[  266.897485][T12540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1788'.
[  267.146216][T12545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.554778][T12569] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1798'.
[  267.556305][T12570] veth0_to_bond: entered allmulticast mode
[  267.610867][T12566] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1798'.
[  267.640772][T12569] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1798'.
[  267.658265][T12566] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1798'.
[  268.241557][ T5865] Bluetooth: hci4: command 0x0406 tx timeout
[  268.421281][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1814'.
[  268.667181][T12636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1818'.
[  268.878122][T12648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.035598][T12655] netlink: 'syz.5.1823': attribute type 4 has an invalid length.
[  269.055954][T12654] netlink: 'syz.5.1823': attribute type 4 has an invalid length.
[  269.132565][T12660] netlink: 'syz.5.1823': attribute type 4 has an invalid length.
[  269.477710][T12679] delete_channel: no stack
[  269.623601][T12686] dvmrp0: entered allmulticast mode
[  269.630915][T12686] dvmrp0: left allmulticast mode
[  269.933959][T12692] netlink: 'syz.5.1836': attribute type 5 has an invalid length.
[  270.644610][T12713] netem: change failed
[  271.003670][T12726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.203360][T12726] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.444384][T12752] __nla_validate_parse: 6 callbacks suppressed
[  271.444405][T12752] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1853'.
[  271.529109][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1853'.
[  271.562753][T12756] tc_dump_action: action bad kind
[  271.617741][T12752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1853'.
[  271.647254][T12757] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  271.800338][T12764] netlink: 'syz.5.1856': attribute type 1 has an invalid length.
[  271.904112][T12771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1858'.
[  271.960169][T12772] netlink: 25 bytes leftover after parsing attributes in process `syz.7.1857'.
[  272.141187][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1859'.
[  272.231937][T12785] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1859'.
[  272.279680][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1862'.
[  272.646668][T12784] hsr_slave_1 (unregistering): left promiscuous mode
[  273.238425][T12828] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.266110][T12832] netlink: 'syz.0.1875': attribute type 10 has an invalid length.
[  273.335098][T12832] team0: Device veth1_macvtap failed to register rx_handler
[  273.628520][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1880'.
[  273.983692][T12864] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  274.061840][T12875] raw_sendmsg: syz.2.1889 forgot to set AF_INET. Fix it!
[  274.482491][T12888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1894'.
[  275.092335][T12916] netlink: 'syz.0.1903': attribute type 1 has an invalid length.
[  275.509626][T12934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.623561][T12943] netlink: 'syz.5.1911': attribute type 1 has an invalid length.
[  275.655855][T12943] bridge0: port 1(bond_slave_1) entered blocking state
[  275.685833][T12943] bridge0: port 1(bond_slave_1) entered disabled state
[  275.713346][T12943] bond_slave_1: entered allmulticast mode
[  275.764193][T12943] bond_slave_1: entered promiscuous mode
[  276.420937][T12974] ipvlan2: entered promiscuous mode
[  276.428194][T12974] bridge0: port 3(ipvlan2) entered blocking state
[  276.459794][T12974] bridge0: port 3(ipvlan2) entered disabled state
[  276.485054][T12974] ipvlan2: entered allmulticast mode
[  276.518543][T12974] ipvlan2: left allmulticast mode
[  277.044383][T11919] vlan2: left promiscuous mode
[  277.110111][T12984] __nla_validate_parse: 9 callbacks suppressed
[  277.110135][T12984] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1926'.
[  277.167721][T12989] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1927'.
[  277.501496][T13002] tipc: Enabling of bearer <ib:gretap0> rejected, already enabled
[  277.975641][T13024] netlink: 'syz.5.1937': attribute type 4 has an invalid length.
[  278.555396][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1947'.
[  278.655378][T13060] : entered promiscuous mode
[  278.819866][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1950'.
[  278.908244][T13075] netlink: 576 bytes leftover after parsing attributes in process `syz.6.1953'.
[  278.919438][T13068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1951'.
[  278.938139][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1952'.
[  279.105109][T13088] netlink: 'syz.2.1956': attribute type 1 has an invalid length.
[  279.148169][T13090] vlan2: entered promiscuous mode
[  279.153483][T13090] bridge0: entered promiscuous mode
[  279.237637][T13094] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  279.352082][T13102] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1959'.
[  280.130758][T13126] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1968'.
[  280.185928][T13133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1969'.
[  280.370995][T13138] netlink: 'syz.7.1973': attribute type 1 has an invalid length.
[  280.553586][T13142] bond2: (slave ip6gretap1): making interface the new active one
[  280.563786][T13142] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  281.097810][T13177] netlink: 'syz.0.1984': attribute type 1 has an invalid length.
[  281.120764][T13177] netlink: 'syz.0.1984': attribute type 3 has an invalid length.
[  281.695517][T13205] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  281.800021][T13209] netlink: 'syz.5.1995': attribute type 19 has an invalid length.
[  283.297768][T13267] __nla_validate_parse: 14 callbacks suppressed
[  283.297789][T13267] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2009'.
[  283.464488][T13273] netlink: 'syz.2.2011': attribute type 4 has an invalid length.
[  283.577810][T13278] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2013'.
[  283.654298][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2013'.
[  283.673657][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2014'.
[  283.704182][T13278] netlink: 'syz.6.2013': attribute type 20 has an invalid length.
[  283.712822][T13280] netlink: 'syz.0.2014': attribute type 2 has an invalid length.
[  283.735277][T13280] netlink: 'syz.0.2014': attribute type 1 has an invalid length.
[  283.737809][T13278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2013'.
[  283.743644][   T36] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  283.758902][T13278] netlink: 'syz.6.2013': attribute type 20 has an invalid length.
[  283.762508][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'.
[  283.809161][   T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  283.827921][T13285] netlink: 'syz.2.2015': attribute type 29 has an invalid length.
[  283.942629][T13291] netlink: 492 bytes leftover after parsing attributes in process `syz.2.2015'.
[  283.985282][   T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  283.994908][T13285] netlink: 'syz.2.2015': attribute type 29 has an invalid length.
[  283.997889][T13295] sctp: [Deprecated]: syz.0.2019 (pid 13295) Use of int in maxseg socket option.
[  283.997889][T13295] Use struct sctp_assoc_value instead
[  284.023326][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2015'.
[  284.062712][T11915] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  284.217700][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'.
[  284.241116][T13306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2021'.
[  284.272701][T13306] netlink: 'syz.0.2021': attribute type 1 has an invalid length.
[  284.930313][T13341] syz_tun: tun_net_xmit 42
[  284.957377][T13341] syz_tun: tun_net_xmit 42
[  284.974674][T13341] syz_tun: tun_net_xmit 42
[  284.989326][T13341] syz_tun: tun_net_xmit 42
[  285.014622][T13341] syz_tun: tun_net_xmit 42
[  285.032284][ T5950] IPVS: starting estimator thread 0...
