last executing test programs:

3m0.841503575s ago: executing program 2 (id=25):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0xffe0, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0)

3m0.779657354s ago: executing program 2 (id=28):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) (async)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async)
r5 = openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async)
close(r5) (async)
sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000580)={0xa, 0x20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="c5df6a3b", 0x34000}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x900000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000e40)="af", 0x1}], 0x1}}], 0x2, 0xc0c0)

3m0.729145109s ago: executing program 2 (id=30):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x80047453, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000)

3m0.654961959s ago: executing program 2 (id=32):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4)
syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @remote, {[@end]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
recvmmsg(r3, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
sendmsg$nl_generic(r0, &(0x7f00000077c0)={&(0x7f0000007480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000007780)={&(0x7f0000007500)={0x26c, 0x11, 0x200, 0x70bd26, 0x25dfdbfd, {0x1e}, [@nested={0x54, 0x113, 0x0, 0x1, [@typed={0x38, 0x10e, 0x0, 0x0, @binary="d186e608998bd9162e2f135fdbce6945ba6506f624a5074bac7b0877bfaf35f247d2efc21628ec0d8003f057c1970eeaf6cb1fd1"}, @nested={0x4, 0xd0}, @nested={0x4, 0xd9}, @typed={0x4, 0xf4}, @nested={0x4, 0xe}, @typed={0x8, 0xea, 0x0, 0x0, @pid}]}, @nested={0x189, 0x12c, 0x0, 0x1, [@generic="ba793ca215311c7e9f131aea99d85ee0eca43247589c1ac6302f3cfbee3fc53c3b5862a8d606dfa0befafe8762194c2378e2660081b59686fa8efef4451e7c99d6caad04d92e689715b1297b5325a68dafafd8b64796866fc47c6856d75fea4fa326135343987a4b084da119db4a014187001c253b759733b8663f5b9aa2a5ddef969c7b96db4f088cf768684fa2428d7bc820a09797959525110cb70adc96cf606444090aa683fe9c5d35ba21ffb5ed947deac23e27e92b2f8388448964e262d64debb3", @typed={0x8, 0x14a, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x4d}, @generic="cd9e2c665f22d761d25129bf24476ac34512cd17daa5527411157803e6e7a31696df32a40164bf46d64f622c095aa0d0dcc15f8729854d449b8c0bed8effa2c71963b92d335a9d60257d66a38bd0cc1888ca6392c2b730adb61132f3bcd4d937d23e1832789e544eb277a345cb7c9cf644c43f3d6c4d864a7e1aa009fe0f0e4cd9bb3f320e01e9e4053a1d456804587e70dff3180c91290cbc7ff4ecb97d912043162aa5fc5ce2bf5aa014be318efc751e51af2dce"]}, @typed={0x14, 0x800, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x4b, 0x0, 0x0, @uid}, @generic="2e9ae46883b9c2a78ee5d221905dcb789fa5b592627b6b9f50cca250c2e60773c74b1ae6159e6dd5aa0ef104d40e764dc8a0232dc021eb19a82b7a879dc62ab034bebf8174d175fe1461ed2cbc125fd1424cfbd96a62782985acc2"]}, 0x26c}, 0x1, 0x0, 0x0, 0x42014}, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140095000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000226bd7000fcdbdf253b00000004008e00"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
listen(r2, 0x0)
accept(r2, 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x6, 0x1)
socket$inet6_sctp(0xa, 0x0, 0x84)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r8 = openat$cgroup_procs(r6, &(0x7f0000000100)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000000c0), 0x12)
preadv(r8, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x11, 0x20002)

2m59.761308035s ago: executing program 2 (id=45):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x77}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
unshare(0x60600)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0xf3b, 0x63)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x4, 0xa}, [@algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "35f6fd8fd57fd44aa5074c50bcc4059acb"}}]}, 0x150}}, 0x44000)

2m58.361082585s ago: executing program 2 (id=50):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x20, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}}, 0x20}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
connect$vsock_stream(r1, 0x0, 0x0)

2m58.292300898s ago: executing program 32 (id=50):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x20, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}}, 0x20}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
connect$vsock_stream(r1, 0x0, 0x0)

1.359597505s ago: executing program 1 (id=2836):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000001000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0)

