last executing test programs:

3.663383328s ago: executing program 0 (id=925):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20044084)
close(0xffffffffffffffff) (async)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) (async)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="30040000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="3801028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000003afe030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040001f8ffff08000100", @ANYRES32=r0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="88010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004003f5300003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400060009ff7e850000050000fbac380000fa080907310e000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400030000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="f400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000380000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYRES32=r0], 0x430}, 0x1, 0x0, 0x0, 0x8008810}, 0x4004080) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$igmp(0x2, 0x3, 0x2) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
unshare(0x6a040000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) (async)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
shutdown(r2, 0x1) (async)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1f, @remote}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x7e, {0x2, 0x4e25, @empty}, 'ipvlan1\x00'}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000a00000000070000008500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x40}}, 0x4000090)

2.628797901s ago: executing program 4 (id=929):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
unshare(0x62040200)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01040000000000000000420000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000004fe8e0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x48810)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xa8, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x48273e1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7c}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x240c8048}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x7, 0x2)
socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x5}, 0x1c)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
socket$packet(0x11, 0x3, 0x300) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000084)
socket$inet_sctp(0x2, 0x1, 0x84)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, 0x0) (async)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f0000000380)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) (async)
ioctl$SIOCAX25ADDUID(r8, 0x89e1, &(0x7f0000000380)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000008c0)=r7, 0x4)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000a4310937eb6a2f2a0300000000000000000002000001300005802c000180141f000300fc0a000000000000000000000000000014000400fc0400000005ac50612d8bcda2173dfadc8d664aba3f60f600000000000000b8d8a572a76d81e3fd14ce2c4aaec9863aef95a945061d302da5562193ff954efc18038d7c9bbd6794a7b31a2b42ad1566009cec3448b7eee8eae82a5400c292be5921ced9ab99ac869a0d643c87a45614d83171ade4fb4db3f06ac176b30000"], 0x44}, 0x1, 0x0, 0x0, 0x10048895}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000000280)=@ethtool_cmd={0x15, 0xdd8, 0x3, 0x0, 0x80, 0x7b, 0x0, 0xfd, 0x80, 0x9, 0x0, 0x5, 0x56, 0x0, 0x7}})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}, @RTA_OIF={0x8}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x33}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)

2.555828533s ago: executing program 0 (id=932):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={<r2=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x100, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x12, 0xff, 0x0, @empty}}}}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0], 0x8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x104, 0x0, 0x0, 0x0, 0x6e, &(0x7f0000000000)='pimreg\x00', 0x2, 0xc, 0xfffe})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@remote, 0x35, r2})
r7 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
ioctl(r6, 0x8916, &(0x7f0000000000))
ioctl(r7, 0x8936, &(0x7f0000000000))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0)

2.194745966s ago: executing program 0 (id=935):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x9, 0x1, 0x10000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x2400c044)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
sendfile(r3, r5, 0x0, 0xbb57)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000002000ffdb002501f1ff02140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1513feda1d7b9a3bf7d778042fb502"], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0xfffffffc, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000140), 0x10, 0x5}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
socket$nl_generic(0x10, 0x3, 0x10)

1.792828099s ago: executing program 1 (id=937):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000080)="29000300010003", 0x7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e20, 0x4f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x6}, @in6={0xa, 0x4e21, 0x81, @local, 0x3737}, @in6={0xa, 0x4e22, 0x74, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}], 0xb0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x4e21, @empty}, {0x1, @random="8825f840d166"}, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}, 'lo\x00'})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x9e, 0x200, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @local, @empty}}}})

1.792168158s ago: executing program 2 (id=938):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x2, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r13=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', <r14=>0x0, 0x8, 0x0, 0xfffffffe, 0x1, {{0x14, 0x4, 0x1, 0x6, 0x50, 0x68, 0x0, 0x6, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0xdb, [@empty, @local]}, @cipso={0x86, 0x28, 0xb25faac1f045fc01, [{0x5, 0x4, "8b32"}, {0x5, 0xa, "47f663d42a9e67c8"}, {0x0, 0x8, "012b95d37448"}, {0x6, 0xc, "cd6bf3c56752dcd86c9b"}]}, @cipso={0x86, 0x8, 0x0, [{0x7, 0x2}]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r15=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x37, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r16 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r17=>0x0})
r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r19 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50)
r20 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r18, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r19, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r20, r17, 0x25, 0x2, @void}, 0x10)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000800)={0x5dc, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x400, 0x3, 0x6, 0x2}, {0xfffb, 0x6b, 0x3, 0x323}, {0xf000, 0x9, 0x8, 0x53a2f383}, {0x7, 0x8, 0x1, 0x3}, {0x1, 0xaf, 0x84, 0x3}, {0x0, 0xf, 0x40, 0x4}, {0x4, 0x8, 0x3c, 0x3ff}, {0x8, 0x4, 0x3, 0xb8c3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r12}, {0x1cc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x1, 0x81, 0x21}, {0x4, 0xe, 0x2, 0xffff}, {0x0, 0x4, 0x2}, {0x93, 0x81, 0x1, 0x7fff}, {0x3d40, 0x40, 0x6, 0x5c}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "a600", 0x10, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ni={0xc46ee13d8e75c188, 0x0, 0x0, 0xc2, 0x2, 0xd}}}}}}, 0x0)

1.510536406s ago: executing program 1 (id=939):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000", 0xf)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}, 0x6}], 0x1, 0x40002101, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="7acab9944db85031168f4d4f081beeb956ef75ceaff016845d3053dc9a252c38f1048699c220896831b419024d5deb6ecabc88c5b9441299a6239bd6e353772c57688c963efb2d4e745bf33f1f723dc2ff697d5f569ffcfb846aa663b096e140b3686b880afb09645b12cb8cb272c37a29663d4f477d18b6f821ee9a4ae5ccfa9d29473e9b7b0627e7eb", 0x8a}, {&(0x7f0000000200)="72c1807bf3d8d909984e9a4f27515a7e3b6f9e4950227c0cf1c1f247279d7e47a6a51d", 0x23}, {0x0}, {&(0x7f0000000040)="1cfa596bf35ea4ec804fe60a98941d086a6ef7eb6b47713305084a2f85549b2969bb6e2be3890112f4dc1eaf14", 0x2d}, {&(0x7f0000000340)="4c631c16ea0012e49498d467cfabdd2e48be63e3437ae35b39fb124cbbe3a8bd779e46b2038a7b1dd682af498d14f13d479ab00d77bdb36d927d6305e1988318f2565b1c3e5cb38091b3582efe17c4803736b7af3ff8f51e970aac2f67f7e118bfdf4d7a710080a5e0f22aa66af29e71e4b8a80b4bbfe8dec496e0a3e57ea895c9b26752e16475c992448a3b4f3f2ab58fb10da496e5b0067cd547fcd14f2668c21283c1cbb413935613d9ccfb10a4d0881cc9b43e5b5f5fbde0", 0xba}, {&(0x7f0000000640)="0c8ce66b00b40a70d3cc5d1fb1333cda45077f08cfb3ec7320b20f9d099c7378fa19a09ee54c6e3a80fe453a746260ec5bf8c0fd3545b2aec6ebc1087eae2e4be5e1a449d66552c09163dd4eb0790159cacf6c5a511879685100ca1fa2b65a6fd24be7cf3a0e7a095804b0b6beb8f0c58ae49a36d94f4689985be3ab4b46efb8711cd81b875e0f46", 0x88}, {&(0x7f0000000700)="325eb845023ef8cf1d5edfeed5ae1367d73921ae1fdea3b48037c39a51fe732e7b005bd7bfb311c77ffd838f58e40a36d552b5712c83128d3e615cea43b36307d3f3dfddc1871400816339bb20ffdc07168880acbc3fe46a34e6611801f5c749eb82e304e7ddb13f9d06247a0b5ad41de6bae0", 0x73}], 0x7, &(0x7f0000000f00)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000c800000000000000000000000700000001891b8be0000002ac1414aae000000164010102ac1414aa64010102443c2a43ac1414bbfffffffbe000000100000007ffffffff00010000ac14141553a74b1affffffff00000007ffffffff00000005ac1e01010000007f442c5a81ac1414bbfffff000e00000010000000964010101000000020000000000000000ac14141e00000004441c0c33e0000002000000100000000000000004ac14141600000400010713a1ac1414bb000000007f000001ac141427000000001400000000000000000000000200000000040000000000001c000000"], 0x118}}], 0x1, 0x2010)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000001000000010dc"}}}]}, 0x48}}, 0x0)

1.491710367s ago: executing program 4 (id=940):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001c00bff82667d5f1edd30f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002005760848c42aa676c7d2a8ea51693e75a5076ece956b1084dbfff4065254f32148426aeaba4d6ff56dbc4a8148b231ff42367de4d6ea3a25a092f5b23d6"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

1.421156106s ago: executing program 2 (id=941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000700010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a000100"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004)

1.306475454s ago: executing program 3 (id=942):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
close(0x3) (async, rerun: 32)
r1 = socket(0x2, 0x80805, 0x0) (async, rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32)
shutdown(r2, 0x0) (async, rerun: 64)
close(0x3) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r4], 0x30, 0x4081}], 0x1, 0x0) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90) (rerun: 32)

1.257027052s ago: executing program 1 (id=943):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
getsockname$unix(r1, &(0x7f00000005c0), &(0x7f0000000640)=0x6e)

1.188838946s ago: executing program 4 (id=944):
socket$netlink(0x10, 0x3, 0x10) (async)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x4, 0x200000}, 0x9)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
unshare(0x6a040000) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)=ANY=[@ANYBLOB="1800000016000ae9ffffff01000000020000000402228000"], 0x18}}, 0x0) (async)
unshare(0x44000000) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x4000001, &(0x7f0000000100)={0xa, 0x4e23, 0xfffa, @dev={0xfe, 0x80, '\x00', 0xc}, 0xffffffff}, 0x1c) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000906010400000000000000000200ffff0900020073797a31000000000900020073797a4ecafce145603f310000000005e7051177eb88b6f859183052a6088182c144e1de763d0bb9a0f60460ebaef41d7ae86004c51fc58a9fe21f1f9b58a84d1c17ebc35134cd63ee11b8cf0bdda65d0cf24eaaba87c01448432433190aa8f97ea9a40d97baef1b455469017e4a250d7c5014bce9f366c20735eaf77f82beca79eac90df53ce3d38799754f4400545a59c5e84e5e9b1c78f3582fba512abd7ca2bcfd939fae5cf39fbe022f08cf777d0ba71f42057e244a1ee0f29b9899856a192ba88273e5c897"], 0x34}}, 0x4000080) (async)
r8 = socket$nl_crypto(0x10, 0x3, 0x15) (async)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) (async)
ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000080)=0x40)
pwritev(r9, &(0x7f0000000040)=[{&(0x7f0000000540)="80fd02000001", 0x6}], 0x1, 0x0, 0x0) (async)
shutdown(r8, 0x1)

1.187870613s ago: executing program 2 (id=945):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1412, 0x200, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000050)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x40000, 0x25dfdc00, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="22b552b8d430ccbdcd1c2d065fe634ef66261769d338619f0256113d2fb8510adc627a33554d79d47717365580341cb25a31ae24719ce6e823851dbf92ebf73b56f0556b49ece354e1d8a1a6c6ae735224777802db", @ANYRES16=r4, @ANYBLOB="000826bd7000fedbdf250f00000005002e000000000008003100ffffffff0800310001000000060028000200000005002e0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x1) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc)

1.092467888s ago: executing program 3 (id=946):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bda6d9e72dc784b7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) (async)
setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) (async)
bind$802154_raw(r0, &(0x7f00000087c0)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) (async)
syz_emit_ethernet(0x135, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xff, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xa, '\x00', {0x5, 0x6, "73ddd8", 0x7, 0x73, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, [@routing={0x73, 0x4, 0x2, 0xa, 0x0, [@private0, @ipv4={'\x00', '\xff\xff', @multicast1}]}], "9060f8d727ebbe5c7eff150c29602472170f1af6919c0a6a8535fd81a56c5fb1006b7bbb4343fd908d7ab878aad825dd442b5c6ae1a04878520f23d5e7502b5a27445cd7902da82e4f4d50720ddfdb18d83ac12d57e18be6efcb118a22e8abe0e6376c55a93367eb152a89363ab31f13030e6863e79566b68db9e2116d9daf5f401baf607bed3d1fdd9865b1f35dce1e10c1553296818bdfddce6c687b416761f2d0683fac701e"}}}}}}}, 0x0) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x86, &(0x7f0000002600)}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x0, [{@multicast1, 0x400}, {@multicast1, 0x7ffffd}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2000}}}}}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
bind(r3, &(0x7f0000001200)=@ethernet={0x1, @multicast}, 0x80) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a30000000006c000000000a0104000000000000000002000002090002007379"], 0xc0}}, 0x0)

928.315493ms ago: executing program 1 (id=947):
r0 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019600)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
r4 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
poll(0x0, 0x0, 0x3)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0xfffffffffffffffc, 0x0)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x8000)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x20000080)
syz_genetlink_get_family_id$ethtool(0x0, r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e158de8ec087d5019fa509e1892f2", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

824.55891ms ago: executing program 3 (id=948):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x9, 0x8000}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x9, 0x8000}, 0x10)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x4, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x4, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x2)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) (async)
getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000f0d3f744120000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0xa, 0x9, 0x0, 0x2, 0x7fffffff}, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r10=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="d00000007e980bca4bdb513534d66d89b84fd95967bbbe41f36970a6fa5c6052a60c5092d1ab85236290dd91d7b9ae30", @ANYRES16=r9, @ANYBLOB="040027bd7000fddbdf2502000000280001800600010002000000140004002001000000000000000000000000000105000200030000005000068014000400fc02000000000000000000000000000114000400fe8000000000000000000000000000aa050002000100000014000400fc02000000000000000000000000000108000600040000002800068014000400ff0200000000000000000000000000010600010002000000060005004e2100000c00068008000700", @ANYRES32=r10, @ANYBLOB="080003000200000008000400ff080000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) (async)
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6)
clock_gettime(0x0, &(0x7f0000000200))

814.59924ms ago: executing program 2 (id=949):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000040000000000000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b502000000000000046ec56abd99000000830e0000bc0900000000000000bf9100009e000000b702000005000000850000102d507de7258d03dd0000000000b7ba4f9f690000ec940000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000580), 0x0}, 0x20)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8)
setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