[  285.035492][T13341] syz_tun: tun_net_xmit 42
[  285.090440][T13341] syz_tun: tun_net_xmit 42
[  285.105719][T13341] syz_tun: tun_net_xmit 42
[  285.110591][T13341] syz_tun: tun_net_xmit 42
[  285.115284][T13341] syz_tun: tun_net_xmit 42
[  285.123146][T13341] syz_tun: tun_net_xmit 42
[  285.127921][T13341] syz_tun: tun_net_xmit 42
[  285.132599][T13347] IPVS: using max 27 ests per chain, 64800 per kthread
[  285.141617][T13341] syz_tun: tun_net_xmit 42
[  285.194582][T13341] syz_tun: tun_net_xmit 42
[  285.217268][T13341] syz_tun: tun_net_xmit 42
[  285.234803][T13341] syz_tun: tun_net_xmit 42
[  285.305266][T13341] syz_tun: tun_net_xmit 42
[  285.317494][T13341] syz_tun: tun_net_xmit 42
[  285.324510][T13341] syz_tun: tun_net_xmit 42
[  285.331804][T13341] syz_tun: tun_net_xmit 42
[  285.336676][T13341] syz_tun: tun_net_xmit 42
[  285.351808][T13341] syz_tun: tun_net_xmit 42
[  285.356600][T13341] syz_tun: tun_net_xmit 42
[  285.374317][T13341] syz_tun: tun_net_xmit 42
[  285.435053][T13341] syz_tun: tun_net_xmit 42
[  285.441309][T13341] syz_tun: tun_net_xmit 42
[  285.446063][T13341] syz_tun: tun_net_xmit 42
[  285.477244][T13341] syz_tun: tun_net_xmit 42
[  285.514457][T13341] syz_tun: tun_net_xmit 42
[  285.517149][T13360] C speed is unknown, defaulting to 1000
[  285.543218][T13341] syz_tun: tun_net_xmit 42
[  285.553204][T13341] syz_tun: tun_net_xmit 42
[  285.563500][T13341] syz_tun: tun_net_xmit 42
[  285.570279][T13341] syz_tun: tun_net_xmit 42
[  285.574950][T13341] syz_tun: tun_net_xmit 42
[  285.595190][T13360] hsr0 speed is unknown, defaulting to 1000
[  285.599062][T13341] syz_tun: tun_net_xmit 42
[  285.629320][T13341] syz_tun: tun_net_xmit 42
[  285.653049][T13341] syz_tun: tun_net_xmit 42
[  285.676475][T13341] syz_tun: tun_net_xmit 42
[  285.702419][T13341] syz_tun: tun_net_xmit 42
[  285.709371][T13341] syz_tun: tun_net_xmit 42
[  285.731965][T13341] syz_tun: tun_net_xmit 42
[  285.756790][T13341] syz_tun: tun_net_xmit 42
[  285.791612][T13341] syz_tun: tun_net_xmit 42
[  285.796302][T13341] syz_tun: tun_net_xmit 42
[  285.880418][T13341] syz_tun: tun_net_xmit 42
[  285.885114][T13341] syz_tun: tun_net_xmit 42
[  285.911275][T13341] syz_tun: tun_net_xmit 42
[  285.916620][T13341] syz_tun: tun_net_xmit 42
[  285.955618][T13341] syz_tun: tun_net_xmit 42
[  285.979259][T13341] syz_tun: tun_net_xmit 42
[  285.983916][T13341] syz_tun: tun_net_xmit 42
[  285.988718][T13341] syz_tun: tun_net_xmit 42
[  286.054240][T13341] syz_tun: tun_net_xmit 42
[  286.101490][T13341] syz_tun: tun_net_xmit 42
[  286.129289][T13341] syz_tun: tun_net_xmit 42
[  286.147627][T13341] syz_tun: tun_net_xmit 42
[  286.176098][T13341] syz_tun: tun_net_xmit 42
[  286.208481][T13341] syz_tun: tun_net_xmit 42
[  286.234697][T13341] syz_tun: tun_net_xmit 42
[  286.254567][T13341] syz_tun: tun_net_xmit 42
[  286.277074][T13341] syz_tun: tun_net_xmit 42
[  286.284454][T13341] syz_tun: tun_net_xmit 42
[  286.313695][T13341] syz_tun: tun_net_xmit 42
[  286.329906][T13341] syz_tun: tun_net_xmit 42
[  286.349126][T13341] syz_tun: tun_net_xmit 42
[  286.353933][T13341] syz_tun: tun_net_xmit 42
[  286.399568][T13341] syz_tun: tun_net_xmit 42
[  286.404246][T13341] syz_tun: tun_net_xmit 42
[  286.417158][T13341] syz_tun: tun_net_xmit 42
[  286.422213][T13341] syz_tun: tun_net_xmit 42
[  286.427002][T13341] syz_tun: tun_net_xmit 42
[  286.449165][T13341] syz_tun: tun_net_xmit 42
[  286.453844][T13341] syz_tun: tun_net_xmit 42
[  286.494456][T13341] syz_tun: tun_net_xmit 42
[  286.502668][T13341] syz_tun: tun_net_xmit 42
[  286.507405][T13341] syz_tun: tun_net_xmit 42
[  286.517493][T13341] syz_tun: tun_net_xmit 42
[  286.523302][T13341] syz_tun: tun_net_xmit 42
[  286.528005][T13341] syz_tun: tun_net_xmit 42
[  286.534165][T13341] syz_tun: tun_net_xmit 42
[  286.539547][T13341] syz_tun: tun_net_xmit 42
[  286.544171][T13341] syz_tun: tun_net_xmit 42
[  286.548847][T13341] syz_tun: tun_net_xmit 42
[  286.553980][T13341] syz_tun: tun_net_xmit 42
[  286.554333][T13360] bond4: entered promiscuous mode
[  286.558590][T13341] syz_tun: tun_net_xmit 42
[  286.568570][T13341] syz_tun: tun_net_xmit 42
[  286.573737][T13341] syz_tun: tun_net_xmit 42
[  286.578344][T13341] syz_tun: tun_net_xmit 42
[  286.583116][T13341] syz_tun: tun_net_xmit 42
[  286.588013][T13341] syz_tun: tun_net_xmit 42
[  286.592955][T13341] syz_tun: tun_net_xmit 42
[  286.597621][T13341] syz_tun: tun_net_xmit 42
[  286.602839][T13341] syz_tun: tun_net_xmit 42
[  286.607579][T13341] syz_tun: tun_net_xmit 42
[  286.612821][T13341] syz_tun: tun_net_xmit 42
[  286.617595][T13341] syz_tun: tun_net_xmit 42
[  286.622627][T13341] syz_tun: tun_net_xmit 42
[  286.627670][T13341] syz_tun: tun_net_xmit 42
[  286.633674][T13341] syz_tun: tun_net_xmit 42
[  286.638306][T13341] syz_tun: tun_net_xmit 42
[  286.643665][T13341] syz_tun: tun_net_xmit 42
[  286.648304][T13341] syz_tun: tun_net_xmit 42
[  286.654330][T13341] syz_tun: tun_net_xmit 42
[  286.659583][T13341] syz_tun: tun_net_xmit 42
[  286.663649][T13360] bond4: entered allmulticast mode
[  286.664174][T13341] syz_tun: tun_net_xmit 42
[  286.674532][T13412] netlink: 'syz.0.2047': attribute type 1 has an invalid length.
[  286.688157][T13360] 8021q: adding VLAN 0 to HW filter on device bond4
[  286.702486][T13341] syz_tun: tun_net_xmit 42
[  286.719202][T13341] syz_tun: tun_net_xmit 42
[  286.723958][T13341] syz_tun: tun_net_xmit 42
[  286.728593][T13341] syz_tun: tun_net_xmit 42
[  286.767289][T13341] syz_tun: tun_net_xmit 42
[  286.774863][T13341] syz_tun: tun_net_xmit 42
[  286.785735][T13341] syz_tun: tun_net_xmit 42
[  286.793941][T13341] syz_tun: tun_net_xmit 42
[  286.798649][T13341] syz_tun: tun_net_xmit 42
[  286.812140][T13341] syz_tun: tun_net_xmit 42
[  286.816982][T13341] syz_tun: tun_net_xmit 42
[  286.826680][T13341] syz_tun: tun_net_xmit 42
[  286.869226][T13341] syz_tun: tun_net_xmit 42
[  286.873921][T13341] syz_tun: tun_net_xmit 42
[  286.878566][T13341] syz_tun: tun_net_xmit 42
[  286.894530][T13341] syz_tun: tun_net_xmit 42
[  286.911384][T13341] syz_tun: tun_net_xmit 42
[  286.931237][T13341] syz_tun: tun_net_xmit 42
[  286.944083][T13341] syz_tun: tun_net_xmit 42
[  286.962295][T13341] syz_tun: tun_net_xmit 42
[  286.983702][T13341] syz_tun: tun_net_xmit 42
[  286.999189][T13341] syz_tun: tun_net_xmit 42
[  287.015354][T13341] syz_tun: tun_net_xmit 42
[  287.032700][T13341] syz_tun: tun_net_xmit 42
[  287.049648][T13341] syz_tun: tun_net_xmit 42
[  287.064309][T13341] syz_tun: tun_net_xmit 42
[  287.081026][T13341] syz_tun: tun_net_xmit 42
[  287.091513][T13341] syz_tun: tun_net_xmit 42
[  287.101696][T13341] syz_tun: tun_net_xmit 42
[  287.112612][T13341] syz_tun: tun_net_xmit 42
[  287.123733][T13341] syz_tun: tun_net_xmit 42
[  287.133952][T13341] syz_tun: tun_net_xmit 42
[  287.157661][T13341] syz_tun: tun_net_xmit 42
[  287.185898][T13341] syz_tun: tun_net_xmit 42
[  287.205174][T13341] syz_tun: tun_net_xmit 42
[  287.220552][T13341] syz_tun: tun_net_xmit 42
[  287.243663][T13341] syz_tun: tun_net_xmit 42
[  287.255181][T13341] syz_tun: tun_net_xmit 42
[  287.275402][T13341] syz_tun: tun_net_xmit 42
[  287.285994][T13341] syz_tun: tun_net_xmit 42
[  287.303725][T13425] pimreg: left allmulticast mode
[  287.315208][T13341] syz_tun: tun_net_xmit 42
[  287.327905][T13341] syz_tun: tun_net_xmit 42
[  287.342346][T13341] syz_tun: tun_net_xmit 42
[  287.359821][T13341] syz_tun: tun_net_xmit 42
[  287.364521][T13341] syz_tun: tun_net_xmit 42
[  287.373940][T13341] syz_tun: tun_net_xmit 42
[  287.382057][T13341] syz_tun: tun_net_xmit 42
[  287.397664][T13426] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  287.407185][T13341] syz_tun: tun_net_xmit 42
[  287.416816][T13341] syz_tun: tun_net_xmit 42
[  287.457318][T13341] syz_tun: tun_net_xmit 42
[  287.489173][T13341] syz_tun: tun_net_xmit 42
[  287.494300][T13341] syz_tun: tun_net_xmit 42
[  287.499718][T13341] syz_tun: tun_net_xmit 42
[  287.504359][T13341] syz_tun: tun_net_xmit 42
[  287.510298][T13341] syz_tun: tun_net_xmit 42
[  287.515036][T13341] syz_tun: tun_net_xmit 42
[  287.521014][T13341] syz_tun: tun_net_xmit 42
[  287.525658][T13341] syz_tun: tun_net_xmit 42
[  287.553012][T13341] syz_tun: tun_net_xmit 42
[  287.558726][T13341] syz_tun: tun_net_xmit 42
[  287.578554][T13341] syz_tun: tun_net_xmit 42
[  287.588722][T13341] syz_tun: tun_net_xmit 42
[  287.608001][T13341] syz_tun: tun_net_xmit 42
[  287.659669][T13341] syz_tun: tun_net_xmit 42
[  287.664408][T13341] syz_tun: tun_net_xmit 42
[  287.669707][T13438] netlink: 'syz.2.2059': attribute type 10 has an invalid length.