1.298884711s ago: executing program 1 (id=2838):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
r1 = socket(0x21, 0x800, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x52, 0x1, 0x2, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x9}]}, 0x20}}, 0x0)
r2 = socket$tipc(0x1e, 0x4, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x14d}, {&(0x7f0000000280)="5b4ea80f20d7212327afde5e7a457cde2dff9073f71979", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0x1000}, {&(0x7f0000000080)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc78a12ad1a30e4f7038336f1af1d61b0409988f1755e9b3ba9919b2a4952ceda920f5f0e22dd247d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870691200e428d5dcae697fa5a1e48df472ebb098aeb32e4049eba9f92be1ef1b6609f2b91c449dca240f", 0x95}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x4000000000001f4, 0x81)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='kfree_skb\x00', r3, 0x0, 0x8}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000000)={[0x7]}, 0x8)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x54}}, 0x0)

1.135952068s ago: executing program 1 (id=2842):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

1.133998862s ago: executing program 1 (id=2844):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000001100000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0)

1.079378105s ago: executing program 1 (id=2845):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4, 0x8}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0)
listen(r1, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
poll(0x0, 0x0, 0x229d)
accept4$tipc(r1, 0x0, 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x88, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x4, 0x0, 'Qh'}, {0x1, 0xe, "78676b5529157c4a4f2468a8f55ab301a031c43b00a9d84d0a2336bb418ea68a2e44f59b8f4d4beae7bf367e646889390c945b9efb324d3ace080eaf2477ebdbb7bf1b03371a36b22c4192c19a9c68215d40fb38ed96129794604b1ff4171f0091c19f35f0e25a2626f54aad286f"}]}}}}}}, 0x0)
unshare(0x24020400)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r7 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r8, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5ff691b6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000004)

542.355343ms ago: executing program 3 (id=2852):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r4, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r5=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r5}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={r5, 0xe8, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2b}, @in6={0xa, 0x4e21, 0x4, @empty}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x8, @mcast1, 0x703e}, @in6={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffffeff}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x988, @mcast2, 0x57ddd184}, @in6={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x77c1}, @in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000000380)=0x10)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r8 = socket$kcm(0x2, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000400)={r8, r7})
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x10, 0x4e23, 0xb, 0x2, 0x80, 0xa0, 0x6, 0x0, 0xffffffffffffffff}, {0xc622, 0x6, 0xf, 0x5, 0x4, 0x8, 0x7fff, 0x80}, {0x3aaf9b66, 0x0, 0x5, 0xe8bb}, 0xd5, 0x6e6bba, 0x1, 0x1, 0x0, 0x1}, {{@in=@local, 0x4d4, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3506, 0x2, 0x3, 0x62, 0xe494, 0x3, 0xffffff7f}}, 0xe8)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x414, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x401, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x311, 0x64, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r10}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r10}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x414}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x800000, 0x2, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20044050)
socket$nl_generic(0x10, 0x3, 0x10)

448.755803ms ago: executing program 3 (id=2853):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfe, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003b14000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="5ece77491933be368e788d71f948fb541e435d348245672e1faabb846f785223497963ef855c"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4)

448.340664ms ago: executing program 0 (id=2854):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

377.463482ms ago: executing program 3 (id=2855):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180100000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000368000d8008000200ffffffff0400030914000400fe88000000000000000000000000000114000380060001"], 0x118}}, 0x0)
r1 = socket(0x1, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}}], 0x2, 0x60, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x13, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x7, 0x1, 0x2}, @generic={0xb, 0x1, 0x4, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xe2, 0xa, &(0x7f0000000040)=""/10, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x9, 0xfffff800}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x4, 0x4, 0x1, 0x4}, {0x0, 0x2, 0x4, 0x5}, {0x4, 0x4, 0x7, 0x9}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x6d, 0xab, &(0x7f0000000440)="57398cd16a81a5f1c539ab5fd0c6b5bbc8f7aa756324e9bb4e68f6a4ce54b2599248280dfd8e22fdec3ce3cf0b49be3730263fa1d4eb7a2ac2ea9e34a1bb8ba983759d49073a0e9abb294158fcb1aba08e3b013bd0507a0a133c746da06bb6a4e22a909fd8ba6116482f3d587b", &(0x7f00000004c0)=""/171, 0x48, 0x0, 0xf5, 0x29, &(0x7f0000000580)="3cbe64084581c0f8055ab959c2117dd93061f17b8199e46a41a531ba191758624e8e3ce201d698fc186c83c3141cadc01e802d92bdc0910a7e6d9d69c50c7c9508703bd3b09820f50441f255e6c1a1806078acc702b1afcfd8f6be228f48b2891f1fa399ac4dff9f82419cc9af7223b389677b9757f3ca558e5ee855c4a9336ebe9e357aed58a2cfd819af51a14e81e9086e1f38441707e577dde9384428fadf0c599864badb70212e968b4334abaad492153c8b413d33420daac4558449474ad0aaccebec2c51fd6d30d891eec5fb8959199806ed87b1f5d9b77b1cba04668cfefef36436531a26fa0f7e42a7b256dc9ebdb0fcd6", &(0x7f0000000680)="692daf780636a8d8cf80e5a42109201d14ba0aea9728f9d35ce39f31440c9d7a5d86eff47f6663097d", 0x2, 0x0, 0x3}, 0x50)