592.842576ms ago: executing program 3 (id=950):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@acquire={0x128, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x4e21}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0xaf, 0x2}, {}, 0x0, 0x80ff}}}, 0x128}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'macvlan1\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r3, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r5, 0x6, 0x3, 0x0, &(0x7f0000000100))
r6 = socket(0x23, 0x80805, 0x0)
listen(r6, 0x0)
accept4$unix(r6, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'tunl0\x00', <r8=>0x0})
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000008000000000000157939d61d496d545fd8cf8c316de0dd6301f8ccc79a808d009f8836583ead02d6b9c0c08456f6cc0b8dc1bffb52c1e4112e31425001e3588463924e08ea221f0542d51b81c7c9c7071d3ed316dc8db4983a51ff268ae40bdd9277478d08d5b2849f16bc9e861e1389cf51991e2a4661d5e67e2a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000600)={0x0, {0x30, 0x2, 0xe3a3, 0x8, 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r4, r8, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40)
close(0x3)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0xa0, r12, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x25}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x0, 0x7, 0x0, {0x101, 0x5, 0x0, 0x65, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x3, 0x5}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x0, 0x1, 0x0, {0x544, 0x1b3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0xe, 0x7}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x2, 0x6, 0x0, {0x0, 0xfb1, 0x0, 0x380, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x3, 0x2}}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

566.448734ms ago: executing program 1 (id=951):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x2, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r13=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'gre0\x00', <r14=>0x0, 0x8, 0x0, 0xfffffffe, 0x1, {{0x14, 0x4, 0x1, 0x6, 0x50, 0x68, 0x0, 0x6, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@rr={0x7, 0xb, 0xdb, [@empty, @local]}, @cipso={0x86, 0x28, 0xb25faac1f045fc01, [{0x5, 0x4, "8b32"}, {0x5, 0xa, "47f663d42a9e67c8"}, {0x0, 0x8, "012b95d37448"}, {0x6, 0xc, "cd6bf3c56752dcd86c9b"}]}, @cipso={0x86, 0x8, 0x0, [{0x7, 0x2}]}]}}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r15=>0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x37, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
r16 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r17=>0x0})
r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r19 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1}, 0x50)
r20 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r18, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r19, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r20, r17, 0x25, 0x2, @void}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', <r21=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e00)={&(0x7f0000000800)={0x5dc, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x400, 0x3, 0x6, 0x2}, {0xfffb, 0x6b, 0x3, 0x323}, {0xf000, 0x9, 0x8, 0x53a2f383}, {0x7, 0x8, 0x1, 0x3}, {0x1, 0xaf, 0x84, 0x3}, {0x0, 0xf, 0x40, 0x4}, {0x4, 0x8, 0x3c, 0x3ff}, {0x8, 0x4, 0x3, 0xb8c3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r12}, {0x1cc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x2, 0x1, 0x81, 0x21}, {0x4, 0xe, 0x2, 0xffff}, {0x0, 0x4, 0x2}, {0x93, 0x81, 0x1, 0x7fff}, {0x3d40, 0x40, 0x6, 0x5c}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r21}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "a600", 0x10, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ni={0xc46ee13d8e75c188, 0x0, 0x0, 0xc2, 0x2, 0xd}}}}}}, 0x0)

480.903188ms ago: executing program 2 (id=952):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000010c0)={r0, 0xffffffffffffffff, 0x8, 0x0, @val=@perf_event={0x7ff}}, 0x18)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000002004e23e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c74ec322000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e24ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000a84b2f70332ca149000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdd6"], 0x190)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500), 0x0)

460.09706ms ago: executing program 0 (id=953):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000", 0xf)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}, 0x6}], 0x1, 0x40002101, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)="7acab9944db85031168f4d4f081beeb956ef75ceaff016845d3053dc9a252c38f1048699c220896831b419024d5deb6ecabc88c5b9441299a6239bd6e353772c57688c963efb2d4e745bf33f1f723dc2ff697d5f569ffcfb846aa663b096e140b3686b880afb09645b12cb8cb272c37a29663d4f477d18b6f821ee9a4ae5ccfa9d29473e9b7b0627e7eb", 0x8a}, {&(0x7f0000000200)="72c1807bf3d8d909984e9a4f27515a7e3b6f9e4950227c0cf1c1f247279d7e47a6a51d", 0x23}, {0x0}, {&(0x7f0000000040)="1cfa596bf35ea4ec804fe60a98941d086a6ef7eb6b47713305084a2f85549b2969bb6e2be3890112f4dc1eaf14", 0x2d}, {&(0x7f0000000340)="4c631c16ea0012e49498d467cfabdd2e48be63e3437ae35b39fb124cbbe3a8bd779e46b2038a7b1dd682af498d14f13d479ab00d77bdb36d927d6305e1988318f2565b1c3e5cb38091b3582efe17c4803736b7af3ff8f51e970aac2f67f7e118bfdf4d7a710080a5e0f22aa66af29e71e4b8a80b4bbfe8dec496e0a3e57ea895c9b26752e16475c992448a3b4f3f2ab58fb10da496e5b0067cd547fcd14f2668c21283c1cbb413935613d9ccfb10a4d0881cc9b43e5b5f5fbde0", 0xba}, {&(0x7f0000000640)="0c8ce66b00b40a70d3cc5d1fb1333cda45077f08cfb3ec7320b20f9d099c7378fa19a09ee54c6e3a80fe453a746260ec5bf8c0fd3545b2aec6ebc1087eae2e4be5e1a449d66552c09163dd4eb0790159cacf6c5a511879685100ca1fa2b65a6fd24be7cf3a0e7a095804b0b6beb8f0c58ae49a36d94f4689985be3ab4b46efb8711cd81b875e0f46", 0x88}, {&(0x7f0000000700)="325eb845023ef8cf1d5edfeed5ae1367d73921ae1fdea3b48037c39a51fe732e7b005bd7bfb311c77ffd838f58e40a36d552b5712c83128d3e615cea43b36307d3f3dfddc1871400816339bb20ffdc07168880acbc3fe46a34e6611801f5c749eb82e304e7ddb13f9d06247a0b5ad41de6bae0", 0x73}], 0x7, &(0x7f0000000f00)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000c800000000000000000000000700000001891b8be0000002ac1414aae000000164010102ac1414aa64010102443c2a43ac1414bbfffffffbe000000100000007ffffffff00010000ac14141553a74b1affffffff00000007ffffffff00000005ac1e01010000007f442c5a81ac1414bbfffff000e00000010000000964010101000000020000000000000000ac14141e00000004441c0c33e0000002000000100000000000000004ac14141600000400010713a1ac1414bb000000007f000001ac141427000000001400000000000000000000000200000000040000000000001c000000"], 0x118}}], 0x1, 0x2010)
sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000001000000010dc"}}}]}, 0x48}}, 0x0)

416.711217ms ago: executing program 2 (id=954):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000190001090000000020000000021800080002fd0100000000080012"], 0x44}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000190001090000000020000000021800080002fd0100000000080012"], 0x44}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x30b) (async)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x30b)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) (async)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80)
socket$packet(0x11, 0x3, 0x300) (async)
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r12, 0x400448e7, 0x0)

381.122025ms ago: executing program 3 (id=955):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000002000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a000100"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004)

343.307859ms ago: executing program 1 (id=956):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4)
socket$inet(0x2, 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x207)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a000080000000", @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000000)=0x8, 0x4)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r2, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

264.76524ms ago: executing program 4 (id=957):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async)
accept4(r0, 0x0, 0x0, 0x800) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
r2 = socket(0x1e, 0x4, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) (async)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100, {0x3, 0x1, 0x2}}]}}, 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000046}, 0x40000) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000c, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x10) (async)
close(0x3)
close(0x4) (async)
accept4$phonet_pipe(r2, &(0x7f0000000180), &(0x7f0000000200)=0x10, 0x800)

176.927466ms ago: executing program 0 (id=958):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000010f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a1a3, 0x4}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '(\x00'}]}]}, 0x2c}}, 0x800)

174.597893ms ago: executing program 4 (id=959):
socket(0x23, 0x2, 0x6) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x24048810}, 0x24040808) (async)
close(0x3) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r2, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
listen(0xffffffffffffffff, 0x6) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r7, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r9}, 0x99)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r7, &(0x7f0000000600), &(0x7f0000000340)=@udp=r8, 0x2}, 0x20) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000010", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

174.353083ms ago: executing program 3 (id=960):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10)
listen(r5, 0x4)
sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0x25, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
ppoll(&(0x7f0000000440)=[{r1, 0x8004}], 0x1, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0), 0x8)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r9, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', <r14=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

46.017192ms ago: executing program 4 (id=961):
r0 = socket$kcm(0x11, 0x2, 0x300)
recvmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019600)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
r4 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)
poll(0x0, 0x0, 0x3)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0xfffffffffffffffc, 0x0)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x8000)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x38}}, 0x20000080)
syz_genetlink_get_family_id$ethtool(0x0, r2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