[  287.708888][T13341] syz_tun: tun_net_xmit 42
[  287.713580][T13341] syz_tun: tun_net_xmit 42
[  287.739225][T13341] syz_tun: tun_net_xmit 42
[  287.746784][T13341] syz_tun: tun_net_xmit 42
[  287.769283][T13341] syz_tun: tun_net_xmit 42
[  287.773985][T13341] syz_tun: tun_net_xmit 42
[  287.803424][T13341] syz_tun: tun_net_xmit 42
[  287.808099][T13341] syz_tun: tun_net_xmit 42
[  287.827916][T13445] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  287.836197][T13341] syz_tun: tun_net_xmit 42
[  287.855636][T13341] syz_tun: tun_net_xmit 42
[  287.889406][T13341] syz_tun: tun_net_xmit 42
[  287.894118][T13341] syz_tun: tun_net_xmit 42
[  287.898855][T13341] syz_tun: tun_net_xmit 42
[  287.928530][T13341] syz_tun: tun_net_xmit 42
[  287.958557][T13341] syz_tun: tun_net_xmit 42
[  287.987286][T13341] syz_tun: tun_net_xmit 42
[  288.016974][T13341] syz_tun: tun_net_xmit 42
[  288.059605][T13341] syz_tun: tun_net_xmit 42
[  288.092315][T13341] syz_tun: tun_net_xmit 42
[  288.096988][T13341] syz_tun: tun_net_xmit 42
[  288.106062][T13461] siw: device registration error -23
[  288.133238][T13462] netlink: 'syz.6.2065': attribute type 11 has an invalid length.
[  288.133679][T13464] siw: device registration error -23
[  288.141743][T13341] syz_tun: tun_net_xmit 42
[  288.183850][T13462] bridge_slave_1: left allmulticast mode
[  288.190445][T13341] syz_tun: tun_net_xmit 42
[  288.195123][T13341] syz_tun: tun_net_xmit 42
[  288.209199][T13462] bridge_slave_1: left promiscuous mode
[  288.215083][T13462] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.225548][T13341] syz_tun: tun_net_xmit 42
[  288.235094][T13341] syz_tun: tun_net_xmit 42
[  288.301667][T13341] syz_tun: tun_net_xmit 42
[  288.330668][T13341] syz_tun: tun_net_xmit 42
[  288.342818][T13462] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  288.345116][T13341] syz_tun: tun_net_xmit 42
[  288.402917][T13472] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$���UL�vy��آ
�D��UD�w�}�z
[  288.415892][T13341] syz_tun: tun_net_xmit 42
[  288.434150][T13341] syz_tun: tun_net_xmit 42
[  288.450771][T13341] syz_tun: tun_net_xmit 42
[  288.469122][T13341] syz_tun: tun_net_xmit 42
[  288.483547][T13341] syz_tun: tun_net_xmit 42
[  288.488483][T13341] syz_tun: tun_net_xmit 42
[  288.493700][T13341] syz_tun: tun_net_xmit 42
[  288.498652][T13341] syz_tun: tun_net_xmit 42
[  288.537457][T13341] syz_tun: tun_net_xmit 42
[  288.549141][T13341] syz_tun: tun_net_xmit 42
[  288.556643][T13341] syz_tun: tun_net_xmit 42
[  288.580702][T13341] syz_tun: tun_net_xmit 42
[  288.613606][T13341] syz_tun: tun_net_xmit 42
[  288.618304][T13341] syz_tun: tun_net_xmit 42
[  288.626814][T13341] syz_tun: tun_net_xmit 42
[  288.632258][T13341] syz_tun: tun_net_xmit 42
[  288.637011][T13341] syz_tun: tun_net_xmit 42
[  288.649263][T13341] syz_tun: tun_net_xmit 42
[  288.657465][T13341] syz_tun: tun_net_xmit 42
[  288.667659][T13341] syz_tun: tun_net_xmit 42
[  288.678328][T13341] syz_tun: tun_net_xmit 42
[  288.690487][T13481] validate_nla: 1 callbacks suppressed
[  288.690507][T13481] netlink: 'syz.0.2071': attribute type 10 has an invalid length.
[  288.716462][T13484] __nla_validate_parse: 14 callbacks suppressed
[  288.716483][T13484] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2072'.
[  288.729041][T13341] syz_tun: tun_net_xmit 42
[  288.737280][T13341] syz_tun: tun_net_xmit 42
[  288.746295][T13341] syz_tun: tun_net_xmit 42
[  288.769301][T13341] syz_tun: tun_net_xmit 42
[  288.774017][T13341] syz_tun: tun_net_xmit 42
[  288.787932][T13341] syz_tun: tun_net_xmit 42
[  288.798599][T13481] batman_adv: batadv0: Adding interface: team0
[  288.806450][T13481] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.835347][T13341] syz_tun: tun_net_xmit 42
[  288.848331][T13341] syz_tun: tun_net_xmit 42
[  288.857146][T13341] syz_tun: tun_net_xmit 42
[  288.869242][T13341] syz_tun: tun_net_xmit 42
[  288.874021][T13341] syz_tun: tun_net_xmit 42
[  288.878658][T13341] syz_tun: tun_net_xmit 42
[  288.898950][T13481] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  288.910310][T13341] syz_tun: tun_net_xmit 42
[  288.915017][T13341] syz_tun: tun_net_xmit 42
[  288.934639][T13341] syz_tun: tun_net_xmit 42
[  288.938879][T13490] 8021q: VLANs not supported on ipvlan0
[  288.949326][T13341] syz_tun: tun_net_xmit 42
[  288.954222][T13341] syz_tun: tun_net_xmit 42
[  288.972928][T13341] syz_tun: tun_net_xmit 42
[  288.977638][T13341] syz_tun: tun_net_xmit 42
[  289.016828][T13341] syz_tun: tun_net_xmit 42
[  289.022230][T13341] syz_tun: tun_net_xmit 42
[  289.026888][T13341] syz_tun: tun_net_xmit 42
[  289.065602][T13341] syz_tun: tun_net_xmit 42
[  289.092903][T13341] syz_tun: tun_net_xmit 42
[  289.097583][T13341] syz_tun: tun_net_xmit 42
[  289.125822][T13341] syz_tun: tun_net_xmit 42
[  289.146184][T13341] syz_tun: tun_net_xmit 42
[  289.176907][T13341] syz_tun: tun_net_xmit 42
[  289.193416][T13341] syz_tun: tun_net_xmit 42
[  289.198152][T13341] syz_tun: tun_net_xmit 42
[  289.226257][T13341] syz_tun: tun_net_xmit 42
[  289.234977][T13503] netlink: 'syz.2.2077': attribute type 12 has an invalid length.