375.697851ms ago: executing program 3 (id=2856):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
unshare(0x2c060000)
unshare(0x2c020400)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYBLOB="41bf0359dedeb1c9a2af5381a5e01b0749a78b97f0047d6f64b166f1c4bdd43a558ca6ce35d71616429ddc0de0190ec6fa84fffe5aff637d197bfbc63394a4dc076cb4b826235b5953a530060efd532bd1f87fde32bd", @ANYRESHEX, @ANYRESHEX=r3, @ANYRESOCT=r3], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r4, 0x952de000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r5], 0x40c}}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x55f2, 0x0, 0x0, 0x1000}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000200b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000c62d3fb0010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f00000001c0)=0x5, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000000001050500000000000000000a0000013c0002802c00018014000300ff01000000000000000000000000000114000400200100000000000000000000000000020c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000400000000000000000000114000400fe8000000000003700000000000000aa080007400000000140000680"], 0xd4}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
close(0x3)
writev(r0, &(0x7f0000001800)=[{&(0x7f0000000280)="738bd5aa4c68b9cff58ea3f28a6949d5167c66258531840f326d39340e4737d4017ada2d0bec30ebc78b71b8e3040eaff281501e9c023b8a4290a980c87cb54088023ba966f0d52a3c1e30df0571c7437f2ddb4b675a9b1399460129eb6e413bf36876f46b3677f694ad91f035e57010a9f86a30eafee4cc2ed59503b3111d154380ecebc7f6f7d66a95abbcdac32c591dc66fe28677", 0x96}, {&(0x7f0000000640)="583a270250e479dc35a34721f2e6b293f3809449daeb8428d58681fd5fc9608332ccf8499fe7e1337e9e20ebe0dfd71a5f3fe06fb6c18e1e342ca715910b686f4d3f6ad2dc48d1155acc6d5e4be5c441367c6835f2088a87240859fed7112a16802df5d31b04c38b394141d795d9a184b17e758bda3c380341a5140dedd9975b58eb1e1007fa7ff3aa16974f59cd09ca55ab39ef89c15ec987e8a4dc665fd3fc53e55fbf56267ee56f4e06e1416143cdb3bf27cc4af3cbcd2faecb31fdaee0aaf537c853e0427bfff86dd7a2577a1ea80c716cc383d87b3f2081e8131a455fd4be23ca5a67e957be67f05cab6cf74b15c9907fa286c8afc6329b9117608580e993c01270df079df7bda6dda08df12bfd3a4003793aa478e5cc68af851c08134773d6e9315bba71d2664ba197c2d167e1064e48c0207dcc0e564b507e4f395864518c70d9b9179883798f44a4deb055144e93fb9540cf8512ce86eedac54a88105be8e5da399f80a6461ed7dbe53277628c47532265f036c6d904ca72be8a9b4e91c1d9482559be92e0dc6b08d06a42dd204964f64ebacbe0b6e28d26ce51975581297ff4d475bb0f641bbf31f38340efb896677ae3a648fea9037676dc11ed48db0ba678eae06656a3d9fb33eacda46f4de8c1319cb559f8661df3092766ad8be24180b4fb57d9f5194e8dd443060deb467606ce6917dcd80e858c5ee6f73