0s ago: executing program 0 (id=962):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000040000000000000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b502000000000000046ec56abd99000000830e0000bc0900000000000000bf9100009e000000b702000005000000850000102d507de7258d03dd0000000000b7ba4f9f690000ec940000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f00000007c0), &(0x7f0000000640)=r1}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r2, &(0x7f00000004c0)}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r2, &(0x7f0000000580), 0x0}, 0x20)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0)
setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8)
setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts.
[   79.510472][ T5816] cgroup: Unknown subsys name 'net'
[   79.623210][ T5816] cgroup: Unknown subsys name 'cpuset'
[   79.633218][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.375583][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.952740][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.961941][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.970172][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.973986][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.978515][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.986477][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.992307][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.000858][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.008313][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.013721][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.029416][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.038419][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.047081][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.054392][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.063318][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.090267][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.097842][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.109082][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.117441][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.119139][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.172165][ T5149] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.189117][ T5149] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.200050][ T5149] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.213193][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.228466][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.942104][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   85.017276][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   85.090800][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   85.105317][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   85.224728][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   85.366609][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.374430][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.383207][ T5826] bridge_slave_0: entered allmulticast mode
[   85.391043][ T5826] bridge_slave_0: entered promiscuous mode
[   85.417959][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.425411][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.432735][ T5827] bridge_slave_0: entered allmulticast mode
[   85.440061][ T5827] bridge_slave_0: entered promiscuous mode
[   85.469056][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.476299][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.484257][ T5826] bridge_slave_1: entered allmulticast mode
[   85.491842][ T5826] bridge_slave_1: entered promiscuous mode
[   85.530892][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.538237][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.545584][ T5827] bridge_slave_1: entered allmulticast mode
[   85.553002][ T5827] bridge_slave_1: entered promiscuous mode
[   85.601013][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.636239][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.643876][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.651714][ T5835] bridge_slave_0: entered allmulticast mode
[   85.659290][ T5835] bridge_slave_0: entered promiscuous mode
[   85.676187][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.698345][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.706019][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.713322][ T5828] bridge_slave_0: entered allmulticast mode
[   85.720584][ T5828] bridge_slave_0: entered promiscuous mode
[   85.743489][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.751169][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.758422][ T5835] bridge_slave_1: entered allmulticast mode
[   85.766289][ T5835] bridge_slave_1: entered promiscuous mode
[   85.798229][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.805491][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.813674][ T5828] bridge_slave_1: entered allmulticast mode
[   85.821493][ T5828] bridge_slave_1: entered promiscuous mode
[   85.832505][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.869860][ T5826] team0: Port device team_slave_0 added
[   85.892735][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.915714][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.923264][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.930918][ T5838] bridge_slave_0: entered allmulticast mode
[   85.938396][ T5838] bridge_slave_0: entered promiscuous mode
[   85.948589][ T5826] team0: Port device team_slave_1 added
[   85.998337][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.008369][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.015789][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.023361][ T5838] bridge_slave_1: entered allmulticast mode
[   86.031196][ T5838] bridge_slave_1: entered promiscuous mode
[   86.055084][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.081321][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.105256][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.112799][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.139744][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.154210][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.181415][ T5827] team0: Port device team_slave_0 added
[   86.209546][ T5149] Bluetooth: hci0: command tx timeout
[   86.215318][ T5149] Bluetooth: hci1: command tx timeout
[   86.220536][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.221327][ T5841] Bluetooth: hci2: command tx timeout
[   86.229926][ T5834] Bluetooth: hci3: command tx timeout
[   86.237192][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.248895][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.276030][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.289362][ T5834] Bluetooth: hci4: command tx timeout
[   86.307141][ T5827] team0: Port device team_slave_1 added
[   86.346441][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.364841][ T5828] team0: Port device team_slave_0 added
[   86.385283][ T5835] team0: Port device team_slave_0 added
[   86.419150][ T5828] team0: Port device team_slave_1 added
[   86.425815][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.432856][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.460446][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.473929][ T5835] team0: Port device team_slave_1 added
[   86.494294][ T5838] team0: Port device team_slave_0 added
[   86.512939][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.520168][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.546893][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.600028][ T5838] team0: Port device team_slave_1 added
[   86.606368][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.613854][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.640486][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.676249][ T5826] hsr_slave_0: entered promiscuous mode
[   86.683048][ T5826] hsr_slave_1: entered promiscuous mode
[   86.703446][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.710800][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.737267][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.749147][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.756214][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.782602][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.833606][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.840711][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.867413][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.905265][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.912457][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.938812][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.973849][ T5827] hsr_slave_0: entered promiscuous mode
[   86.980305][ T5827] hsr_slave_1: entered promiscuous mode
[   86.986592][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   86.992973][ T5827] Cannot create hsr debugfs directory
[   87.007866][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.015024][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   87.041509][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.226560][ T5835] hsr_slave_0: entered promiscuous mode
[   87.233550][ T5835] hsr_slave_1: entered promiscuous mode
[   87.240342][ T5835] debugfs: 'hsr0' already exists in 'hsr'
[   87.246104][ T5835] Cannot create hsr debugfs directory
[   87.363216][ T5838] hsr_slave_0: entered promiscuous mode
[   87.371381][ T5838] hsr_slave_1: entered promiscuous mode
[   87.377997][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   87.383874][ T5838] Cannot create hsr debugfs directory
[   87.502637][ T5828] hsr_slave_0: entered promiscuous mode
[   87.509730][ T5828] hsr_slave_1: entered promiscuous mode
[   87.516331][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   87.525974][ T5828] Cannot create hsr debugfs directory
[   88.005759][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.019025][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.031369][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.056789][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.138167][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.156335][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.187325][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.200421][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   88.270421][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.286849][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.295903][ T5834] Bluetooth: hci2: command tx timeout
[   88.296656][ T5149] Bluetooth: hci0: command tx timeout
[   88.302432][ T5841] Bluetooth: hci3: command tx timeout
[   88.307682][ T5149] Bluetooth: hci1: command tx timeout
[   88.329989][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.355636][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   88.379264][ T5149] Bluetooth: hci4: command tx timeout
[   88.445543][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.490100][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.503422][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.516206][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.573777][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.653931][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.666771][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.683602][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   88.694522][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.724386][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.740543][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.747818][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.781753][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.789425][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.884582][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.905968][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.963124][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   88.996707][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.022897][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.030157][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.046159][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   89.086718][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.094066][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.121509][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.128866][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.166924][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   89.188785][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.195996][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.237167][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.244396][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.285890][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.293273][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.372233][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.399971][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.472206][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   89.543562][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.550826][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.614924][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.622220][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.074204][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.151193][ T5826] veth0_vlan: entered promiscuous mode
[   90.226330][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.236547][ T5826] veth1_vlan: entered promiscuous mode
[   90.346774][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.369384][ T5149] Bluetooth: hci2: command tx timeout
[   90.369419][ T5841] Bluetooth: hci0: command tx timeout
[   90.374929][ T5149] Bluetooth: hci1: command tx timeout
[   90.380635][ T5834] Bluetooth: hci3: command tx timeout
[   90.408575][ T5826] veth0_macvtap: entered promiscuous mode
[   90.441893][ T5835] veth0_vlan: entered promiscuous mode
[   90.449992][ T5834] Bluetooth: hci4: command tx timeout
[   90.452090][ T5826] veth1_macvtap: entered promiscuous mode
[   90.479608][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.496879][ T5838] veth0_vlan: entered promiscuous mode
[   90.541653][ T5835] veth1_vlan: entered promiscuous mode
[   90.572176][ T5838] veth1_vlan: entered promiscuous mode
[   90.601201][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.620589][ T5835] veth0_macvtap: entered promiscuous mode
[   90.651078][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.670308][ T5835] veth1_macvtap: entered promiscuous mode
[   90.692526][ T1113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.707166][ T1113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.727686][ T1113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.737565][ T1113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.748321][ T5827] veth0_vlan: entered promiscuous mode
[   90.797962][ T5827] veth1_vlan: entered promiscuous mode
[   90.816586][ T5838] veth0_macvtap: entered promiscuous mode
[   90.850601][ T5828] veth0_vlan: entered promiscuous mode
[   90.861725][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.875116][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.900272][ T5838] veth1_macvtap: entered promiscuous mode
[   90.953261][  T993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.962456][  T993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.974956][ T5828] veth1_vlan: entered promiscuous mode
[   91.003151][  T993] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.012349][  T993] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.040326][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.048336][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.070930][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.119962][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.134707][ T5827] veth0_macvtap: entered promiscuous mode
[   91.154688][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.160353][ T3026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.172423][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.176015][ T3026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.190136][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.200683][ T5827] veth1_macvtap: entered promiscuous mode
[   91.221800][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.314892][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.316596][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.340913][ T5828] veth0_macvtap: entered promiscuous mode
[   91.353816][ T5828] veth1_macvtap: entered promiscuous mode
[   91.385233][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.433756][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.456567][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.466048][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.478054][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.512437][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.521708][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.562453][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.575387][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.585167][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.623073][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.655375][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.663682][ T3026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.673695][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.679348][ T3026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.690108][ T3026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.703967][ T3026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.773459][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.798224][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.815280][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.848648][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.067889][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.112863][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.192528][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.201511][ T5964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.225595][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.226339][   T43] cfg80211: failed to load regulatory.db