[  289.264433][T13341] syz_tun: tun_net_xmit 42
[  289.298752][T13341] syz_tun: tun_net_xmit 42
[  289.303753][T13341] syz_tun: tun_net_xmit 42
[  289.308379][T13341] syz_tun: tun_net_xmit 42
[  289.347883][T13341] syz_tun: tun_net_xmit 42
[  289.355395][T13341] syz_tun: tun_net_xmit 42
[  289.365407][T13341] syz_tun: tun_net_xmit 42
[  289.375691][T13341] syz_tun: tun_net_xmit 42
[  289.386719][T13341] syz_tun: tun_net_xmit 42
[  289.391862][T13341] syz_tun: tun_net_xmit 42
[  289.396690][T13341] syz_tun: tun_net_xmit 42
[  289.402549][T13341] syz_tun: tun_net_xmit 42
[  289.408229][T13341] syz_tun: tun_net_xmit 42
[  289.413530][T13341] syz_tun: tun_net_xmit 42
[  289.418352][T13341] syz_tun: tun_net_xmit 42
[  289.423420][T13341] syz_tun: tun_net_xmit 42
[  289.428080][T13341] syz_tun: tun_net_xmit 42
[  289.433723][T13341] syz_tun: tun_net_xmit 42
[  289.439154][T13341] syz_tun: tun_net_xmit 42
[  289.443993][T13341] syz_tun: tun_net_xmit 42
[  289.448642][T13341] syz_tun: tun_net_xmit 42
[  289.454475][T13341] syz_tun: tun_net_xmit 42
[  289.459257][T13341] syz_tun: tun_net_xmit 42
[  289.463899][T13341] syz_tun: tun_net_xmit 42
[  289.468735][T13341] syz_tun: tun_net_xmit 42
[  289.477941][T13341] syz_tun: tun_net_xmit 42
[  289.483084][T13341] syz_tun: tun_net_xmit 42
[  289.487702][T13341] syz_tun: tun_net_xmit 42
[  289.507208][T13508] 8021q: adding VLAN 0 to HW filter on device bond5
[  289.539441][T13341] syz_tun: tun_net_xmit 42
[  289.554360][T13341] syz_tun: tun_net_xmit 42
[  289.587048][T13341] syz_tun: tun_net_xmit 42
[  289.618676][T13341] syz_tun: tun_net_xmit 42
[  289.637182][T13341] syz_tun: tun_net_xmit 42
[  289.655520][T13341] syz_tun: tun_net_xmit 42
[  289.683731][T13341] syz_tun: tun_net_xmit 42
[  289.706890][T13525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  289.718532][T13341] syz_tun: tun_net_xmit 42
[  289.732415][T13527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2080'.
[  289.739466][T13341] syz_tun: tun_net_xmit 42
[  289.759446][T13341] syz_tun: tun_net_xmit 42
[  289.770410][T13526] syzkaller0: entered promiscuous mode
[  289.780926][T13341] syz_tun: tun_net_xmit 42
[  289.783742][T13531] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2080'.
[  289.790592][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'.
[  289.807983][T13531] netlink: 'syz.0.2080': attribute type 1 has an invalid length.
[  289.809052][T13341] syz_tun: tun_net_xmit 42
[  289.816014][T13531] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2080'.
[  289.827751][T13526] syzkaller0: entered allmulticast mode
[  289.833859][T13341] syz_tun: tun_net_xmit 42
[  289.851294][T13341] syz_tun: tun_net_xmit 42
[  289.856450][T13341] syz_tun: tun_net_xmit 42
[  289.890930][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'.
[  289.909675][T13341] syz_tun: tun_net_xmit 42
[  289.922704][T13341] syz_tun: tun_net_xmit 42
[  289.937694][T13341] syz_tun: tun_net_xmit 42
[  289.947879][T13341] syz_tun: tun_net_xmit 42
[  289.954993][T13341] syz_tun: tun_net_xmit 42
[  289.960396][T13341] syz_tun: tun_net_xmit 42
[  289.966624][T13341] syz_tun: tun_net_xmit 42
[  289.974059][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'.
[  289.984033][T13341] syz_tun: tun_net_xmit 42
[  289.990111][T13341] syz_tun: tun_net_xmit 42
[  289.994764][T13341] syz_tun: tun_net_xmit 42
[  290.010827][T13341] syz_tun: tun_net_xmit 42
[  290.030072][T13341] syz_tun: tun_net_xmit 42
[  290.061555][T13341] syz_tun: tun_net_xmit 42
[  290.082187][T13529] tipc: Resetting bearer <eth:syzkaller0>
[  290.102828][T13341] syz_tun: tun_net_xmit 42
[  290.123375][T13341] syz_tun: tun_net_xmit 42
[  290.132570][T13341] syz_tun: tun_net_xmit 42
[  290.140953][T13341] syz_tun: tun_net_xmit 42
[  290.154700][T13341] syz_tun: tun_net_xmit 42
[  290.156092][T13529] tipc: Disabling bearer <eth:syzkaller0>
[  290.164436][T13341] syz_tun: tun_net_xmit 42
[  290.176059][T13341] syz_tun: tun_net_xmit 42
[  290.184349][T13341] syz_tun: tun_net_xmit 42
[  290.198727][T13341] syz_tun: tun_net_xmit 42
[  290.221198][T13341] syz_tun: tun_net_xmit 42
[  290.247416][T13341] syz_tun: tun_net_xmit 42
[  290.262536][T13546] netlink: 'syz.5.2085': attribute type 1 has an invalid length.
[  290.282301][T13546] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2085'.
[  290.282382][T13341] syz_tun: tun_net_xmit 42
[  290.292974][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2085'.
[  290.392710][T13547] netlink: 'syz.5.2085': attribute type 1 has an invalid length.
[  290.440495][T13547] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2085'.
[  290.612241][T13559] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  290.632896][T13561] sctp: [Deprecated]: syz.6.2090 (pid 13561) Use of int in max_burst socket option.
[  290.632896][T13561] Use struct sctp_assoc_value instead
[  290.722383][T13561] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  290.805044][T13561] sctp: [Deprecated]: syz.6.2090 (pid 13561) Use of struct sctp_assoc_value in delayed_ack socket option.
[  290.805044][T13561] Use struct sctp_sack_info instead
[  291.115304][T13590] netlink: 'syz.2.2099': attribute type 8 has an invalid length.
[  291.192702][T13592] netlink: 'syz.0.2100': attribute type 4 has an invalid length.
[  291.449881][T13608] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.605920][T13617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.847728][T13621] syzkaller1: entered promiscuous mode
[  291.869550][T13621] syzkaller1: entered allmulticast mode
[  292.425470][T13654] (unnamed net_device) (uninitialized): option mode: invalid value (133)
[  292.501479][T13654] 0��{X��: entered promiscuous mode
[  292.506989][T13654] 0��{X��: left allmulticast mode
[  293.250575][T13682] netlink: 'syz.6.2126': attribute type 58 has an invalid length.
[  293.735148][T13700] netlink: 'syz.2.2132': attribute type 10 has an invalid length.
[  293.755057][T13700] __nla_validate_parse: 8 callbacks suppressed
[  293.755078][T13700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2132'.
[  293.830879][T13700] dummy0: entered promiscuous mode
[  293.923817][T13700] bond0: (slave dummy0): Releasing backup interface
[  293.965282][T13700] dummy0: left allmulticast mode
[  293.991307][T13700] bridge0: port 2(dummy0) entered blocking state
[  293.998194][T13700] bridge0: port 2(dummy0) entered disabled state
[  294.006569][T13700] dummy0: entered allmulticast mode
[  294.026860][T13715] tipc: New replicast peer: 255.255.255.255
[  294.047680][T13715] tipc: Enabled bearer <udp:syz2>, priority 10
[  294.240539][T13722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  294.456228][T13730] netlink: 'syz.7.2141': attribute type 1 has an invalid length.
[  294.497898][T13730] netlink: 'syz.7.2141': attribute type 10 has an invalid length.
[  294.516512][T13730] netlink: 'syz.7.2141': attribute type 4 has an invalid length.
[  294.549676][T13730] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2141'.
[  294.561546][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2144'.
[  294.764939][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'.
[  294.816638][T13752] netlink: 'syz.0.2146': attribute type 13 has an invalid length.
[  294.835125][T13752] lo: entered promiscuous mode
[  294.840916][T13752] lo: entered allmulticast mode
[  294.848555][T13761] netlink: 192 bytes leftover after parsing attributes in process `syz.7.2147'.
[  294.875148][T13752] tunl0: entered promiscuous mode
[  294.888119][T13752] tunl0: entered allmulticast mode
[  294.901024][T13752] gre0: entered promiscuous mode
[  294.906233][T13752] gre0: entered allmulticast mode
[  294.922052][T13752] 0��{X��: entered allmulticast mode
[  294.933793][T13752] 0��{X��: refused to change device tx_queue_len
[  294.951831][T13752] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  295.221479][T13782] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2154'.
[  295.427255][T13787] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  296.024516][T13806] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2157'.
[  296.116706][T13809] syz_tun: tun_net_xmit 51
[  296.564578][T13838] syz_tun: tun_net_xmit 86
[  296.829801][T13850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'.
[  296.853770][T13850] netlink: 'syz.2.2172': attribute type 1 has an invalid length.
[  296.876692][T13850] netlink: 'syz.2.2172': attribute type 1 has an invalid length.
[  296.898301][T13854] netlink: 'syz.7.2173': attribute type 7 has an invalid length.
[  296.923898][T13850] netlink: 'syz.2.2172': attribute type 2 has an invalid length.
[  296.957722][T13854] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2173'.
[  296.969893][T13850] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2172'.
[  297.183243][T13864] netlink: 'syz.5.2177': attribute type 1 has an invalid length.
[  297.376415][T13871] team_slave_0: entered allmulticast mode
[  297.599033][    C0] syz_tun: tun_net_xmit 86
[  297.847759][T13883] veth7: entered promiscuous mode
[  297.860948][T13883] veth7: entered allmulticast mode
[  298.108391][T13913] lo: left promiscuous mode
[  298.129062][T13913] lo: left allmulticast mode
[  298.165053][T13913] tunl0: left promiscuous mode
[  298.201498][T13913] tunl0: left allmulticast mode
[  298.231331][T13913] gre0: left promiscuous mode
[  298.236091][T13913] gre0: left allmulticast mode
[  298.367771][T13913] 0��{X��: left promiscuous mode
[  298.382868][T13913] 0��{X��: left allmulticast mode
[  298.431737][T13913] 8021q: adding VLAN 0 to HW filter on device team0
[  298.440340][T13913] batman_adv: batadv0: Interface activated: team0
[  298.457424][T13913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  298.617657][T13934] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[  298.639093][    C0] syz_tun: tun_net_xmit 86
[  298.739291][T13932] 8021q: adding VLAN 0 to HW filter on device bond8
[  298.898499][T13947] __nla_validate_parse: 6 callbacks suppressed
[  298.898528][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  298.969360][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  298.980429][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  298.996479][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  299.034087][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  299.064698][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  299.084499][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  299.134265][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  299.159197][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  299.183947][T13947] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2203'.
[  299.923379][T13999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.940298][T13999] syzkaller0: entered promiscuous mode
[  299.947003][T13999] syzkaller0: entered allmulticast mode
[  299.981488][T13999] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  300.025925][T13999] tipc: Resetting bearer <eth:syzkaller0>
[  300.059346][T13998] tipc: Resetting bearer <eth:syzkaller0>
[  300.088570][T13998] tipc: Disabling bearer <eth:syzkaller0>
[  300.103327][T14008] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  300.332066][T14022] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.404147][T14021] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  300.447505][T14021] IPVS: Unknown mcast interface: dvmrp1
[  300.473627][T14025] tipc: Resetting bearer <eth:syzkaller0>
[  300.548550][T14020] tipc: Disabling bearer <eth:syzkaller0>
[  300.797506][T14039] bond3: entered promiscuous mode
[  300.804101][T14039] bond3: entered allmulticast mode
[  300.812382][T14039] 8021q: adding VLAN 0 to HW filter on device bond3
[  300.821913][T14045] validate_nla: 4 callbacks suppressed
[  300.821932][T14045] netlink: 'syz.6.2239': attribute type 83 has an invalid length.
[  300.852547][T14044] veth0_vlan: left promiscuous mode
[  300.995772][T14039] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  301.019806][T14047] netlink: 'syz.0.2242': attribute type 1 has an invalid length.
[  301.300623][T14064] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  301.329753][T14064] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  301.351838][T14064] gretap1: entered promiscuous mode
[  301.381633][T14067] openvswitch: netlink: VXLAN extension message has 11 unknown bytes.
[  301.404258][T14064] gretap1: entered allmulticast mode
[  301.611702][T14079] netlink: 'syz.0.2249': attribute type 6 has an invalid length.
[  301.670093][T14087] netlink: 'syz.0.2249': attribute type 6 has an invalid length.
[  301.742473][T14080] syzkaller0: entered promiscuous mode
[  301.766396][T14080] syzkaller0: entered allmulticast mode
[  304.075377][T14112] bond0: option ad_select: unable to set because the bond device is up
[  304.083755][ T5865] Bluetooth: hci5: command 0x0406 tx timeout
[  304.261757][T14126] __nla_validate_parse: 65 callbacks suppressed
[  304.261779][T14126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'.
[  304.353347][T14129] netlink: 'syz.0.2261': attribute type 2 has an invalid length.
[  304.455162][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'.
[  304.488025][ T5881] Bluetooth: hci7: command 0x0405 tx timeout
[  304.663427][T14155] netlink: 'syz.5.2266': attribute type 10 has an invalid length.
[  304.693578][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2269'.
[  304.916585][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2272'.
[  304.997601][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2274'.
[  305.063637][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2274'.
[  305.124073][T14173] netlink: 'syz.0.2274': attribute type 18 has an invalid length.
[  305.214877][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2274'.
[  305.224569][T11917] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  305.236080][T11917] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  305.256617][T14173] netlink: 'syz.0.2274': attribute type 18 has an invalid length.
[  305.275382][T11917] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  305.310678][T11919] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  305.481586][T14188] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2283'.
[  305.707105][T14200] lo speed is unknown, defaulting to 1000
[  305.720060][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2286'.
[  305.742315][T14200] lo speed is unknown, defaulting to 1000
[  305.751833][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2286'.
[  305.801493][T14207] syz_tun: left promiscuous mode
[  305.828230][T14207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.860259][T14200] lo speed is unknown, defaulting to 1000
[  306.301822][T14229] netlink: 'syz.0.2296': attribute type 1 has an invalid length.
[  306.533797][T14236] netlink: 'syz.0.2299': attribute type 6 has an invalid length.
[  306.561910][T14236] netlink: 'syz.0.2299': attribute type 5 has an invalid length.
[  306.674955][T14200] infiniband syz0: set active
[  306.683296][ T5950] lo speed is unknown, defaulting to 1000
[  306.698695][T14200] infiniband syz0: added lo
[  306.706927][T14200] syz0: rxe_create_cq: returned err = -12
[  306.728554][T14200] infiniband syz0: Couldn't create ib_mad CQ
[  306.743017][T14200] infiniband syz0: Couldn't open port 1
[  306.877892][T14200] RDS/IB: syz0: added
[  306.887254][T14200] smc: adding ib device syz0 with port count 1
[  306.902263][T14200] smc:    ib device syz0 port 1 has pnetid 
[  306.942905][T14200] lo speed is unknown, defaulting to 1000
[  306.959762][ T5950] lo speed is unknown, defaulting to 1000
[  307.470384][T14270] netlink: 'syz.0.2312': attribute type 1 has an invalid length.
[  307.522766][T14272] netlink: 'syz.0.2312': attribute type 1 has an invalid length.
[  307.541197][T14275] netlink: 'syz.0.2312': attribute type 1 has an invalid length.
[  307.622750][T14270] bond4: entered promiscuous mode
[  307.629646][T14270] 8021q: adding VLAN 0 to HW filter on device bond4
[  307.655001][T14200] lo speed is unknown, defaulting to 1000
[  308.209548][T14200] lo speed is unknown, defaulting to 1000
[  308.372028][T14300] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  308.470207][T14304] syzkaller1: entered promiscuous mode
[  308.476064][T14304] syzkaller1: entered allmulticast mode
[  308.942107][T14200] lo speed is unknown, defaulting to 1000
[  308.988236][T11917] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  309.330213][T14339] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  309.377264][T14339] __nla_validate_parse: 14 callbacks suppressed
[  309.377289][T14339] netlink: 14544 bytes leftover after parsing attributes in process `syz.6.2333'.
[  309.436452][T14200] lo speed is unknown, defaulting to 1000
[  309.490057][ T1212] tipc: Node number set to 3259767459
[  309.695784][T14343] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2334'.