[   92.398753][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.438864][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.451260][ T5841] Bluetooth: hci0: command tx timeout
[   92.457152][ T5841] Bluetooth: hci2: command tx timeout
[   92.458846][ T5149] Bluetooth: hci1: command tx timeout
[   92.464012][ T5834] Bluetooth: hci3: command tx timeout
[   92.491173][ T5969] netlink: 71 bytes leftover after parsing attributes in process `syz.2.8'.
[   92.529019][ T5834] Bluetooth: hci4: command tx timeout
[   92.590989][ T5976] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9'.
[   92.638023][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9'.
[   92.855096][ T5987] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET)
[   93.052390][ T5990] 8021q: adding VLAN 0 to HW filter on device bond1
[   93.061499][ T5992] bond1: option mode: unable to set because the bond device is up
[   93.162834][ T6001] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2'.
[   93.195812][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'.
[   93.854082][ T6024] netlink: 'syz.0.20': attribute type 29 has an invalid length.
[   93.917882][ T6024] netlink: 'syz.0.20': attribute type 29 has an invalid length.
[   93.950103][ T6025] netlink: 'syz.0.20': attribute type 29 has an invalid length.
[   93.978281][ T6025] netlink: 500 bytes leftover after parsing attributes in process `syz.0.20'.
[   94.013513][ T6024] netlink: 500 bytes leftover after parsing attributes in process `syz.0.20'.
[   94.026002][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.21'.
[   94.307399][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.332235][ T6042] netlink: 88 bytes leftover after parsing attributes in process `syz.0.27'.
[   94.342860][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'.
[   94.695310][ T6057] tipc: Failed to remove unknown binding: 66,1,1/0:3142818561/3142818563
[   94.707046][ T6061] netlink: 'syz.1.30': attribute type 1 has an invalid length.
[   95.074611][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.083448][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.097234][ T5834] Bluetooth: hci4: command tx timeout
[   95.207107][ T6069] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   95.225012][ T6069] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   95.239958][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.258475][ T6069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.444360][ T1344] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.465724][ T1344] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.494398][ T1344] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.570985][ T1344] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.994642][ T6098] chnl_net:caif_netlink_parms(): no params data found
[   96.781563][ T6116] Zero length message leads to an empty skb
[   98.009228][ T6151] netlink: 'syz.3.53': attribute type 10 has an invalid length.
[   98.045193][ T6151] 8021q: adding VLAN 0 to HW filter on device team0
[   98.062481][ T6151] bond0: (slave team0): Enslaving as an active interface with an up link
[   99.065137][ T6177] __nla_validate_parse: 5 callbacks suppressed
[   99.065164][ T6177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.60'.
[   99.455942][ T6186] Bluetooth: MGMT ver 1.23
[   99.513920][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.65'.
[   99.538597][ T6188] x_tables: ip_tables: osf match: only valid for protocol 6
[   99.735016][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   99.754279][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'.
[  100.102249][ T6206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.70'.
[  100.665471][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'.
[  101.309985][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.385347][ T6240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.577402][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.80'.
[  102.039743][ T6248] netlink: 84 bytes leftover after parsing attributes in process `syz.2.81'.
[  102.591308][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'.
[  102.876103][ T6261] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  102.958526][ T6261] netlink: 'syz.2.84': attribute type 10 has an invalid length.
[  103.047839][ T6261] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  103.626572][ T5199] udevd[5199]: worker [5881] terminated by signal 33 (Unknown signal 33)
[  103.680260][ T5199] udevd[5199]: worker [5881] failed while handling '/devices/virtual/block/loop2'
[  103.701095][ T5199] udevd[5199]: worker [5889] terminated by signal 33 (Unknown signal 33)
[  103.711284][ T5199] udevd[5199]: worker [5889] failed while handling '/devices/virtual/block/loop1'
[  103.915148][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'.
[  104.552849][ T6323] vlan2: entered allmulticast mode
[  104.558332][ T6323] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  104.661813][ T6324] tipc: Started in network mode
[  104.667094][ T6324] tipc: Node identity 86e8088617ac, cluster identity 4711
[  104.679697][ T6324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.691721][ T6329] syzkaller0: entered promiscuous mode
[  104.697653][ T6329] syzkaller0: entered allmulticast mode
[  104.733617][ T6323] tipc: Resetting bearer <eth:syzkaller0>
[  104.746020][ T6322] tipc: Resetting bearer <eth:syzkaller0>
[  104.797644][ T6322] tipc: Disabling bearer <eth:syzkaller0>
[  105.524997][ T6351] netlink: 96 bytes leftover after parsing attributes in process `syz.3.108'.
[  106.126195][ T6373] syzkaller0: entered promiscuous mode
[  106.135385][ T6373] syzkaller0: entered allmulticast mode
[  106.151309][ T6373] 0: reclassify loop, rule prio 0, protocol 800
[  106.168964][ T6373] netlink: 92 bytes leftover after parsing attributes in process `syz.4.115'.
[  106.182537][ T6377] netlink: 'syz.3.112': attribute type 83 has an invalid length.
[  106.214916][ T6378] netlink: 'syz.1.114': attribute type 2 has an invalid length.
[  106.266916][ T6378] : entered promiscuous mode
[  106.302856][ T6375] netlink: 'syz.2.116': attribute type 2 has an invalid length.
[  106.321637][ T6378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'.
[  107.729418][ T6420] netlink: 'syz.4.121': attribute type 12 has an invalid length.
[  107.752565][ T6422] sctp: [Deprecated]: syz.3.124 (pid 6422) Use of int in maxseg socket option.
[  107.752565][ T6422] Use struct sctp_assoc_value instead
[  107.791534][ T6420] netlink: 'syz.4.121': attribute type 4 has an invalid length.
[  108.256847][ T6437] netlink: 44 bytes leftover after parsing attributes in process `syz.2.130'.
[  108.274221][ T6437] netlink: 88 bytes leftover after parsing attributes in process `syz.2.130'.
[  108.286718][ T6440] batadv_slave_0: entered promiscuous mode
[  108.314404][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'.
[  108.366621][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.131'.
[  108.591879][ T6439] batadv_slave_0: left promiscuous mode
[  108.782995][ T6465] ipvlan0: entered promiscuous mode
[  108.798512][ T6465] netlink: 56 bytes leftover after parsing attributes in process `syz.3.139'.
[  108.878266][ T6464] ipvlan0: left promiscuous mode
[  109.148537][ T6491] syzkaller0: entered promiscuous mode
[  109.162238][ T6491] syzkaller0: entered allmulticast mode
[  109.274442][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.144'.
[  109.338009][ T6496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.144'.
[  109.794482][ T6512] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  109.805207][ T6512] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  109.818822][ T6512] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  109.882165][ T6518] sctp: [Deprecated]: syz.2.153 (pid 6518) Use of int in max_burst socket option deprecated.
[  109.882165][ T6518] Use struct sctp_assoc_value instead
[  109.952287][ T6524] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[  109.952383][ T6525] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  110.007002][ T6524] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.046207][ T6528] 8021q: adding VLAN 0 to HW filter on device bond2
[  110.053758][ T6528] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  110.065291][ T6528] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  110.181961][ T6524] veth3: entered promiscuous mode
[  110.192961][ T6524] bond2: (slave veth3): Enslaving as an active interface with a down link
[  111.109244][ T6549] __nla_validate_parse: 3 callbacks suppressed
[  111.109265][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'.
[  111.321608][ T6559] netlink: 'syz.3.163': attribute type 2 has an invalid length.
[  111.355963][ T6559] : entered promiscuous mode
[  133.172861][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  133.179604][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  137.541217][ T6590] wg1: entered promiscuous mode
[  137.546172][ T6590] wg1: entered allmulticast mode
[  137.552790][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'.
[  137.569318][ T6584] netlink: 312 bytes leftover after parsing attributes in process `syz.2.167'.
[  137.649103][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'.
[  137.895618][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'.
[  137.928772][ T6595] batadv0: entered promiscuous mode
[  137.935147][ T6595] macvtap1: entered promiscuous mode
[  137.947203][ T6595] macvtap1: entered allmulticast mode
[  137.957156][ T6595] batadv0: entered allmulticast mode
[  137.966932][ T6595] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  137.980485][ T6598] batadv0: left allmulticast mode
[  137.990604][ T6598] batadv0: left promiscuous mode
[  138.105772][ T5896] IPVS: starting estimator thread 0...
[  138.219064][ T6602] IPVS: using max 32 ests per chain, 76800 per kthread
[  138.359174][ T6597] macvtap1: entered promiscuous mode
[  138.364621][ T6597] syz_tun: entered promiscuous mode
[  138.462448][ T6597] syz_tun: left promiscuous mode
[  138.777361][ T6597] syz.2.171 (6597) used greatest stack depth: 17832 bytes left
[  138.857467][ T6621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.177'.
[  139.035705][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.180'.
[  139.182981][ T6644] netlink: 'syz.3.182': attribute type 11 has an invalid length.
[  139.208761][ T6644] netlink: 'syz.3.182': attribute type 11 has an invalid length.
[  139.223121][ T6644] netlink: 224 bytes leftover after parsing attributes in process `syz.3.182'.
[  139.649937][ T6651] bond1: entered promiscuous mode
[  139.655710][ T6651] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.951970][ T6664] netlink: 144 bytes leftover after parsing attributes in process `syz.1.191'.
[  140.224596][ T6676] Bluetooth: MGMT ver 1.23
[  140.327511][ T6686] netlink: 'syz.1.195': attribute type 10 has an invalid length.
[  140.424310][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.434559][ T6692] x_tables: duplicate underflow at hook 2
[  140.454157][ T6686] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  143.039091][ T6743] syz_tun: entered allmulticast mode
[  143.129469][ T6743] syz_tun: left allmulticast mode
[  143.344528][ T6749] netlink: 56 bytes leftover after parsing attributes in process `syz.2.206'.
[  143.430985][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'.
[  144.734540][ T6786] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.907493][ T6794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.216'.
[  145.416749][ T6807] netlink: 'syz.1.218': attribute type 2 has an invalid length.
[  145.571343][ T6807] netlink: 48 bytes leftover after parsing attributes in process `syz.1.218'.
[  145.578335][ T6814] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.220'.
[  145.964189][ T6821] xt_hashlimit: max too large, truncated to 1048576
[  146.067680][ T6823] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  146.097928][ T6823] bond1 (unregistering): Released all slaves
[  146.289180][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  146.309666][ T6826] 8021q: adding VLAN 0 to HW filter on device bond1
[  146.329286][ T6826] bond0: (slave bond1): Enslaving as an active interface with an up link
[  147.138608][ T6866] netlink: 'syz.2.232': attribute type 1 has an invalid length.
[  147.163338][ T6866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.232'.
[  147.203418][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'.
[  147.908021][ T6891] netlink: 240 bytes leftover after parsing attributes in process `syz.1.238'.
[  147.918721][ T6891] netlink: 48 bytes leftover after parsing attributes in process `syz.1.238'.
[  148.340586][ T6910] netlink: 'syz.2.243': attribute type 8 has an invalid length.
[  148.457140][ T6907] warning: `syz.0.242' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  148.825158][ T6923] bridge0: port 3(syz_tun) entered blocking state
[  148.892646][ T6923] bridge0: port 3(syz_tun) entered disabled state
[  148.909386][ T6923] syz_tun: entered allmulticast mode
[  148.917241][ T6923] syz_tun: entered promiscuous mode
[  148.985394][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.248'.
[  148.985819][ T6923] bridge0: port 3(syz_tun) entered blocking state
[  149.001856][ T6923] bridge0: port 3(syz_tun) entered forwarding state
[  149.088941][ T5834] Bluetooth: hci1: command tx timeout
[  149.237320][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.249'.
[  149.554471][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[  149.576799][ T6943] netlink: 'syz.1.251': attribute type 5 has an invalid length.
[  149.593030][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.252'.
[  149.599058][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'.
[  149.662662][ T6943] bond0: entered promiscuous mode
[  149.667769][ T6943] bond_slave_0: entered promiscuous mode
[  149.679074][ T6943] bond_slave_1: entered promiscuous mode
[  149.685282][ T6943] batadv0: entered promiscuous mode
[  149.693771][ T6943] bond0: left promiscuous mode
[  149.698995][ T6943] bond_slave_0: left promiscuous mode
[  149.705609][ T6943] bond_slave_1: left promiscuous mode
[  149.712178][ T6943] batadv0: left promiscuous mode
[  150.676755][ T6976] netlink: 'syz.2.259': attribute type 1 has an invalid length.
[  150.717114][ T6975] netlink: 'syz.4.260': attribute type 3 has an invalid length.
[  150.719632][ T6976] netlink: 244 bytes leftover after parsing attributes in process `syz.2.259'.
[  150.741103][ T6977] Bluetooth: MGMT ver 1.23
[  151.011623][ T6985] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  151.042503][ T6985] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  151.127597][ T6994] netlink: 'syz.2.259': attribute type 1 has an invalid length.
[  151.680101][ T7019] netlink: 'syz.3.271': attribute type 1 has an invalid length.
[  151.941388][ T7024] bond1: (slave gretap1): making interface the new active one
[  151.963939][ T7024] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  152.643175][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'.
[  152.826998][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.287'.
[  152.861182][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.287'.
[  152.989138][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'.
[  153.448230][ T7085] netlink: 'syz.4.292': attribute type 11 has an invalid length.
[  154.084400][ T7113] __nla_validate_parse: 3 callbacks suppressed
[  154.084430][ T7113] netlink: 32 bytes leftover after parsing attributes in process `syz.0.297'.
[  154.120004][ T7113] openvswitch: netlink: Flow actions attr not present in new flow.
[  154.257528][ T7113] TCP: TCP_TX_DELAY enabled
[  154.752839][ T7140] netlink: 'syz.1.304': attribute type 6 has an invalid length.
[  154.765686][ T7119] team0 (unregistering): Port device team_slave_0 removed
[  154.777249][ T7119] team0 (unregistering): Port device team_slave_1 removed
[  154.819327][ T7144] openvswitch: netlink: Key type 31 is not supported
[  156.369179][ T5841] Bluetooth: hci4: command 0x0405 tx timeout
[  180.964012][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'.
[  180.981719][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'.
[  181.085578][ T7169] batadv0: entered promiscuous mode
[  181.118955][ T7169] macvtap1: entered promiscuous mode
[  181.159170][ T7169] macvtap1: entered allmulticast mode
[  181.182386][ T7169] batadv0: entered allmulticast mode
[  181.222645][ T7169] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  181.233772][ T7184] netlink: 408 bytes leftover after parsing attributes in process `syz.0.311'.
[  181.282176][ T7178] batadv0: left allmulticast mode
[  181.292398][ T7178] batadv0: left promiscuous mode
[  181.354720][ T7176] veth0_macvtap: left promiscuous mode
[  181.628588][ T7179] bond2 (unregistering): Released all slaves
[  181.807278][ T7196] netlink: 'syz.2.312': attribute type 12 has an invalid length.
[  182.008035][ T7200] netlink: 'syz.2.312': attribute type 4 has an invalid length.
[  182.410676][ T7210] Bluetooth: MGMT ver 1.23
[  182.453354][ T7209] netlink: 'syz.3.315': attribute type 13 has an invalid length.
[  182.486489][ T7209] netlink: 'syz.3.315': attribute type 17 has an invalid length.
[  183.561336][ T7250] netlink: 'syz.4.324': attribute type 11 has an invalid length.
[  183.807462][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[  183.812862][ T7259] syzkaller0: entered promiscuous mode
[  183.841091][ T7259] syzkaller0: entered allmulticast mode
[  184.155095][ T7291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.334'.
[  184.213927][ T7294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.334'.
[  184.850958][ T7317] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  184.904829][ T7326] netlink: 60 bytes leftover after parsing attributes in process `syz.4.343'.
[  184.905445][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'.
[  185.052453][ T7317] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.069082][ T7317] batadv_slave_0: entered promiscuous mode
[  185.117805][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.342'.
[  185.415052][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'.
[  185.450711][ T7348] macvtap1: entered promiscuous mode
[  185.456073][ T7348] batadv0: entered promiscuous mode
[  185.470323][ T7348] macvtap1: entered allmulticast mode
[  185.491414][ T7348] batadv0: entered allmulticast mode
[  185.510158][ T7348] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  185.593647][ T7344] batadv0: entered promiscuous mode
[  185.610852][ T7344] macvtap2: entered promiscuous mode
[  185.661752][ T7344] macvtap2: entered allmulticast mode
[  185.667539][ T7344] batadv0: entered allmulticast mode
[  185.676198][ T7344] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  185.830286][ T7352] batadv0: left allmulticast mode
[  185.860544][ T7352] batadv0: left promiscuous mode
[  185.922675][ T7353] batadv0: left allmulticast mode
[  185.939941][ T7353] batadv0: left promiscuous mode
[  186.033976][ T7357] batadv0: entered promiscuous mode
[  186.062661][ T7357] macvtap1: entered promiscuous mode
[  186.085610][ T7357] macvtap1: entered allmulticast mode
[  186.118292][ T7357] batadv0: entered allmulticast mode
[  186.155178][ T7357] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  186.241434][ T7359] batadv0: left allmulticast mode
[  186.272359][ T7359] batadv0: left promiscuous mode
[  186.400606][ T7371] __nla_validate_parse: 2 callbacks suppressed
[  186.400629][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[  186.682835][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.359'.
[  187.090869][ T7391] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  187.120384][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'.
[  187.362893][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'.
[  187.391923][ T7407] netlink: 348 bytes leftover after parsing attributes in process `syz.3.365'.
[  187.485890][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'.
[  188.441070][ T7453] ipip0: entered promiscuous mode
[  188.478869][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'.
[  188.529303][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'.
[  188.575466][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'.
[  188.622699][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.375'.
[  188.713183][ T7456] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  190.129443][ T7505] veth5: entered promiscuous mode
[  190.702898][ T7530] tipc: Started in network mode
[  190.707857][ T7530] tipc: Node identity 6a5acee4d865, cluster identity 4711
[  190.716344][ T7530] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.763007][ T7526] syzkaller0: entered promiscuous mode
[  190.768576][ T7526] syzkaller0: entered allmulticast mode
[  190.923656][ T7535] tipc: Started in network mode
[  190.931710][ T7535] tipc: Node identity e6a87fd1eb94, cluster identity 4711
[  190.940883][ T7535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.964131][ T7541] syzkaller0: entered promiscuous mode
[  190.973150][ T7541] syzkaller0: entered allmulticast mode
[  191.166744][ T7526] tipc: Resetting bearer <eth:syzkaller0>
[  191.214894][ T7541] tipc: Resetting bearer <eth:syzkaller0>
[  191.271719][ T7525] tipc: Resetting bearer <eth:syzkaller0>
[  191.295699][ T7525] tipc: Disabling bearer <eth:syzkaller0>
[  191.331519][ T7529] tipc: Resetting bearer <eth:syzkaller0>
[  191.423126][ T7529] tipc: Disabling bearer <eth:syzkaller0>
[  191.497979][ T7559] __nla_validate_parse: 15 callbacks suppressed
[  191.498003][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'.
[  191.515971][ T7559] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  191.664935][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'.
[  191.887126][ T7578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.962092][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'.
[  192.253978][ T7583] bridge_slave_1: left allmulticast mode
[  192.281042][ T7583] bridge_slave_1: left promiscuous mode
[  192.364914][ T7583] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.486114][ T7583] bridge_slave_0: left allmulticast mode
[  192.510954][ T7583] bridge_slave_0: left promiscuous mode
[  192.599885][ T7583] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.382034][ T7649] netlink: 68 bytes leftover after parsing attributes in process `syz.1.409'.
[  194.068265][ T7663] Illegal XDP return value 7663 on prog  (id 146) dev syz_tun, expect packet loss!
[  194.219488][ T7671] netlink: 'syz.1.417': attribute type 11 has an invalid length.
[  194.280225][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.418'.
[  194.427011][ T7680] tc_dump_action: action bad kind
[  194.615431][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  195.321823][ T7717] netlink: 'syz.2.431': attribute type 1 has an invalid length.
[  195.692464][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'.
[  196.011080][ T7731] tun0: tun_chr_ioctl cmd 1074025675
[  196.016619][ T7731] tun0: persist enabled
[  196.059142][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.438'.
[  196.087002][ T7740] tun0: tun_chr_ioctl cmd 1074025675
[  196.089738][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'.
[  196.094544][ T7740] tun0: persist disabled
[  196.369612][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[  196.603441][ T7768] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  196.738459][ T7774] netlink: 'syz.0.443': attribute type 10 has an invalid length.
[  196.787416][ T7774] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  196.793479][ T7773] netlink: 'syz.2.445': attribute type 3 has an invalid length.
[  196.803890][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'.
[  197.257592][ T7787] netlink: 48 bytes leftover after parsing attributes in process `syz.4.450'.
[  197.281533][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[  197.312165][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[  197.350421][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[  197.809647][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'.
[  197.824658][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'.
[  198.409222][ T7824] vlan2: entered promiscuous mode
[  198.421931][ T7824] vlan2: entered allmulticast mode
[  198.437915][ T7824] hsr_slave_1: entered allmulticast mode
[  198.570667][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'.
[  198.872658][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.469'.
[  198.882297][ T7844] 8021q: VLANs not supported on ipvlan1
[  199.014551][ T7851] FAULT_INJECTION: forcing a failure.
[  199.014551][ T7851] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  199.028284][ T7851] CPU: 1 UID: 0 PID: 7851 Comm: syz.2.472 Not tainted syzkaller #0 PREEMPT(full) 
[  199.028313][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  199.028324][ T7851] Call Trace:
[  199.028333][ T7851]  <TASK>
[  199.028341][ T7851]  dump_stack_lvl+0x189/0x250
[  199.028375][ T7851]  ? __pfx____ratelimit+0x10/0x10
[  199.028403][ T7851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.028430][ T7851]  ? __pfx__printk+0x10/0x10
[  199.028451][ T7851]  ? __might_fault+0xb0/0x130
[  199.028492][ T7851]  should_fail_ex+0x414/0x560
[  199.028528][ T7851]  _copy_from_user+0x2d/0xb0
[  199.028565][ T7851]  __sys_bpf+0x1e3/0x860
[  199.028588][ T7851]  ? __pfx___sys_bpf+0x10/0x10
[  199.028627][ T7851]  ? ksys_write+0x22a/0x250
[  199.028663][ T7851]  ? __pfx_ksys_write+0x10/0x10
[  199.028697][ T7851]  __x64_sys_bpf+0x7c/0x90
[  199.028725][ T7851]  do_syscall_64+0xfa/0xfa0
[  199.028758][ T7851]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.028783][ T7851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.028801][ T7851]  ? clear_bhb_loop+0x60/0xb0
[  199.028824][ T7851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.028843][ T7851] RIP: 0033:0x7fd2a2d8f6c9
[  199.028860][ T7851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.028876][ T7851] RSP: 002b:00007fd2a3c20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  199.028898][ T7851] RAX: ffffffffffffffda RBX: 00007fd2a2fe5fa0 RCX: 00007fd2a2d8f6c9
[  199.028912][ T7851] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  199.028923][ T7851] RBP: 00007fd2a3c20090 R08: 0000000000000000 R09: 0000000000000000
[  199.028936][ T7851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.028947][ T7851] R13: 00007fd2a2fe6038 R14: 00007fd2a2fe5fa0 R15: 00007ffe2f3137b8
[  199.028982][ T7851]  </TASK>
[  199.235585][ T7844] macsec1: entered promiscuous mode
[  199.241069][ T7844] macsec1: entered allmulticast mode
[  199.715662][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.479'.
[  200.207750][ T7890] FAULT_INJECTION: forcing a failure.
[  200.207750][ T7890] name failslab, interval 1, probability 0, space 0, times 1
[  200.249119][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.1.484 Not tainted syzkaller #0 PREEMPT(full) 
[  200.249148][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  200.249159][ T7890] Call Trace:
[  200.249167][ T7890]  <TASK>
[  200.249175][ T7890]  dump_stack_lvl+0x189/0x250
[  200.249206][ T7890]  ? __pfx____ratelimit+0x10/0x10
[  200.249232][ T7890]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.249259][ T7890]  ? __pfx__printk+0x10/0x10
[  200.249282][ T7890]  ? __pfx___might_resched+0x10/0x10
[  200.249303][ T7890]  ? fs_reclaim_acquire+0x7d/0x100
[  200.249338][ T7890]  should_fail_ex+0x414/0x560
[  200.249372][ T7890]  should_failslab+0xa8/0x100
[  200.249394][ T7890]  __kmalloc_noprof+0xcb/0x7f0
[  200.249420][ T7890]  ? bpf_test_init+0x9f/0x150
[  200.249457][ T7890]  bpf_test_init+0x9f/0x150
[  200.249492][ T7890]  bpf_prog_test_run_xdp+0x503/0x10e0
[  200.249531][ T7890]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  200.249555][ T7890]  ? __fget_files+0x2a/0x420
[  200.249580][ T7890]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  200.249601][ T7890]  bpf_prog_test_run+0x2c7/0x340
[  200.249627][ T7890]  __sys_bpf+0x562/0x860
[  200.249648][ T7890]  ? __pfx___sys_bpf+0x10/0x10
[  200.249687][ T7890]  ? ksys_write+0x22a/0x250
[  200.249715][ T7890]  ? __pfx_ksys_write+0x10/0x10
[  200.249750][ T7890]  __x64_sys_bpf+0x7c/0x90
[  200.249779][ T7890]  do_syscall_64+0xfa/0xfa0
[  200.249804][ T7890]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.249831][ T7890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.249851][ T7890]  ? clear_bhb_loop+0x60/0xb0
[  200.249876][ T7890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.249894][ T7890] RIP: 0033:0x7f7e6358f6c9
[  200.249921][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.249938][ T7890] RSP: 002b:00007f7e64432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  200.249960][ T7890] RAX: ffffffffffffffda RBX: 00007f7e637e5fa0 RCX: 00007f7e6358f6c9
[  200.249974][ T7890] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  200.249986][ T7890] RBP: 00007f7e64432090 R08: 0000000000000000 R09: 0000000000000000
[  200.249998][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  200.250009][ T7890] R13: 00007f7e637e6038 R14: 00007f7e637e5fa0 R15: 00007ffc2d3956e8
[  200.250044][ T7890]  </TASK>
[  200.773477][ T7897] netlink: 'syz.4.488': attribute type 13 has an invalid length.
[  200.788167][ T7897] netlink: 'syz.4.488': attribute type 17 has an invalid length.
[  201.078085][ T7905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.192555][ T7897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.319993][ T7952] __nla_validate_parse: 4 callbacks suppressed
[  202.320019][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'.
[  202.699054][ T7972] netlink: 'syz.4.507': attribute type 15 has an invalid length.
[  203.199405][ T7990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.510'.
[  204.008127][ T8019] FAULT_INJECTION: forcing a failure.
[  204.008127][ T8019] name failslab, interval 1, probability 0, space 0, times 0
[  204.022517][ T8019] CPU: 1 UID: 0 PID: 8019 Comm: syz.0.519 Not tainted syzkaller #0 PREEMPT(full) 
[  204.022546][ T8019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  204.022557][ T8019] Call Trace:
[  204.022564][ T8019]  <TASK>
[  204.022572][ T8019]  dump_stack_lvl+0x189/0x250
[  204.022604][ T8019]  ? __pfx____ratelimit+0x10/0x10
[  204.022630][ T8019]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.022654][ T8019]  ? __pfx__printk+0x10/0x10
[  204.022681][ T8019]  ? __pfx___might_resched+0x10/0x10
[  204.022699][ T8019]  ? fs_reclaim_acquire+0x7d/0x100
[  204.022734][ T8019]  should_fail_ex+0x414/0x560
[  204.022767][ T8019]  should_failslab+0xa8/0x100
[  204.022788][ T8019]  __kvmalloc_node_noprof+0x158/0x910
[  204.022817][ T8019]  ? bpf_test_run_xdp_live+0x1ba/0x1b10
[  204.022845][ T8019]  bpf_test_run_xdp_live+0x1ba/0x1b10
[  204.022864][ T8019]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  204.022905][ T8019]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  204.022940][ T8019]  ? synchronize_rcu+0x11a/0x310
[  204.022962][ T8019]  ? __pfx_synchronize_rcu+0x10/0x10
[  204.022989][ T8019]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  204.023010][ T8019]  ? 0xffffffffa0205540
[  204.023048][ T8019]  ? 0xffffffffa02019e8
[  204.023095][ T8019]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  204.023127][ T8019]  ? _copy_from_user+0x94/0xb0
[  204.023152][ T8019]  ? bpf_test_init+0x113/0x150
[  204.023177][ T8019]  ? xdp_convert_md_to_buff+0x5b/0x330
[  204.023199][ T8019]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  204.023236][ T8019]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  204.023261][ T8019]  ? __fget_files+0x2a/0x420
[  204.023285][ T8019]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  204.023305][ T8019]  bpf_prog_test_run+0x2c7/0x340
[  204.023329][ T8019]  __sys_bpf+0x562/0x860
[  204.023349][ T8019]  ? __pfx___sys_bpf+0x10/0x10
[  204.023386][ T8019]  ? ksys_write+0x22a/0x250
[  204.023415][ T8019]  ? __pfx_ksys_write+0x10/0x10
[  204.023448][ T8019]  __x64_sys_bpf+0x7c/0x90
[  204.023474][ T8019]  do_syscall_64+0xfa/0xfa0
[  204.023499][ T8019]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.023525][ T8019]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.023543][ T8019]  ? clear_bhb_loop+0x60/0xb0
[  204.023565][ T8019]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.023583][ T8019] RIP: 0033:0x7f1a3d58f6c9
[  204.023601][ T8019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.023618][ T8019] RSP: 002b:00007f1a3e35e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  204.023641][ T8019] RAX: ffffffffffffffda RBX: 00007f1a3d7e5fa0 RCX: 00007f1a3d58f6c9
[  204.023654][ T8019] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  204.023664][ T8019] RBP: 00007f1a3e35e090 R08: 0000000000000000 R09: 0000000000000000
[  204.023675][ T8019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.023686][ T8019] R13: 00007f1a3d7e6038 R14: 00007f1a3d7e5fa0 R15: 00007ffee400ec48
[  204.023719][ T8019]  </TASK>
[  204.580958][ T8032] netlink: 'syz.0.520': attribute type 39 has an invalid length.
[  205.820032][ T8063] tap0: tun_chr_ioctl cmd 1074025677
[  205.825695][ T8063] tap0: linktype set to 0
[  205.857554][ T8059] netlink: 'syz.2.527': attribute type 33 has an invalid length.
[  205.882730][ T8059] sctp: [Deprecated]: syz.2.527 (pid 8059) Use of struct sctp_assoc_value in delayed_ack socket option.
[  205.882730][ T8059] Use struct sctp_sack_info instead
[  206.139112][ T8074] FAULT_INJECTION: forcing a failure.
[  206.139112][ T8074] name failslab, interval 1, probability 0, space 0, times 0
[  206.156641][ T8075] tap0: tun_chr_ioctl cmd 1074025677
[  206.172872][ T8075] tap0: linktype set to 804
[  206.189405][ T8074] CPU: 0 UID: 0 PID: 8074 Comm: syz.3.530 Not tainted syzkaller #0 PREEMPT(full) 
[  206.189432][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  206.189444][ T8074] Call Trace:
[  206.189452][ T8074]  <TASK>
[  206.189460][ T8074]  dump_stack_lvl+0x189/0x250
[  206.189492][ T8074]  ? __pfx____ratelimit+0x10/0x10
[  206.189518][ T8074]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.189544][ T8074]  ? __pfx__printk+0x10/0x10
[  206.189571][ T8074]  ? __pfx___might_resched+0x10/0x10
[  206.189590][ T8074]  ? fs_reclaim_acquire+0x7d/0x100
[  206.189624][ T8074]  should_fail_ex+0x414/0x560
[  206.189658][ T8074]  should_failslab+0xa8/0x100
[  206.189678][ T8074]  __kvmalloc_node_noprof+0x158/0x910
[  206.189706][ T8074]  ? bpf_test_run_xdp_live+0x1ba/0x1b10
[  206.189733][ T8074]  bpf_test_run_xdp_live+0x1ba/0x1b10
[  206.189754][ T8074]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  206.189786][ T8074]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  206.189821][ T8074]  ? synchronize_rcu+0x11a/0x310
[  206.189843][ T8074]  ? __pfx_synchronize_rcu+0x10/0x10
[  206.189879][ T8074]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  206.189902][ T8074]  ? 0xffffffffa0205540
[  206.189939][ T8074]  ? 0xffffffffa0203430
[  206.189986][ T8074]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  206.190019][ T8074]  ? _copy_from_user+0x94/0xb0
[  206.190043][ T8074]  ? bpf_test_init+0x113/0x150
[  206.190070][ T8074]  ? xdp_convert_md_to_buff+0x5b/0x330
[  206.190092][ T8074]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  206.190131][ T8074]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  206.190157][ T8074]  ? __fget_files+0x2a/0x420
[  206.190182][ T8074]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  206.190203][ T8074]  bpf_prog_test_run+0x2c7/0x340
[  206.190229][ T8074]  __sys_bpf+0x562/0x860
[  206.190250][ T8074]  ? __pfx___sys_bpf+0x10/0x10