[  309.839534][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.015504][T14356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.177144][T14200] lo speed is unknown, defaulting to 1000
[  310.393831][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'.
[  310.434731][T14372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2341'.
[  310.735200][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2346'.
[  310.878886][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.911551][T14393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.953385][T14392] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2349'.
[  311.001348][T14392] bridge0: port 2(batadv2) entered blocking state
[  311.031199][T14392] bridge0: port 2(batadv2) entered disabled state
[  311.042407][T14392] batadv2: entered allmulticast mode
[  311.066024][T14392] batadv2: entered promiscuous mode
[  311.160319][T14200] lo speed is unknown, defaulting to 1000
[  311.281126][T14405] netlink: 'syz.0.2354': attribute type 5 has an invalid length.
[  311.381268][T14405] netlink: 'syz.0.2354': attribute type 1 has an invalid length.
[  311.390051][T14405] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2354'.
[  311.506770][T11915] batman_adv: batadv2: IGMP Querier appeared
[  311.513493][T11915] batman_adv: batadv2: MLD Querier appeared
[  311.669444][T14417] : entered promiscuous mode
[  311.707483][T14417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2357'.
[  311.815477][T14428] netlink: 'syz.7.2358': attribute type 10 has an invalid length.
[  311.887874][T14428] team0: Device hsr_slave_0 failed to register rx_handler
[  311.919120][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.194385][T14200] lo speed is unknown, defaulting to 1000
[  312.555221][T14459] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20000
[  312.815252][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2374'.
[  312.958911][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.224462][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2381'.
[  313.589560][T14502] veth5: entered allmulticast mode
[  313.971686][T14522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.998928][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.012219][T14534] syzkaller0: entered promiscuous mode
[  314.037209][T14534] syzkaller0: entered allmulticast mode
[  314.171848][T14517] tipc: Resetting bearer <eth:syzkaller0>
[  314.237437][T14516] tipc: Resetting bearer <eth:syzkaller0>
[  314.322464][T14516] tipc: Disabling bearer <eth:syzkaller0>
[  314.478001][T14546] __nla_validate_parse: 6 callbacks suppressed
[  314.478020][T14546] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2398'.
[  314.524239][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'.
[  314.534027][T14560] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2403'.
[  315.038931][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.360441][T14587] bridge0: port 3(syz_tun) entered blocking state
[  315.372388][T14587] bridge0: port 3(syz_tun) entered disabled state
[  315.379808][T14587] syz_tun: entered allmulticast mode
[  315.390195][T14587] syz_tun: left allmulticast mode
[  315.396267][T14588] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2411'.
[  315.619067][T14593] netlink: 'syz.5.2413': attribute type 1 has an invalid length.
[  315.766132][T14604] netlink: 'syz.6.2416': attribute type 7 has an invalid length.
[  315.858446][T14609] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  315.963857][T14610] openvswitch: netlink: Tunnel attr 64 out of range max 16
[  316.074111][T14621] tipc: Enabling of bearer <eth:macvlan1> rejected, already enabled
[  316.089023][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.535193][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2429'.
[  316.555102][T14643] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2431'.
[  316.558516][T14647] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2430'.
[  316.658488][T14647] netlink: 'syz.5.2430': attribute type 24 has an invalid length.
[  316.801746][T14655] sctp: [Deprecated]: syz.7.2434 (pid 14655) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.801746][T14655] Use struct sctp_sack_info instead
[  316.890751][T14655] sctp: [Deprecated]: syz.7.2434 (pid 14655) Use of struct sctp_assoc_value in delayed_ack socket option.
[  316.890751][T14655] Use struct sctp_sack_info instead
[  317.052898][T14658] netlink: 'syz.5.2435': attribute type 4 has an invalid length.
[  317.102629][ T1212] lo speed is unknown, defaulting to 1000
[  317.111535][ T1212] syz0: Port: 1 Link DOWN
[  317.116365][ T1212] lo speed is unknown, defaulting to 1000
[  317.122371][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.287152][T14662] syz.6.2437 (14662) used greatest stack depth: 17896 bytes left
[  317.301128][T14674] pimreg: entered allmulticast mode
[  317.365887][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.536509][T14689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.572363][T14688] batman_adv: batadv0: Interface deactivated: team0
[  317.584877][T14688] batman_adv: batadv0: Removing interface: team0
[  317.629528][T14688] team0: Device gtp0 is up. Set it down before adding it as a team port
[  317.779699][T14696] nbd1: detected capacity change from 0 to 127
[  317.831268][ T5881] block nbd1: Receive control failed (result -104)
[  317.908235][T14705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2449'.
[  317.933404][T14708] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2449'.
[  318.158818][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.301588][T14710] infiniband syz!: set active
[  318.306431][T14710] infiniband syz!: added team_slave_0
[  318.307431][T14717] openvswitch: netlink: Flow key attr not present in new flow.
[  318.373779][T14710] RDS/IB: syz!: added
[  318.378918][T14710] smc: adding ib device syz! with port count 1
[  318.385566][T14710] smc:    ib device syz! port 1 has pnetid 
[  318.526599][T14729] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20002
[  318.637890][T14739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  318.826929][T14750] syzkaller1: entered promiscuous mode
[  318.832637][T14750] syzkaller1: entered allmulticast mode
[  319.198827][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.737340][T14788] !
: renamed from dummy0
[  319.966601][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2475'.
[  319.987178][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2475'.
[  320.083874][T14806] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2478'.
[  320.141584][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2475'.
[  320.151600][T14799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2475'.
[  320.238823][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.250234][T14811] netlink: 'syz.2.2479': attribute type 10 has an invalid length.
[  320.473853][T14817] netlink: 'syz.0.2481': attribute type 21 has an invalid length.
[  320.499011][T14817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2481'.
[  320.650724][T14827] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2484'.
[  320.680127][T14831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2485'.
[  321.037675][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2492'.
[  321.087228][T14847] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2492'.
[  321.278820][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.111702][T14887] tipc: Resetting bearer <eth:syzkaller0>
[  322.318850][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.618721][T14908] tc_dump_action: action bad kind
[  323.022203][T14915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.368868][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.399168][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.055245][T14980] __nla_validate_parse: 6 callbacks suppressed
[  325.055268][T14980] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2532'.
[  325.175532][T14989] netlink: 'syz.0.2533': attribute type 1 has an invalid length.
[  325.210264][T14989] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2533'.
[  325.351628][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2529'.
[  325.438907][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.487755][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2536'.
[  325.521417][T15006] pim6reg527: entered allmulticast mode
[  325.813974][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2542'.
[  325.823923][T15021] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2542'.
[  326.057732][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'.
[  326.098997][T15024] netlink: 'syz.0.2543': attribute type 26 has an invalid length.
[  326.106884][T15024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  326.152188][T15031] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2545'.
[  326.170203][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'.
[  326.190327][T15024] netlink: 'syz.0.2543': attribute type 26 has an invalid length.
[  326.283798][T15038] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  326.478937][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.504114][T15045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.747908][T15052] syz_tun: entered allmulticast mode
[  326.785001][T15051] syz_tun: left allmulticast mode
[  327.518887][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.573943][T15097] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  327.656648][T15099] netlink: 'syz.2.2568': attribute type 1 has an invalid length.
[  327.667012][T15099] netlink: 'syz.2.2568': attribute type 1 has an invalid length.
[  328.558899][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.888186][T15140] delete_channel: no stack
[  329.101829][T15162] bond0: (slave rose0): Error: Device can not be enslaved while up
[  329.285849][T15166] vlan2: entered allmulticast mode
[  329.308940][T15166] bridge2: entered allmulticast mode
[  329.360232][T15174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.401912][T15177] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0
[  329.595723][T15181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.604820][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.882514][T15201] netlink: 'syz.6.2595': attribute type 14 has an invalid length.
[  329.927420][T15197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.948664][T15197] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.969036][T15197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.976774][T15197] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.491523][T15223] __nla_validate_parse: 18 callbacks suppressed
[  330.491542][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'.
[  330.541773][T15229] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2606'.
[  330.551540][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'.
[  330.639374][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.865628][T15244] netlink: 'syz.5.2611': attribute type 2 has an invalid length.
[  330.904220][T15244] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2611'.
[  330.931304][T15244] nbd: must specify at least one socket
[  331.076534][T15261] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2616'.
[  331.141406][T15266] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2617'.
[  331.441081][   T31] INFO: task syz.3.739:8826 blocked for more than 143 seconds.