[  206.190289][ T8074]  ? ksys_write+0x22a/0x250
[  206.190318][ T8074]  ? __pfx_ksys_write+0x10/0x10
[  206.190352][ T8074]  __x64_sys_bpf+0x7c/0x90
[  206.190382][ T8074]  do_syscall_64+0xfa/0xfa0
[  206.190407][ T8074]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.190439][ T8074]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.190459][ T8074]  ? clear_bhb_loop+0x60/0xb0
[  206.190484][ T8074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.190502][ T8074] RIP: 0033:0x7f5fd7d8f6c9
[  206.190518][ T8074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.190533][ T8074] RSP: 002b:00007f5fd8c38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  206.190555][ T8074] RAX: ffffffffffffffda RBX: 00007f5fd7fe5fa0 RCX: 00007f5fd7d8f6c9
[  206.190569][ T8074] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  206.190581][ T8074] RBP: 00007f5fd8c38090 R08: 0000000000000000 R09: 0000000000000000
[  206.190593][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  206.190603][ T8074] R13: 00007f5fd7fe6038 R14: 00007f5fd7fe5fa0 R15: 00007fff9ecadbb8
[  206.190633][ T8074]  </TASK>
[  206.537675][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'.
[  206.839490][ T5950] IPVS: starting estimator thread 0...
[  206.929014][ T8097] IPVS: using max 27 ests per chain, 64800 per kthread
[  206.937246][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  206.937269][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  206.937320][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[  206.943846][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  207.095410][ T8098] netlink: 'syz.2.536': attribute type 25 has an invalid length.
[  207.382115][ T8113] netlink: 96 bytes leftover after parsing attributes in process `syz.3.540'.
[  207.631262][ T8113] 8021q: VLANs not supported on ip6gre0
[  207.791223][ T8096] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  207.813424][ T8125] netlink: 296 bytes leftover after parsing attributes in process `syz.2.543'.
[  207.848880][ T8127] FAULT_INJECTION: forcing a failure.
[  207.848880][ T8127] name failslab, interval 1, probability 0, space 0, times 0
[  207.941616][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.3.544 Not tainted syzkaller #0 PREEMPT(full) 
[  207.941645][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  207.941657][ T8127] Call Trace:
[  207.941665][ T8127]  <TASK>
[  207.941674][ T8127]  dump_stack_lvl+0x189/0x250
[  207.941706][ T8127]  ? __pfx____ratelimit+0x10/0x10
[  207.941733][ T8127]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.941760][ T8127]  ? __pfx__printk+0x10/0x10
[  207.941784][ T8127]  ? __pfx___might_resched+0x10/0x10
[  207.941806][ T8127]  ? fs_reclaim_acquire+0x7d/0x100
[  207.941850][ T8127]  should_fail_ex+0x414/0x560
[  207.941885][ T8127]  should_failslab+0xa8/0x100
[  207.941907][ T8127]  __kvmalloc_node_noprof+0x158/0x910
[  207.941936][ T8127]  ? __kmalloc_cache_node_noprof+0x471/0x6f0
[  207.941964][ T8127]  ? page_pool_create_percpu+0x314/0xbc0
[  207.941988][ T8127]  ? page_pool_create_percpu+0xb2/0xbc0
[  207.942018][ T8127]  page_pool_create_percpu+0x314/0xbc0
[  207.942043][ T8127]  ? bpf_test_run_xdp_live+0x1ba/0x1b10
[  207.942072][ T8127]  bpf_test_run_xdp_live+0x1cf/0x1b10
[  207.942093][ T8127]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  207.942128][ T8127]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  207.942166][ T8127]  ? synchronize_rcu+0x11a/0x310
[  207.942192][ T8127]  ? __pfx_synchronize_rcu+0x10/0x10
[  207.942220][ T8127]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  207.942244][ T8127]  ? 0xffffffffa0205540
[  207.942285][ T8127]  ? 0xffffffffa0203408
[  207.942335][ T8127]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  207.942369][ T8127]  ? _copy_from_user+0x94/0xb0
[  207.942395][ T8127]  ? bpf_test_init+0x113/0x150
[  207.942422][ T8127]  ? xdp_convert_md_to_buff+0x5b/0x330
[  207.942446][ T8127]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  207.942485][ T8127]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  207.942511][ T8127]  ? __fget_files+0x2a/0x420
[  207.942537][ T8127]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  207.942559][ T8127]  bpf_prog_test_run+0x2c7/0x340
[  207.942584][ T8127]  __sys_bpf+0x562/0x860
[  207.942606][ T8127]  ? __pfx___sys_bpf+0x10/0x10
[  207.942645][ T8127]  ? ksys_write+0x22a/0x250
[  207.942676][ T8127]  ? __pfx_ksys_write+0x10/0x10
[  207.942711][ T8127]  __x64_sys_bpf+0x7c/0x90
[  207.942742][ T8127]  do_syscall_64+0xfa/0xfa0
[  207.942767][ T8127]  ? lockdep_hardirqs_on+0x9c/0x150
[  207.942793][ T8127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.942812][ T8127]  ? clear_bhb_loop+0x60/0xb0
[  207.942846][ T8127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.942864][ T8127] RIP: 0033:0x7f5fd7d8f6c9
[  207.942881][ T8127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.942898][ T8127] RSP: 002b:00007f5fd8c38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  207.942920][ T8127] RAX: ffffffffffffffda RBX: 00007f5fd7fe5fa0 RCX: 00007f5fd7d8f6c9
[  207.942935][ T8127] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  207.942948][ T8127] RBP: 00007f5fd8c38090 R08: 0000000000000000 R09: 0000000000000000
[  207.942960][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.942971][ T8127] R13: 00007f5fd7fe6038 R14: 00007f5fd7fe5fa0 R15: 00007fff9ecadbb8
[  207.943006][ T8127]  </TASK>
[  207.943014][ T8127] page_pool_create_percpu() gave up with errno -12
[  208.124283][ T8133] netlink: 52 bytes leftover after parsing attributes in process `syz.2.545'.
[  208.421449][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.547'.
[  208.657539][ T8150] syzkaller0: entered promiscuous mode
[  208.664497][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.2.551'.
[  208.676608][ T8150] syzkaller0: entered allmulticast mode
[  208.709794][ T8147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.758970][ T8147] tipc: Resetting bearer <eth:syzkaller0>
[  208.824271][ T8147] tipc: Disabling bearer <eth:syzkaller0>
[  209.089249][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  209.239721][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.557'.
[  209.399470][ T8184] FAULT_INJECTION: forcing a failure.
[  209.399470][ T8184] name failslab, interval 1, probability 0, space 0, times 0
[  209.449390][ T8184] CPU: 0 UID: 0 PID: 8184 Comm: syz.1.559 Not tainted syzkaller #0 PREEMPT(full) 
[  209.449418][ T8184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  209.449429][ T8184] Call Trace:
[  209.449437][ T8184]  <TASK>
[  209.449446][ T8184]  dump_stack_lvl+0x189/0x250
[  209.449481][ T8184]  ? __pfx____ratelimit+0x10/0x10
[  209.449507][ T8184]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.449534][ T8184]  ? __pfx__printk+0x10/0x10
[  209.449568][ T8184]  ? __pfx___might_resched+0x10/0x10
[  209.449589][ T8184]  ? fs_reclaim_acquire+0x7d/0x100
[  209.449625][ T8184]  should_fail_ex+0x414/0x560
[  209.449661][ T8184]  should_failslab+0xa8/0x100
[  209.449684][ T8184]  __kmalloc_cache_noprof+0x6f/0x6f0
[  209.449709][ T8184]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  209.449737][ T8184]  ? __xdp_reg_mem_model+0x1d8/0x5a0
[  209.449767][ T8184]  __xdp_reg_mem_model+0x1d8/0x5a0
[  209.449796][ T8184]  ? __pfx___xdp_reg_mem_model+0x10/0x10
[  209.449821][ T8184]  ? page_pool_create_percpu+0x7ea/0xbc0
[  209.449853][ T8184]  xdp_reg_mem_model+0x22/0x40
[  209.449875][ T8184]  bpf_test_run_xdp_live+0x21a/0x1b10
[  209.449897][ T8184]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  209.449932][ T8184]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  209.449968][ T8184]  ? synchronize_rcu+0x11a/0x310
[  209.449991][ T8184]  ? __pfx_synchronize_rcu+0x10/0x10
[  209.450019][ T8184]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  209.450042][ T8184]  ? 0xffffffffa0205540
[  209.450082][ T8184]  ? 0xffffffffa0203424
[  209.450132][ T8184]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  209.450167][ T8184]  ? _copy_from_user+0x94/0xb0
[  209.450192][ T8184]  ? bpf_test_init+0x113/0x150
[  209.450219][ T8184]  ? xdp_convert_md_to_buff+0x5b/0x330
[  209.450243][ T8184]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  209.450281][ T8184]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  209.450308][ T8184]  ? __fget_files+0x2a/0x420
[  209.450334][ T8184]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  209.450354][ T8184]  bpf_prog_test_run+0x2c7/0x340
[  209.450380][ T8184]  __sys_bpf+0x562/0x860
[  209.450403][ T8184]  ? __pfx___sys_bpf+0x10/0x10
[  209.450441][ T8184]  ? ksys_write+0x22a/0x250
[  209.450468][ T8184]  ? __pfx_ksys_write+0x10/0x10
[  209.450501][ T8184]  __x64_sys_bpf+0x7c/0x90
[  209.450529][ T8184]  do_syscall_64+0xfa/0xfa0
[  209.450563][ T8184]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.450589][ T8184]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.450607][ T8184]  ? clear_bhb_loop+0x60/0xb0
[  209.450632][ T8184]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.450650][ T8184] RIP: 0033:0x7f7e6358f6c9
[  209.450667][ T8184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.450683][ T8184] RSP: 002b:00007f7e64432038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  209.450705][ T8184] RAX: ffffffffffffffda RBX: 00007f7e637e5fa0 RCX: 00007f7e6358f6c9
[  209.450719][ T8184] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  209.450732][ T8184] RBP: 00007f7e64432090 R08: 0000000000000000 R09: 0000000000000000
[  209.450744][ T8184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  209.450755][ T8184] R13: 00007f7e637e6038 R14: 00007f7e637e5fa0 R15: 00007ffc2d3956e8
[  209.450791][ T8184]  </TASK>
[  209.847714][ T8190] syzkaller0: entered promiscuous mode
[  209.854191][ T8190] syzkaller0: entered allmulticast mode
[  209.917413][ T8196] batman_adv: batadv0: Adding interface: dummy0
[  209.924298][ T8196] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  209.958394][ T8196] batman_adv: batadv0: Interface activated: dummy0
[  210.145007][ T8196] batadv0: mtu less than device minimum
[  210.154142][ T8196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.166515][ T8196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.179032][ T8196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.191209][ T8196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.196098][ T8204] netlink: 'syz.3.565': attribute type 1 has an invalid length.
[  210.203186][ T8196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.221816][ T8196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.234055][ T8196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.246206][ T8196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.258768][ T8196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  210.430682][ T8211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.566'.
[  210.458924][ T8209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.566'.
[  210.688818][ T5834] Bluetooth: hci4: command 0x0405 tx timeout
[  210.764503][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'.
[  210.913257][ T8221] bond2: Removing last arp target with arp_interval on
[  211.026112][ T8223] bond3: Removing last arp target with arp_interval on
[  211.551751][ T8236] netlink: 36 bytes leftover after parsing attributes in process `syz.4.572'.
[  211.892115][ T8252] netlink: 'syz.4.578': attribute type 1 has an invalid length.
[  212.023872][ T8252] 8021q: adding VLAN 0 to HW filter on device bond2
[  212.093677][ T8257] bond2: (slave geneve2): making interface the new active one
[  212.103682][ T8257] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  212.133049][ T8260] bond2: entered promiscuous mode
[  212.138244][ T8260] geneve2: entered promiscuous mode
[  212.198803][ T8261] tipc: Started in network mode
[  212.225842][ T8261] tipc: Node identity 6af0c8ada82c, cluster identity 4711
[  212.255998][ T8261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.275099][ T8254] syzkaller0: entered promiscuous mode
[  212.281207][ T8254] syzkaller0: entered allmulticast mode
[  212.291605][ T8269] tipc: Resetting bearer <eth:syzkaller0>
[  212.301452][ T8253] tipc: Resetting bearer <eth:syzkaller0>
[  212.319652][ T8253] tipc: Disabling bearer <eth:syzkaller0>
[  212.682452][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'.
[  213.151695][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'.
[  213.162213][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'.
[  213.345080][ T8303] netlink: 'syz.2.590': attribute type 1 has an invalid length.
[  213.490943][ T8308] wlan0 speed is unknown, defaulting to 1000
[  213.497565][ T8308] wlan0 speed is unknown, defaulting to 1000
[  213.499550][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'.
[  213.543539][ T8308] wlan0 speed is unknown, defaulting to 1000
[  213.599284][ T8308] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  213.665519][ T8308] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  213.694764][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'.
[  213.744241][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.3.595'.
[  213.767963][ T8308] wlan0 speed is unknown, defaulting to 1000
[  213.850227][ T8308] wlan0 speed is unknown, defaulting to 1000
[  213.859931][ T8308] wlan0 speed is unknown, defaulting to 1000
[  213.923897][ T8308] wlan0 speed is unknown, defaulting to 1000
[  213.933583][ T8308] wlan0 speed is unknown, defaulting to 1000
[  214.048947][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'.
[  214.057880][ T8331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'.
[  214.081460][ T8330] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  214.297498][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'.
[  214.603743][ T8338] IPVS: Error connecting to the multicast addr
[  214.700898][ T8348] netlink: 'syz.3.604': attribute type 3 has an invalid length.
[  214.709162][ T8348] netlink: 64 bytes leftover after parsing attributes in process `syz.3.604'.
[  214.714245][ T8340] 8021q: adding VLAN 0 to HW filter on device bond5
[  214.718419][ T8348] block nbd0: not configured, cannot reconfigure
[  214.745036][ T8340] bond0: (slave bond5): Enslaving as an active interface with an up link
[  214.840518][ T8353] syzkaller1: entered promiscuous mode
[  214.855531][ T8353] syzkaller1: entered allmulticast mode
[  215.348415][ T8375] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  215.440881][ T8380] macvlan0: entered allmulticast mode
[  215.730628][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  215.738606][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  215.802979][ T8384] team0: Port device team_slave_0 removed
[  216.155667][ T8406] wlan0 speed is unknown, defaulting to 1000
[  218.595128][ T8441] batadv0: entered promiscuous mode
[  218.601498][ T8441] macvtap2: entered promiscuous mode
[  218.607368][ T8441] macvtap2: entered allmulticast mode
[  218.627384][ T8441] batadv0: entered allmulticast mode
[  218.642279][ T8441] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  218.671410][ T8450] __nla_validate_parse: 72 callbacks suppressed
[  218.671438][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.627'.
[  218.697833][ T8442] batadv0: left allmulticast mode
[  218.706412][ T8442] batadv0: left promiscuous mode
[  218.917233][ T8455] pim6reg1: entered promiscuous mode
[  218.968926][ T8455] pim6reg1: entered allmulticast mode
[  219.383913][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'.
[  219.420513][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.636'.
[  219.430887][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'.
[  219.452988][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.636'.
[  219.481378][ T8490] netlink: 32 bytes leftover after parsing attributes in process `syz.2.638'.
[  219.505123][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'.
[  219.615007][ T8499] 8021q: VLANs not supported on wg0
[  219.621974][ T8495] net_ratelimit: 12 callbacks suppressed
[  219.621996][ T8495] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  219.638930][ T8495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  219.876617][ T8504] tipc: Started in network mode
[  219.894263][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'.
[  219.895120][ T8504] tipc: Node identity ae87a706234e, cluster identity 4711
[  219.921204][ T8504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.976388][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'.
[  220.002357][ T8510] ip6gretap0: entered promiscuous mode
[  220.063291][ T8510] ip6gretap0: left promiscuous mode
[  220.143947][ T8503] tipc: Disabling bearer <eth:syzkaller0>
[  220.152760][ T8517] netlink: 'syz.2.645': attribute type 5 has an invalid length.
[  220.185930][ T8518] netlink: 'syz.4.646': attribute type 13 has an invalid length.
[  220.457569][ T8524] netlink: 'syz.3.648': attribute type 58 has an invalid length.
[  220.544764][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.648'.
[  220.740415][ T8518] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.748696][ T8518] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.278365][ T8518] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.337240][ T8518] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.822005][ T7635] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.899859][ T7635] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.922480][ T7635] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  221.968866][ T7635] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.257493][ T8555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.125789][ T8589] netlink: 'syz.0.662': attribute type 1 has an invalid length.
[  223.295528][ T8589] 8021q: adding VLAN 0 to HW filter on device bond6
[  223.349843][ T8596] bond6: (slave geneve2): making interface the new active one
[  223.383598][ T8596] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  223.438132][ T8603] bond0: entered promiscuous mode
[  223.474760][ T8603] bond_slave_0: entered promiscuous mode
[  223.504939][ T8603] bond_slave_1: entered promiscuous mode
[  223.529959][ T8603] team0: entered promiscuous mode
[  223.544110][ T8603] team_slave_0: entered promiscuous mode
[  223.553560][ T8603] team_slave_1: entered promiscuous mode
[  223.572647][ T8603] bond0: left promiscuous mode
[  223.586777][ T8603] bond_slave_0: left promiscuous mode
[  223.604951][ T8603] bond_slave_1: left promiscuous mode
[  223.624776][ T8603] team0: left promiscuous mode
[  223.636389][ T8603] team_slave_0: left promiscuous mode
[  223.652757][ T8603] team_slave_1: left promiscuous mode
[  223.697305][ T8609] netlink: 'syz.0.667': attribute type 2 has an invalid length.
[  223.771105][ T8609] : entered promiscuous mode
[  223.821395][ T8605] bond0: entered promiscuous mode
[  223.826841][ T8605] bond_slave_0: entered promiscuous mode
[  223.836086][ T8605] bond_slave_1: entered promiscuous mode
[  223.857534][ T8605] team0: entered promiscuous mode
[  223.873737][ T8605] team_slave_0: entered promiscuous mode
[  223.914362][ T8605] team_slave_1: entered promiscuous mode
[  223.965285][ T8605] bond0: left promiscuous mode
[  223.971328][ T8605] bond_slave_0: left promiscuous mode
[  224.002883][ T8605] bond_slave_1: left promiscuous mode
[  224.019157][ T8605] team0: left promiscuous mode
[  224.029890][ T8605] team_slave_0: left promiscuous mode
[  224.053816][ T8605] team_slave_1: left promiscuous mode
[  224.291777][ T8629] __nla_validate_parse: 4 callbacks suppressed
[  224.291800][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'.
[  224.338333][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.672'.
[  224.664181][ T8661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.681'.
[  224.675404][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.681'.
[  224.684676][ T8661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.681'.
[  224.697159][ T8661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.681'.
[  224.736488][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'.
[  225.245993][ T8683] netlink: 'syz.2.686': attribute type 10 has an invalid length.
[  225.276386][ T8683] team0: Failed to send options change via netlink (err -105)
[  225.295373][ T8683] team0: Port device dummy0 added
[  225.406852][ T8687] netlink: 5 bytes leftover after parsing attributes in process `syz.4.687'.
[  225.416592][ T8687] 0ªX¹¦D: renamed from gretap0
[  225.426558][ T8687] 0ªX¹¦D: entered allmulticast mode
[  225.437633][ T8685] netlink: 'syz.2.686': attribute type 10 has an invalid length.
[  225.437636][ T8689] netlink: 'syz.3.688': attribute type 16 has an invalid length.
[  225.440234][ T8687] A link change request failed with some changes committed already. Interface 
30ªX¹¦D may have been left with an inconsistent configuration, please check.
[  225.448897][ T8689] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.688'.
[  225.456783][ T8685] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  225.499950][ T8685] team0: Failed to send options change via netlink (err -105)
[  225.509285][ T8685] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  225.518891][ T8685] team0: Port device dummy0 removed
[  225.530669][ T8685] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  226.044313][ T8708] wlan0 speed is unknown, defaulting to 1000
[  226.339167][ T8714] bond7: option fail_over_mac: invalid value (126)
[  226.373066][ T8714] bond7 (unregistering): Released all slaves
[  226.581967][ T8726] vlan2: entered promiscuous mode
[  226.587271][ T8726] bond0: entered promiscuous mode
[  226.626761][ T8726] bond_slave_0: entered promiscuous mode
[  226.643890][ T8726] bond_slave_1: entered promiscuous mode
[  226.685394][ T8726] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  226.715568][ T8726] bond1: entered promiscuous mode
[  226.735264][ T8726] dummy0: entered promiscuous mode
[  226.820686][ T8731] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.699'.
[  226.889269][ T8734] bond0: Error: Cannot enslave bond to itself.
[  228.100297][ T8788] syzkaller1: entered promiscuous mode
[  228.129208][ T8788] syzkaller1: entered allmulticast mode
[  228.882086][ T8828] netlink: 'syz.4.727': attribute type 33 has an invalid length.
[  228.976786][ T8828] wlan0 speed is unknown, defaulting to 1000
[  229.052002][ T8840] IPVS: length: 4096 != 8
[  229.488428][ T8862] __nla_validate_parse: 6 callbacks suppressed
[  229.488467][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'.
[  229.531739][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.735'.
[  229.906768][ T8875] wlan0 speed is unknown, defaulting to 1000
[  229.971202][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'.
[  230.010824][ T8885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'.
[  230.367995][ T8883] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  230.488307][ T8883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.520196][ T8876] delete_channel: no stack
[  230.688034][ T8901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.694140][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.743'.
[  230.714626][ T8901] x_tables: unsorted entry at hook 1
[  231.117791][ T8901] syzkaller0: entered promiscuous mode
[  231.124192][ T8901] syzkaller0: entered allmulticast mode
[  231.131198][ T8901] tipc: Resetting bearer <eth:syzkaller0>
[  231.185586][ T8899] tipc: Resetting bearer <eth:syzkaller0>
[  231.252116][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'.
[  231.262346][ T8923] netlink: 88 bytes leftover after parsing attributes in process `syz.3.749'.
[  231.289417][ T8924] tipc: Can't bind to reserved service type 2
[  231.361439][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[  231.772457][   T24] tipc: Node number set to 2437154950
[  232.958308][ T8899] tipc: Disabling bearer <eth:syzkaller0>
[  233.224130][ T8948] : entered promiscuous mode
[  233.443025][ T8959] netlink: 80 bytes leftover after parsing attributes in process `syz.2.759'.
[  233.661293][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'.
[  233.980863][ T8982] syz.0.765: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  234.006114][ T8982] CPU: 1 UID: 0 PID: 8982 Comm: syz.0.765 Not tainted syzkaller #0 PREEMPT(full) 
[  234.006142][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  234.006154][ T8982] Call Trace:
[  234.006162][ T8982]  <TASK>
[  234.006170][ T8982]  dump_stack_lvl+0x189/0x250
[  234.006208][ T8982]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.006234][ T8982]  ? __pfx__printk+0x10/0x10
[  234.006255][ T8982]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  234.006281][ T8982]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  234.006309][ T8982]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  234.006338][ T8982]  warn_alloc+0x214/0x310
[  234.006375][ T8982]  ? __pfx_warn_alloc+0x10/0x10
[  234.006416][ T8982]  ? __get_vm_area_node+0x28f/0x300
[  234.006441][ T8982]  ? fq_pie_init+0x435/0x840
[  234.006473][ T8982]  __vmalloc_node_range_noprof+0x690/0x12d0
[  234.006503][ T8982]  ? __alloc_frozen_pages_noprof+0x9f/0x370
[  234.006554][ T8982]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  234.006582][ T8982]  ? fq_pie_init+0x435/0x840
[  234.006611][ T8982]  ? rcu_is_watching+0x15/0xb0
[  234.006632][ T8982]  ? fq_pie_init+0x435/0x840
[  234.006656][ T8982]  __kvmalloc_node_noprof+0x674/0x910
[  234.006685][ T8982]  ? fq_pie_init+0x435/0x840
[  234.006712][ T8982]  ? tcf_block_get+0x67/0xa0
[  234.006738][ T8982]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  234.006772][ T8982]  fq_pie_init+0x435/0x840
[  234.006802][ T8982]  ? __pfx_fq_pie_init+0x10/0x10
[  234.006827][ T8982]  qdisc_create+0x7ac/0xea0
[  234.006860][ T8982]  tc_modify_qdisc+0x1538/0x20e0
[  234.006913][ T8982]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  234.006974][ T8982]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  234.006998][ T8982]  rtnetlink_rcv_msg+0x77c/0xb70
[  234.007032][ T8982]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  234.007059][ T8982]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  234.007091][ T8982]  ? ref_tracker_free+0x63a/0x7d0
[  234.007111][ T8982]  ? __asan_memcpy+0x40/0x70
[  234.007135][ T8982]  ? __pfx_ref_tracker_free+0x10/0x10
[  234.007164][ T8982]  netlink_rcv_skb+0x208/0x470
[  234.007186][ T8982]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  234.007217][ T8982]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  234.007249][ T8982]  ? netlink_deliver_tap+0x2e/0x1b0
[  234.007279][ T8982]  netlink_unicast+0x82f/0x9e0
[  234.007316][ T8982]  ? __pfx_netlink_unicast+0x10/0x10
[  234.007345][ T8982]  ? netlink_sendmsg+0x642/0xb30
[  234.007362][ T8982]  ? skb_put+0x11b/0x210
[  234.007383][ T8982]  netlink_sendmsg+0x805/0xb30
[  234.007413][ T8982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.007437][ T8982]  ? aa_sock_msg_perm+0xf1/0x1d0
[  234.007467][ T8982]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  234.007484][ T8982]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.007504][ T8982]  __sock_sendmsg+0x21c/0x270
[  234.007532][ T8982]  ____sys_sendmsg+0x505/0x830
[  234.007560][ T8982]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.007589][ T8982]  ? import_iovec+0x74/0xa0
[  234.007614][ T8982]  ___sys_sendmsg+0x21f/0x2a0
[  234.007635][ T8982]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.007692][ T8982]  ? __fget_files+0x2a/0x420
[  234.007708][ T8982]  ? __fget_files+0x3a0/0x420
[  234.007737][ T8982]  __x64_sys_sendmsg+0x19b/0x260
[  234.007760][ T8982]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  234.007797][ T8982]  ? do_syscall_64+0xbe/0xfa0
[  234.007825][ T8982]  do_syscall_64+0xfa/0xfa0
[  234.007847][ T8982]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.007871][ T8982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.007889][ T8982]  ? clear_bhb_loop+0x60/0xb0
[  234.007921][ T8982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.007939][ T8982] RIP: 0033:0x7f1a3d58f6c9
[  234.007956][ T8982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.007972][ T8982] RSP: 002b:00007f1a3e35e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.007992][ T8982] RAX: ffffffffffffffda RBX: 00007f1a3d7e5fa0 RCX: 00007f1a3d58f6c9
[  234.008006][ T8982] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000006
[  234.008017][ T8982] RBP: 00007f1a3d611f91 R08: 0000000000000000 R09: 0000000000000000
[  234.008027][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.008036][ T8982] R13: 00007f1a3d7e6038 R14: 00007f1a3d7e5fa0 R15: 00007ffee400ec48
[  234.008067][ T8982]  </TASK>
[  234.010672][ T8982] Mem-Info:
[  234.461706][ T8982] active_anon:5639 inactive_anon:0 isolated_anon:0
[  234.461706][ T8982]  active_file:3374 inactive_file:39936 isolated_file:0
[  234.461706][ T8982]  unevictable:768 dirty:221 writeback:0
[  234.461706][ T8982]  slab_reclaimable:10928 slab_unreclaimable:130236
[  234.461706][ T8982]  mapped:30506 shmem:1361 pagetables:1232
[  234.461706][ T8982]  sec_pagetables:0 bounce:0
[  234.461706][ T8982]  kernel_misc_reclaimable:0
[  234.461706][ T8982]  free:1293689 free_pcp:15022 free_cma:0
[  234.509276][ T8982] Node 0 active_anon:22556kB inactive_anon:0kB active_file:13496kB inactive_file:159540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122024kB dirty:884kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12964kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  234.701123][ T8982] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  234.732391][ T8982] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  234.768189][ T8982] lowmem_reserve[]: 0 2505 2505 2505 2505
[  234.776973][ T8982] Node 0 DMA32 free:1260544kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22756kB inactive_anon:0kB active_file:13496kB inactive_file:159540kB unevictable:1536kB writepending:884kB zspages:0kB present:3129332kB managed:2565156kB mlocked:0kB bounce:0kB free_pcp:44156kB local_pcp:22752kB free_cma:0kB
[  234.847984][ T8982] lowmem_reserve[]: 0 0 0 0 0
[  234.853619][ T8982] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  234.893964][ T8982] lowmem_reserve[]: 0 0 0 0 0
[  234.901732][ T8982] Node 1 Normal free:3897648kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16036kB local_pcp:7972kB free_cma:0kB
[  234.941549][ T8982] lowmem_reserve[]: 0 0 0 0 0
[  234.946844][ T8982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  234.962118][ T8982] Node 0 DMA32: 382*4kB (UME) 755*8kB (UME) 396*16kB (UME) 872*32kB (UME) 173*64kB (UME) 108*128kB (UME) 64*256kB (UME) 34*512kB (UME) 10*1024kB (UE) 9*2048kB (UME) 276*4096kB (UM) = 1259664kB
[  234.982688][ T8982] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  234.995148][ T8982] Node 1 Normal: 186*4kB (UE) 39*8kB (UME) 37*16kB (UME) 96*32kB (UME) 27*64kB (UME) 6*128kB (UME) 3*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3897648kB
[  235.017363][ T8982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  235.028416][ T8982] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  235.041909][ T8982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  235.052562][ T8982] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  235.064388][ T8982] 44692 total pagecache pages
[  235.069994][ T8982] 0 pages in swap cache
[  235.074521][ T8982] Free swap  = 124996kB
[  235.079303][ T8982] Total swap = 124996kB
[  235.083844][ T8982] 2097051 pages RAM
[  235.087805][ T8982] 0 pages HighMem/MovableOnly
[  235.093328][ T8982] 424120 pages reserved
[  235.097706][ T8982] 0 pages cma reserved
[  235.249514][ T5149] Bluetooth: hci4: command 0x0405 tx timeout
[  235.334905][ T9015] dvmrp1: tun_chr_ioctl cmd 1074025677
[  235.341094][ T9015] dvmrp1: linktype set to 774
[  235.375550][ T9016] bond_slave_0: entered allmulticast mode
[  235.551655][ T9020] netlink: 'syz.0.775': attribute type 1 has an invalid length.
[  235.582381][ T9023] __nla_validate_parse: 2 callbacks suppressed
[  235.582406][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.776'.
[  235.669475][ T9020] 8021q: adding VLAN 0 to HW filter on device bond7
[  235.697311][ T9020] netlink: 'syz.0.775': attribute type 1 has an invalid length.
[  235.758615][ T9024] ip6erspan0: entered promiscuous mode
[  235.772434][ T9024] bond7: (slave ip6erspan0): making interface the new active one
[  235.784882][ T9024] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link
[  235.834979][ T9023] veth0_to_team: entered promiscuous mode
[  236.030181][ T9020] vlan2: entered allmulticast mode
[  236.045714][ T9020] team0: entered allmulticast mode
[  236.063458][ T9020] team_slave_0: entered allmulticast mode
[  236.081417][ T9020] team_slave_1: entered allmulticast mode
[  236.110737][ T9030] wlan0 speed is unknown, defaulting to 1000
[  236.196105][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'.
[  236.799847][ T9075] syzkaller0: entered promiscuous mode
[  236.805553][ T9075] syzkaller0: entered allmulticast mode
[  236.875701][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'.
[  237.205334][ T9099] netlink: 'syz.3.793': attribute type 1 has an invalid length.
[  237.331558][ T9099] bond4: entered promiscuous mode
[  237.337229][ T9099] 8021q: adding VLAN 0 to HW filter on device bond4
[  237.390836][ T9101] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  237.399796][ T9103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.794'.
[  237.404001][ T9101] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  237.424769][ T9101] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  237.746561][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.796'.
[  237.899160][ T9130] netlink: 'syz.0.799': attribute type 6 has an invalid length.
[  237.987669][ T9110] netlink: 76 bytes leftover after parsing attributes in process `syz.2.796'.
[  238.033090][ T9134] bpq0: entered promiscuous mode
[  238.615523][ T7491] udevd[7491]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  238.681419][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'.
[  239.447231][ T9192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.812'.
[  239.467839][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'.
[  240.080464][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'.
[  240.111551][ T9214] openvswitch: netlink: Missing key (keys=40, expected=80)
[  240.165993][ T9216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.207783][ T9215] tipc: Disabling bearer <eth:syzkaller0>
[  240.435027][   T30] audit: type=1800 audit(1762467929.926:2): pid=9235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.826" name="$" dev="tmpfs" ino=851 res=0 errno=0
[  240.435735][ T9230] 8021q: VLANs not supported on ipvlan1
[  240.456294][   T30] audit: type=1800 audit(1762467929.936:3): pid=9235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.826" name="$" dev="tmpfs" ino=851 res=0 errno=0
[  240.767535][ T9247] __nla_validate_parse: 2 callbacks suppressed
[  240.767560][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'.
[  240.863045][ T9251] netlink: 44 bytes leftover after parsing attributes in process `syz.4.832'.
[  241.445862][ T9272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.472188][ T9268] tipc: Disabling bearer <eth:syzkaller0>
[  241.581191][ T9273] netlink: 'syz.0.838': attribute type 4 has an invalid length.
[  241.589523][ T9274] netlink: 'syz.0.838': attribute type 4 has an invalid length.
[  241.746197][ T9280] syzkaller1: entered promiscuous mode
[  241.757522][ T9280] syzkaller1: entered allmulticast mode
[  241.967989][ T9291] netlink: 'syz.4.844': attribute type 10 has an invalid length.
[  241.994564][ T9291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.844'.
[  242.058362][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'.
[  242.319120][ T9308] netlink: 32 bytes leftover after parsing attributes in process `syz.4.849'.
[  242.527422][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.847'.