[  331.457677][   T31]       Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0
[  331.480216][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  331.528852][   T31] task:syz.3.739       state:D stack:26656 pid:8826  tgid:8825  ppid:5862   task_flags:0x400140 flags:0x00004004
[  331.595277][   T31] Call Trace:
[  331.598638][   T31]  <TASK>
[  331.643062][   T31]  __schedule+0x1798/0x4cc0
[  331.663159][T15288] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2625'.
[  331.678989][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  331.679101][   T31]  ? __lock_acquire+0xab9/0xd20
[  331.744032][   T31]  ? __lock_acquire+0xab9/0xd20
[  331.789191][T15290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2626'.
[  331.810574][   T31]  ? __pfx___schedule+0x10/0x10
[  331.816144][   T31]  ? schedule+0x91/0x360
[  331.839986][   T31]  schedule+0x165/0x360
[  331.844252][   T31]  schedule_preempt_disabled+0x13/0x30
[  331.859701][   T31]  __mutex_lock+0x7e6/0x1360
[  331.864418][   T31]  ? __mutex_lock+0x5b6/0x1360
[  331.877440][   T31]  ? nfsd_nl_listener_get_doit+0x10a/0x5e0
[  331.883516][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  331.888674][   T31]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  331.897238][   T31]  ? __nlmsg_put+0xef/0x1b0
[  331.902764][   T31]  ? genlmsg_put+0x137/0x2e0
[  331.907416][   T31]  nfsd_nl_listener_get_doit+0x10a/0x5e0
[  331.913552][   T31]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  331.919909][   T31]  ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0
[  331.926284][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  331.932974][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  331.944809][   T31]  genl_rcv_msg+0x60e/0x790
[  331.950927][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.955979][   T31]  ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10
[  331.964186][   T31]  ? __asan_memcpy+0x40/0x70
[  331.968924][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  331.974694][   T31]  netlink_rcv_skb+0x205/0x470
[  331.980718][   T31]  ? __lock_acquire+0xab9/0xd20
[  331.985725][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  331.991119][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  331.996692][   T31]  ? down_read+0x1ad/0x2e0
[  332.001825][   T31]  genl_rcv+0x28/0x40
[  332.005875][   T31]  netlink_unicast+0x82c/0x9e0
[  332.010820][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  332.016142][   T31]  ? netlink_sendmsg+0x642/0xb30
[  332.021808][   T31]  ? skb_put+0x11b/0x210
[  332.026103][   T31]  netlink_sendmsg+0x805/0xb30
[  332.031320][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  332.037524][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  332.042872][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  332.048205][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  332.054564][   T31]  __sock_sendmsg+0x219/0x270
[  332.059528][   T31]  ____sys_sendmsg+0x505/0x830
[  332.064354][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  332.069923][   T31]  ? import_iovec+0x74/0xa0
[  332.074462][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  332.080135][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  332.085478][   T31]  ? __fget_files+0x2a/0x420
[  332.091459][   T31]  ? __fget_files+0x3a0/0x420
[  332.096214][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  332.103898][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  332.109910][   T31]  ? rcu_is_watching+0x15/0xb0
[  332.114873][   T31]  ? do_syscall_64+0xbe/0x3b0
[  332.119828][   T31]  do_syscall_64+0xfa/0x3b0
[  332.124378][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.130614][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.136718][   T31]  ? clear_bhb_loop+0x60/0xb0
[  332.142386][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.148309][   T31] RIP: 0033:0x7f494098ebe9
[  332.153440][   T31] RSP: 002b:00007f494184a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  332.163325][   T31] RAX: ffffffffffffffda RBX: 00007f4940bb5fa0 RCX: 00007f494098ebe9
[  332.171870][   T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000007
[  332.179997][   T31] RBP: 00007f4940a11e19 R08: 0000000000000000 R09: 0000000000000000
[  332.187993][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  332.196240][   T31] R13: 00007f4940bb6038 R14: 00007f4940bb5fa0 R15: 00007fff5914f048
[  332.205146][   T31]  </TASK>
[  332.208269][   T31] 
[  332.208269][   T31] Showing all locks held in the system:
[  332.216188][   T31] 1 lock held by khungtaskd/31:
[  332.221415][   T31]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  332.232225][   T31] 3 locks held by kworker/1:2/1212:
[  332.237460][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  332.249304][   T31]  #1: ffffc9000412fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  332.260046][   T31]  #2: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  332.273539][   T31] 2 locks held by getty/5623:
[  332.278251][   T31]  #0: ffff88814d70e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  332.288436][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  332.308816][   T31] 2 locks held by syz-executor/5875:
[  332.314168][   T31] 1 lock held by udevd/6073:
[  332.327597][   T31]  #0: ffff888024e9b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  332.337524][   T31] 2 locks held by syz.1.652/8456:
[  332.348831][   T31]  #0: ffffffff8f599f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  332.357113][   T31]  #1: ffffffff8e415868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  332.377103][   T31] 2 locks held by syz.3.739/8826:
[  332.384482][   T31]  #0: ffffffff8f599f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  332.395088][   T31]  #1: ffffffff8e415868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0
[  332.406408][   T31] 2 locks held by syz.4.1442/11331:
[  332.414625][   T31]  #0: ffffffff8f599f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  332.423797][   T31]  #1: ffffffff8e415868 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  332.434284][   T31] 2 locks held by syz.6.2626/15289:
[  332.444479][   T31]  #0: ffffffff8f534908 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70
[  332.457790][   T31]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  332.477219][   T31] 1 lock held by syz.6.2626/15290:
[  332.483098][   T31]  #0: ffff8880556c14d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100
[  332.500189][   T31] 
[  332.540250][   T31] =============================================
[  332.540250][   T31] 
[  332.569964][   T31] NMI backtrace for cpu 0
[  332.569987][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  332.570010][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  332.570031][   T31] Call Trace:
[  332.570040][   T31]  <TASK>
[  332.570048][   T31]  dump_stack_lvl+0x189/0x250
[  332.570081][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.570106][   T31]  ? __pfx__printk+0x10/0x10
[  332.570148][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  332.570173][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  332.570197][   T31]  ? __pfx__printk+0x10/0x10
[  332.570229][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  332.570263][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  332.570285][   T31]  watchdog+0xf93/0xfe0
[  332.570319][   T31]  ? watchdog+0x1de/0xfe0
[  332.570353][   T31]  kthread+0x70e/0x8a0
[  332.570381][   T31]  ? __pfx_watchdog+0x10/0x10
[  332.570407][   T31]  ? __pfx_kthread+0x10/0x10
[  332.570434][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  332.570456][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.570477][   T31]  ? __pfx_kthread+0x10/0x10
[  332.570501][   T31]  ret_from_fork+0x3fc/0x770
[  332.570526][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  332.570553][   T31]  ? __switch_to_asm+0x39/0x70
[  332.570577][   T31]  ? __switch_to_asm+0x33/0x70
[  332.570600][   T31]  ? __pfx_kthread+0x10/0x10
[  332.570624][   T31]  ret_from_fork_asm+0x1a/0x30
[  332.570668][   T31]  </TASK>
[  332.570675][   T31] Sending NMI from CPU 0 to CPUs 1:
[  332.730629][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.731128][    C1] NMI backtrace for cpu 1
[  332.731145][    C1] CPU: 1 UID: 0 PID: 5982 Comm: kworker/1:5 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  332.731165][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  332.731175][    C1] Workqueue: events drain_vmap_area_work
[  332.731196][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x18/0x90
[  332.731229][    C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 14 25 08 f0 9f 92 65 8b 0d 28 40 e0 10 <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 3c 16 00 00
[  332.731243][    C1] RSP: 0018:ffffc90000a07e90 EFLAGS: 00000046
[  332.731256][    C1] RAX: ffffffff854f00b2 RBX: 0000000000000000 RCX: 0000000000000303
[  332.731267][    C1] RDX: ffff88801c371e00 RSI: 000000000000080e RDI: 0000000000000000
[  332.731278][    C1] RBP: ffffffff99de9770 R08: ffff888142bf8237 R09: 1ffff1102857f046
[  332.731289][    C1] R10: dffffc0000000000 R11: ffffffff854e7100 R12: 1ffffffff33bd2ee
[  332.731299][    C1] R13: 00000000ffffffff R14: dffffc0000000000 R15: 000000000000080e
[  332.731311][    C1] FS:  0000000000000000(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000
[  332.731324][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  332.731335][    C1] CR2: 00007f700c282f98 CR3: 000000000df36000 CR4: 00000000003526f0
[  332.731351][    C1] Call Trace:
[  332.731357][    C1]  <IRQ>
[  332.731363][    C1]  wait_for_lsr+0x142/0x2f0
[  332.731385][    C1]  serial8250_console_write+0x134c/0x1ba0
[  332.731413][    C1]  ? __lock_acquire+0xab9/0xd20
[  332.731434][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  332.731457][    C1]  ? console_flush_all+0x13a/0xc40
[  332.731475][    C1]  ? console_flush_all+0x13a/0xc40
[  332.731496][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  332.731513][    C1]  ? console_flush_all+0x13a/0xc40
[  332.731529][    C1]  ? console_flush_all+0x13a/0xc40
[  332.731547][    C1]  console_flush_all+0x728/0xc40
[  332.731565][    C1]  ? console_flush_all+0x13a/0xc40
[  332.731586][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  332.731608][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  332.731629][    C1]  console_unlock+0xc4/0x270
[  332.731646][    C1]  ? __pfx_console_unlock+0x10/0x10
[  332.731663][    C1]  ? vprintk_emit+0x444/0x7a0
[  332.731678][    C1]  ? vprintk_emit+0x444/0x7a0
[  332.731693][    C1]  vprintk_emit+0x5b7/0x7a0
[  332.731708][    C1]  ? vprintk_emit+0x444/0x7a0
[  332.731724][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  332.731738][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  332.731756][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  332.731781][    C1]  _printk+0xcf/0x120
[  332.731801][    C1]  ? __pfx____ratelimit+0x10/0x10
[  332.731820][    C1]  ? __pfx__printk+0x10/0x10
[  332.731846][    C1]  gred_dequeue+0x4a6/0x680
[  332.731866][    C1]  __qdisc_run+0x239/0x15f0
[  332.731884][    C1]  ? __dev_queue_xmit+0xd70/0x3b50
[  332.731906][    C1]  __dev_queue_xmit+0x1056/0x3b50
[  332.731925][    C1]  ? __dev_queue_xmit+0x27b/0x3b50
[  332.731939][    C1]  ? __lock_acquire+0xab9/0xd20
[  332.731964][    C1]  ? tipc_net+0x45/0x270
[  332.731987][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  332.732004][    C1]  ? tipc_net+0x45/0x270
[  332.732024][    C1]  ? tipc_net+0x45/0x270
[  332.732043][    C1]  ? tipc_net+0x45/0x270
[  332.732063][    C1]  ? tipc_net+0x205/0x270
[  332.732085][    C1]  ? tipc_crypto_xmit+0x1e2/0x23a0
[  332.732105][    C1]  ? tipc_net+0x45/0x270
[  332.732121][    C1]  ? eth_header+0x11b/0x200
[  332.732144][    C1]  ? eth_header+0x11b/0x200
[  332.732163][    C1]  ? __pfx_eth_header+0x10/0x10
[  332.732183][    C1]  tipc_l2_send_msg+0x337/0x400
[  332.732211][    C1]  tipc_bearer_xmit_skb+0x2b0/0x400
[  332.732230][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  332.732248][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  332.732271][    C1]  tipc_disc_timeout+0x580/0x6d0
[  332.732292][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  332.732316][    C1]  call_timer_fn+0x17e/0x5f0
[  332.732338][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  332.732354][    C1]  ? call_timer_fn+0xbe/0x5f0
[  332.732374][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  332.732398][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  332.732415][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.732432][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  332.732449][    C1]  __run_timer_base+0x61a/0x860
[  332.732468][    C1]  ? ktime_get+0x3e/0x1f0
[  332.732490][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  332.732508][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  332.732533][    C1]  run_timer_softirq+0xb7/0x180
[  332.732552][    C1]  handle_softirqs+0x283/0x870
[  332.732569][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  332.732587][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  332.732606][    C1]  __irq_exit_rcu+0xca/0x1f0
[  332.732620][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  332.732640][    C1]  irq_exit_rcu+0x9/0x30
[  332.732653][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  332.732670][    C1]  </IRQ>
[  332.732675][    C1]  <TASK>
[  332.732681][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  332.732698][    C1] RIP: 0010:its_return_thunk+0x0/0x10
[  332.732720][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <c3> cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 ab d2 b7 f5 cc
[  332.732733][    C1] RSP: 0018:ffffc90004a2f718 EFLAGS: 00000293
[  332.732745][    C1] RAX: ffffffff8209d078 RBX: fffff52002b96000 RCX: ffff88801c371e00
[  332.732756][    C1] RDX: 0000000000000000 RSI: 800000005e411003 RDI: 0000000000000000
[  332.732767][    C1] RBP: ffffc90004a2f890 R08: ffffffff8e241fb3 R09: 1ffffffff1c483f6
[  332.732778][    C1] R10: dffffc0000000000 R11: fffffbfff1c483f7 R12: ffff88805ff1dba0
[  332.732789][    C1] R13: ffff88805ff1dba0 R14: fffff52002b74000 R15: 800000005e411063
[  332.732805][    C1]  ? __apply_to_page_range+0xb58/0x1380
[  332.732827][    C1]  __apply_to_page_range+0xb58/0x1380
[  332.732843][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.732867][    C1]  ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10
[  332.732888][    C1]  ? __pfx___apply_to_page_range+0x10/0x10
[  332.732910][    C1]  kasan_release_vmalloc+0xa2/0xd0
[  332.732928][    C1]  purge_vmap_node+0x214/0x8f0
[  332.732949][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  332.732971][    C1]  ? __pfx_purge_vmap_node+0x10/0x10
[  332.732988][    C1]  ? flush_tlb_kernel_range+0x37c/0x470
[  332.733011][    C1]  __purge_vmap_area_lazy+0x7a4/0xb40
[  332.733028][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  332.733045][    C1]  drain_vmap_area_work+0x27/0x40
[  332.733059][    C1]  process_scheduled_works+0xade/0x17b0
[  332.733086][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  332.733108][    C1]  worker_thread+0x8a0/0xda0
[  332.733125][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  332.733146][    C1]  ? __kthread_parkme+0x7b/0x200
[  332.733166][    C1]  kthread+0x70e/0x8a0
[  332.733185][    C1]  ? __pfx_worker_thread+0x10/0x10
[  332.733206][    C1]  ? __pfx_kthread+0x10/0x10
[  332.733225][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  332.733241][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.733257][    C1]  ? __pfx_kthread+0x10/0x10
[  332.733274][    C1]  ret_from_fork+0x3fc/0x770
[  332.733291][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  332.733310][    C1]  ? __switch_to_asm+0x39/0x70
[  332.733328][    C1]  ? __switch_to_asm+0x33/0x70
[  332.733346][    C1]  ? __pfx_kthread+0x10/0x10
[  332.733363][    C1]  ret_from_fork_asm+0x1a/0x30
[  332.733390][    C1]  </TASK>
[  333.252552][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  333.252578][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) 
[  333.252602][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  333.252614][   T31] Call Trace:
[  333.252623][   T31]  <TASK>
[  333.252633][   T31]  dump_stack_lvl+0x99/0x250
[  333.252661][   T31]  ? __asan_memcpy+0x40/0x70
[  333.252683][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.252705][   T31]  ? __pfx__printk+0x10/0x10
[  333.252743][   T31]  vpanic+0x281/0x750
[  333.252767][   T31]  ? __pfx_vpanic+0x10/0x10
[  333.252786][   T31]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  333.252811][   T31]  ? preempt_schedule+0xae/0xc0
[  333.252835][   T31]  ? preempt_schedule_common+0x83/0xd0
[  333.252863][   T31]  panic+0xb9/0xc0
[  333.252884][   T31]  ? __pfx_panic+0x10/0x10
[  333.252906][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  333.252939][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  333.252962][   T31]  watchdog+0xfd2/0xfe0
[  333.252992][   T31]  ? watchdog+0x1de/0xfe0
[  333.253024][   T31]  kthread+0x70e/0x8a0
[  333.253050][   T31]  ? __pfx_watchdog+0x10/0x10
[  333.253074][   T31]  ? __pfx_kthread+0x10/0x10
[  333.253098][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  333.253118][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  333.253139][   T31]  ? __pfx_kthread+0x10/0x10
[  333.253162][   T31]  ret_from_fork+0x3fc/0x770
[  333.253184][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  333.253216][   T31]  ? __switch_to_asm+0x39/0x70
[  333.253239][   T31]  ? __switch_to_asm+0x33/0x70
[  333.253261][   T31]  ? __pfx_kthread+0x10/0x10
[  333.253284][   T31]  ret_from_fork_asm+0x1a/0x30
[  333.253324][   T31]  </TASK>
[  333.254158][   T31] Kernel Offset: disabled