[  242.740877][ T9320] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.796583][ T9319] tipc: Disabling bearer <eth:syzkaller0>
[  243.541116][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'.
[  243.569896][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'.
[  243.979324][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'.
[  244.096317][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'.
[  245.179385][ T9397] netlink: 'syz.4.871': attribute type 2 has an invalid length.
[  245.322369][ T9402] netlink: 'syz.0.873': attribute type 1 has an invalid length.
[  245.379226][ T9406] netlink: 'syz.4.875': attribute type 6 has an invalid length.
[  246.102540][ T9427] wlan0 speed is unknown, defaulting to 1000
[  246.118553][ T9430] syzkaller1: entered promiscuous mode
[  246.127088][ T9430] syzkaller1: entered allmulticast mode
[  246.397122][ T9440] netlink: 'syz.2.885': attribute type 1 has an invalid length.
[  246.795013][ T9445] FAULT_INJECTION: forcing a failure.
[  246.795013][ T9445] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  246.809464][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.4.886 Not tainted syzkaller #0 PREEMPT(full) 
[  246.809492][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  246.809505][ T9445] Call Trace:
[  246.809514][ T9445]  <TASK>
[  246.809579][ T9445]  dump_stack_lvl+0x189/0x250
[  246.809616][ T9445]  ? __pfx____ratelimit+0x10/0x10
[  246.809641][ T9445]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.809667][ T9445]  ? __pfx__printk+0x10/0x10
[  246.809698][ T9445]  should_fail_ex+0x414/0x560
[  246.809733][ T9445]  _copy_to_user+0x31/0xb0
[  246.809758][ T9445]  copy_to_sockptr+0x5e/0xa0
[  246.809779][ T9445]  sk_getsockopt+0x1fe2/0x2530
[  246.809805][ T9445]  ? __pfx_sk_getsockopt+0x10/0x10
[  246.809823][ T9445]  ? do_syscall_64+0xa0/0xfa0
[  246.809859][ T9445]  ? __lock_acquire+0xab9/0xd20
[  246.809910][ T9445]  do_sock_getsockopt+0x237/0x450
[  246.809930][ T9445]  ? do_syscall_64+0xa0/0xfa0
[  246.809958][ T9445]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  246.809976][ T9445]  ? do_syscall_64+0xa0/0xfa0
[  246.809998][ T9445]  ? __fget_files+0x2a/0x420
[  246.810016][ T9445]  ? __fget_files+0x3a0/0x420
[  246.810031][ T9445]  ? __fget_files+0x2a/0x420
[  246.810057][ T9445]  __x64_sys_getsockopt+0x1a5/0x250
[  246.810076][ T9445]  ? do_syscall_64+0xa0/0xfa0
[  246.810104][ T9445]  ? do_syscall_64+0xa0/0xfa0
[  246.810132][ T9445]  do_syscall_64+0xfa/0xfa0
[  246.810155][ T9445]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.810182][ T9445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.810201][ T9445]  ? clear_bhb_loop+0x60/0xb0
[  246.810226][ T9445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.810244][ T9445] RIP: 0033:0x7ff73d78f6c9
[  246.810264][ T9445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.810280][ T9445] RSP: 002b:00007ff73e5a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  246.810303][ T9445] RAX: ffffffffffffffda RBX: 00007ff73d9e6090 RCX: 00007ff73d78f6c9
[  246.810317][ T9445] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000004
[  246.810327][ T9445] RBP: 00007ff73e5a1090 R08: 0000200000000200 R09: 0000000000000000
[  246.810339][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.810350][ T9445] R13: 00007ff73d9e6128 R14: 00007ff73d9e6090 R15: 00007ffd22265fe8
[  246.810382][ T9445]  </TASK>
[  247.165668][ T9461] __nla_validate_parse: 4 callbacks suppressed
[  247.165692][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'.
[  247.396620][ T9461] wlan0 speed is unknown, defaulting to 1000
[  247.481564][ T9477] netlink: 'syz.0.889': attribute type 4 has an invalid length.
[  247.518032][ T9466] wlan0 speed is unknown, defaulting to 1000
[  247.544566][ T9478] netlink: 152 bytes leftover after parsing attributes in process `syz.0.889'.
[  247.554385][ T9478] block nbd0: not configured, cannot reconfigure
[  248.076626][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'.
[  248.130154][ T9472] netlink: 'syz.3.892': attribute type 17 has an invalid length.
[  248.154810][ T9472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  248.171345][ T9465] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  248.398101][ T9497] netlink: 140 bytes leftover after parsing attributes in process `syz.2.897'.
[  248.464933][ T9493] wlan0 speed is unknown, defaulting to 1000
[  248.517088][ T9491] wlan0 speed is unknown, defaulting to 1000
[  248.998266][ T9518] netlink: 212048 bytes leftover after parsing attributes in process `syz.4.901'.
[  249.329190][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  249.840959][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.912'.
[  250.104910][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.915'.
[  250.443096][ T5199] udevd[5199]: worker [7491] terminated by signal 33 (Unknown signal 33)
[  250.769894][ T9583] bond3 (unregistering): Released all slaves
[  251.186823][ T9590] wlan0 speed is unknown, defaulting to 1000
[  251.479840][ T9608] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  251.547821][ T9608] netlink: 'syz.1.927': attribute type 1 has an invalid length.
[  251.556581][ T9608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.774075][ T9617] sctp: [Deprecated]: syz.2.930 (pid 9617) Use of int in max_burst socket option.
[  251.774075][ T9617] Use struct sctp_assoc_value instead
[  251.803850][ T9619] sctp: [Deprecated]: syz.2.930 (pid 9619) Use of int in max_burst socket option.
[  251.803850][ T9619] Use struct sctp_assoc_value instead
[  251.887227][ T9620] wlan0 speed is unknown, defaulting to 1000
[  251.994134][ T9630] netlink: 176 bytes leftover after parsing attributes in process `syz.2.933'.
[  252.297776][ T9639] netlink: 'syz.0.935': attribute type 13 has an invalid length.
[  252.347724][ T9639] netlink: 'syz.0.935': attribute type 17 has an invalid length.
[  252.712625][ T9639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  252.751705][ T9653] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  252.849361][ T5149] Bluetooth: hci4: command 0x0405 tx timeout
[  252.854523][ T9648] wlan0 speed is unknown, defaulting to 1000
[  252.968573][ T9658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.940'.
[  253.316780][ T9683] sock: sock_set_timeout: `syz.3.946' (pid 9683) tries to set negative timeout
[  253.345381][ T9669] wlan0 speed is unknown, defaulting to 1000
[  253.621838][ T9694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.677979][ T9692] tipc: Disabling bearer <eth:syzkaller0>
[  253.844904][ T9699] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  253.999611][ T9707] netlink: 32 bytes leftover after parsing attributes in process `syz.2.954'.
[  254.029241][ T9709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.954'.
[  254.061271][ T9707] syzkaller0: entered promiscuous mode
[  254.080306][ T9707] syzkaller0: entered allmulticast mode
[  254.110087][ T9711] netlink: 68 bytes leftover after parsing attributes in process `syz.1.956'.
[  254.196029][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'.
[  254.235232][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'.
[  254.474826][ T9730] bridge3: port 1(veth5) entered blocking state
[  254.495236][ T9730] bridge3: port 1(veth5) entered disabled state
Connection to 10.128.1.160 closed by remote host.
[  254.539103][ T9730] veth5: entered allmulticast mode
[  254.580537][ T9730] veth5: entered promiscuous mode
[  255.581003][ T9724] bridge0: port 3(syz_tun) entered disabled state
[  255.606689][ T9724] syz_tun (unregistering): left allmulticast mode
[  255.613866][ T9724] syz_tun (unregistering): left promiscuous mode
[  255.620713][ T9724] bridge0: port 3(syz_tun) entered disabled state
[  255.779600][ T7635] bridge_slave_1: left allmulticast mode
[  255.785922][ T7635] bridge_slave_1: left promiscuous mode
[  255.805155][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.817847][ T7635] bridge_slave_0: left allmulticast mode
[  255.831702][ T7635] bridge_slave_0: left promiscuous mode
[  255.837745][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.052100][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  256.420867][ T7635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.429920][ T7635] bond_slave_0: left promiscuous mode
[  256.436612][ T7635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.447178][ T7635] bond_slave_1: left promiscuous mode
[  256.454794][ T7635] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  256.464385][ T7635] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  256.484940][ T7635] bond0 (unregistering): (slave bond1): Releasing backup interface
[  256.493624][ T7635] bond1 (unregistering): left promiscuous mode
[  256.502246][ T7635] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  256.512150][ T7635] dummy0: left promiscuous mode
[  256.523534][ T7635] bond0 (unregistering): Released all slaves
[  256.632243][ T7635] bond1 (unregistering): Released all slaves
[  256.645676][ T7635] bond2 (unregistering): Released all slaves
[  256.719514][ T7635] : left promiscuous mode
[  256.773989][ T7635] tipc: Left network mode
[  256.817619][ T7635] ------------[ cut here ]------------
[  256.823460][ T7635] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  256.832016][ T7635] WARNING: CPU: 0 PID: 7635 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  256.843389][ T7635] Modules linked in:
[  256.847537][ T7635] CPU: 0 UID: 0 PID: 7635 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) 
[  256.857631][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  256.867878][ T7635] Workqueue: netns cleanup_net
[  256.873465][ T7635] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  256.880543][ T7635] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 20 3c 89 8c e8 b6 36 ce f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 97 1a 0b f7 90 0f 0b 90 42 80 7c 3d
[  256.900513][ T7635] RSP: 0018:ffffc9000aab7220 EFLAGS: 00010246
[  256.906597][ T7635] RAX: 88056c44907e9600 RBX: 0000000000000000 RCX: ffff888044d49e40
[  256.914636][ T7635] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  256.923137][ T7635] RBP: ffff88806dbb57b8 R08: 0000000000000003 R09: 0000000000000004
[  256.931632][ T7635] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff88806dbb6a90
[  256.939670][ T7635] R13: ffff88806dbb4d80 R14: 1ffff1100db76af7 R15: dffffc0000000000
[  256.947818][ T7635] FS:  0000000000000000(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000
[  256.956833][ T7635] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  256.963895][ T7635] CR2: 00007f13d817f920 CR3: 000000000dd38000 CR4: 00000000003526f0
[  256.971940][ T7635] Call Trace:
[  256.975583][ T7635]  <TASK>
[  256.979172][ T7635]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  256.985209][ T7635]  __ieee80211_link_release_channel+0x33b/0x4a0
[  256.991842][ T7635]  ? __pfx_ieee80211_uninit+0x10/0x10
[  256.997737][ T7635]  unregister_netdevice_many_notify+0x1cde/0x2390
[  257.004363][ T7635]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  257.011320][ T7635]  ? __pfx_call_rcu+0x10/0x10
[  257.016123][ T7635]  unregister_netdevice_queue+0x33c/0x380
[  257.022036][ T7635]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  257.028383][ T7635]  _cfg80211_unregister_wdev+0x165/0x590
[  257.034081][ T7635]  ieee80211_remove_interfaces+0x49a/0x6e0
[  257.040462][ T7635]  ? __pfx_synchronize_rcu+0x10/0x10
[  257.045839][ T7635]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  257.052604][ T7635]  ? rcu_is_watching+0x15/0xb0
[  257.057593][ T7635]  ieee80211_unregister_hw+0x5d/0x2c0
[  257.063072][ T7635]  mac80211_hwsim_del_radio+0x275/0x460
[  257.068695][ T7635]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  257.074803][ T7635]  hwsim_exit_net+0xef4/0xfb0
[  257.080048][ T7635]  ? hwsim_exit_net+0x333/0xfb0
[  257.084905][ T7635]  ? __pfx_hwsim_exit_net+0x10/0x10
[  257.090583][ T7635]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  257.096433][ T7635]  ops_undo_list+0x49a/0x990
[  257.101081][ T7635]  ? __pfx_ops_undo_list+0x10/0x10
[  257.106198][ T7635]  ? do_raw_spin_unlock+0x122/0x240
[  257.111709][ T7635]  cleanup_net+0x4d8/0x820
[  257.116161][ T7635]  ? __pfx_cleanup_net+0x10/0x10
[  257.121319][ T7635]  ? _raw_spin_unlock_irq+0x23/0x50
[  257.126642][ T7635]  ? process_scheduled_works+0x9ef/0x17b0
[  257.132413][ T7635]  ? process_scheduled_works+0x9ef/0x17b0
[  257.138377][ T7635]  process_scheduled_works+0xae1/0x17b0
[  257.144278][ T7635]  ? __pfx_process_scheduled_works+0x10/0x10
[  257.150339][ T7635]  worker_thread+0x8a0/0xda0
[  257.155137][ T7635]  kthread+0x711/0x8a0
[  257.159251][ T7635]  ? __pfx_worker_thread+0x10/0x10
[  257.164367][ T7635]  ? __pfx_kthread+0x10/0x10
[  257.170293][ T7635]  ? _raw_spin_unlock_irq+0x23/0x50
[  257.175559][ T7635]  ? lockdep_hardirqs_on+0x9c/0x150
[  257.181226][ T7635]  ? __pfx_kthread+0x10/0x10
[  257.186213][ T7635]  ret_from_fork+0x4bc/0x870
[  257.191436][ T7635]  ? __pfx_ret_from_fork+0x10/0x10
[  257.196645][ T7635]  ? __switch_to_asm+0x39/0x70
[  257.201727][ T7635]  ? __switch_to_asm+0x33/0x70
[  257.206496][ T7635]  ? __pfx_kthread+0x10/0x10
[  257.211464][ T7635]  ret_from_fork_asm+0x1a/0x30
[  257.216362][ T7635]  </TASK>
[  257.219490][ T7635] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  257.227056][ T7635] CPU: 0 UID: 0 PID: 7635 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) 
[  257.236629][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  257.246962][ T7635] Workqueue: netns cleanup_net
[  257.251759][ T7635] Call Trace:
[  257.255096][ T7635]  <TASK>
[  257.258035][ T7635]  dump_stack_lvl+0x99/0x250
[  257.262923][ T7635]  ? __asan_memcpy+0x40/0x70
[  257.267570][ T7635]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.272789][ T7635]  ? __pfx__printk+0x10/0x10
[  257.277682][ T7635]  vpanic+0x237/0x6d0
[  257.281691][ T7635]  ? __pfx_vpanic+0x10/0x10
[  257.286267][ T7635]  panic+0xb9/0xc0
[  257.290005][ T7635]  ? __pfx_panic+0x10/0x10
[  257.294544][ T7635]  __warn+0x31b/0x4b0
[  257.298532][ T7635]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  257.304357][ T7635]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  257.310088][ T7635]  report_bug+0x2be/0x4f0
[  257.314518][ T7635]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  257.320255][ T7635]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  257.325982][ T7635]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  257.331721][ T7635]  handle_bug+0x84/0x160
[  257.336649][ T7635]  exc_invalid_op+0x1a/0x50
[  257.341362][ T7635]  asm_exc_invalid_op+0x1a/0x20
[  257.346437][ T7635] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  257.352893][ T7635] Code: 8d 8d 48 0a 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 20 3c 89 8c e8 b6 36 ce f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 97 1a 0b f7 90 0f 0b 90 42 80 7c 3d
[  257.372528][ T7635] RSP: 0018:ffffc9000aab7220 EFLAGS: 00010246
[  257.378800][ T7635] RAX: 88056c44907e9600 RBX: 0000000000000000 RCX: ffff888044d49e40
[  257.386804][ T7635] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  257.394793][ T7635] RBP: ffff88806dbb57b8 R08: 0000000000000003 R09: 0000000000000004
[  257.402884][ T7635] R10: dffffc0000000000 R11: fffffbfff1bba650 R12: ffff88806dbb6a90
[  257.410865][ T7635] R13: ffff88806dbb4d80 R14: 1ffff1100db76af7 R15: dffffc0000000000
[  257.419061][ T7635]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  257.425283][ T7635]  __ieee80211_link_release_channel+0x33b/0x4a0
[  257.431652][ T7635]  ? __pfx_ieee80211_uninit+0x10/0x10
[  257.437052][ T7635]  unregister_netdevice_many_notify+0x1cde/0x2390
[  257.443590][ T7635]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  257.450465][ T7635]  ? __pfx_call_rcu+0x10/0x10
[  257.455177][ T7635]  unregister_netdevice_queue+0x33c/0x380
[  257.461087][ T7635]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  257.467346][ T7635]  _cfg80211_unregister_wdev+0x165/0x590
[  257.473000][ T7635]  ieee80211_remove_interfaces+0x49a/0x6e0
[  257.478907][ T7635]  ? __pfx_synchronize_rcu+0x10/0x10
[  257.484302][ T7635]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  257.490642][ T7635]  ? rcu_is_watching+0x15/0xb0
[  257.495517][ T7635]  ieee80211_unregister_hw+0x5d/0x2c0
[  257.500906][ T7635]  mac80211_hwsim_del_radio+0x275/0x460
[  257.506467][ T7635]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  257.512555][ T7635]  hwsim_exit_net+0xef4/0xfb0
[  257.517350][ T7635]  ? hwsim_exit_net+0x333/0xfb0
[  257.522301][ T7635]  ? __pfx_hwsim_exit_net+0x10/0x10
[  257.527516][ T7635]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  257.533339][ T7635]  ops_undo_list+0x49a/0x990
[  257.538044][ T7635]  ? __pfx_ops_undo_list+0x10/0x10
[  257.543599][ T7635]  ? do_raw_spin_unlock+0x122/0x240
[  257.548817][ T7635]  cleanup_net+0x4d8/0x820
[  257.553237][ T7635]  ? __pfx_cleanup_net+0x10/0x10
[  257.558277][ T7635]  ? _raw_spin_unlock_irq+0x23/0x50
[  257.563487][ T7635]  ? process_scheduled_works+0x9ef/0x17b0
[  257.569390][ T7635]  ? process_scheduled_works+0x9ef/0x17b0
[  257.575125][ T7635]  process_scheduled_works+0xae1/0x17b0
[  257.580723][ T7635]  ? __pfx_process_scheduled_works+0x10/0x10
[  257.586848][ T7635]  worker_thread+0x8a0/0xda0
[  257.591508][ T7635]  kthread+0x711/0x8a0
[  257.595626][ T7635]  ? __pfx_worker_thread+0x10/0x10
[  257.600750][ T7635]  ? __pfx_kthread+0x10/0x10
[  257.605354][ T7635]  ? _raw_spin_unlock_irq+0x23/0x50
[  257.610820][ T7635]  ? lockdep_hardirqs_on+0x9c/0x150
[  257.616134][ T7635]  ? __pfx_kthread+0x10/0x10
[  257.620793][ T7635]  ret_from_fork+0x4bc/0x870
[  257.625452][ T7635]  ? __pfx_ret_from_fork+0x10/0x10
[  257.630696][ T7635]  ? __switch_to_asm+0x39/0x70
[  257.635472][ T7635]  ? __switch_to_asm+0x33/0x70
[  257.640326][ T7635]  ? __pfx_kthread+0x10/0x10
[  257.644930][ T7635]  ret_from_fork_asm+0x1a/0x30
[  257.649982][ T7635]  </TASK>
[  257.653488][ T7635] Kernel Offset: disabled
[  257.657963][ T7635] Rebooting in 86400 seconds..