adcbe4a59fb57c650b101dc0182ed8ac19f1973c683372387cad2090e373ca18a71ff642b72bb7597e05bc1d4e5fd139dc1d9630ccfa26c646a3c9735a07c8eff3c7609015ade36c14dfb4113467626a3ee0f0d66340613345ff25b15bb89f37cad4f76964c7abaabbab615a7e1c178dd7b90f032bfc5bdc8552dc71c37a545b5aa2f8490f2094624b564f9efab5195a4fa8e71308f09b377f3be88f2fd1438da8f1d8b1b403f20d026ac2440d90c9292cdd1e95f72fc5ffddf18be1996431e99c11dae69827ea6318240eadb0b4f7e969ec6509781b522e3a8fbb7e6e80d8129fd5b6bf8c92c1ba9030efe6c4cd6303102371b3009755a2160debd2af334160360d0a6365df5e8fc4c261567cdc029c4ed9be616a3ef2294805fcd0efe31cd35b7d6e1c6a7c6b3237f38aaab65b25b4997e36b27ae4a37b4b86244d4ef2b5ce75be4a4be73b8f92acb5a9942a298c7a3c9cdf6ac88228dfcf4e88c5973ccf60f37af217d463ca30af206d0fca3adb4f1b6ee52efd0f0f29f7823659bc4e9d4c050527a218d7a37902fa1cf5fde080c27bbf87745b16fd6557a00b4773fe5aaf9f687fe4be9a6a136f082032cd0ad694d292319215b10c4339fac9aff052394a2eeb6b7c399117d0544fef099ffc8bb80250870d1ce72b56d0a860b5c9996ebcc285fa098bcda74b5c48467c0b753505f4a46bf624684f7fb60e69c243a9d6d86b22cb70f057f316a867c9eef1e767406bcf637201a033ee6a54f9c8b43dfad71a0f8425e0183557837595b00f8ccd63d829f9813635c20ab899c2bb3d2cb5fe72bd8631f2306232cce07ef1818f538472ed2eb73278a95d23951e6f72999d2a4621326f2034e723efed1e90f46fe8d9528aa75a5b569c36eddfc140838443726f01a19c5ab4588d3fb3af74b98d7869599b45e49c4fadfa1cdc6d76fdb6d08489ec5fad223e7312351bb13fbed6588980804ed3351fddb01294c98bfb6c42a179d9fba659b16bc7ee9b4547bc07d011033dee8768956dad2320c1a283e457e65b0aa9962da15976ad10476b7ae2f3be65a9a902fa26f5267734c7665d5f02edf7cd562ffa167541ea785267631cd303a589c8b290c647d1183449534333c1035236b60b99fc135c027902ba8dbc2764c38f190c3132467fe74ef40440e7af5d398ee9761407e0623ba8709788903fc621f46086d957e28830b8c32e24c2ef99817d40848681087e1f84eb9b4b7525ebf3f482ac9e126e2f39ecbdfe8401434456c0a711c6c688c43a787a879ba948ecf095c42c80fe2fa40363f0ee676f4bfe17a3e72d101be24aafc66097907a310d116947182f4b1e4250bdd1487c7e474bf472a82336ff507ce08f9483c6c6ab5e105ef8f8a568eb634a14f4f1864953d5262ad0076f1c0e70974016cf8314b6c3a5d28f04ad2b16b126a867bb59c5928316d59e57ad643a543ea777847123e3d580395f7be0f659af3cb42842c99c6701ef10f60243b8969c10f73dd95fdeebd363d943c2e2c542e3f4732edc53ec78e9eacd88a4c9e88d92b83dcb0f7975ed93f1a5750dee5387a660a56ac4415f78aaf8ed6560decc6e9aeffa97c5059c034b68f4ff4234ca6f62c3195dafd9465c4feb882a72b4d379f1a4cf9ccd7b41751b6e4041ed4798c1316e0d23b7a451a7bb9a76c7c66cf320fc848255826dcae3cedb365b19a5c97905efce25d3213d94773e43c8675d167efe2f7f5ed5b86557a9d6abdd0379d3363e5ca1c018180a491a5fc1fb43ad0de62b16e999be8efeb2ad706c0f6c470d062b4cf4b71486639940aff58fa133204d5bccd7e81691b25f231365a8c3677b145ce8f83362e0b3d56daf7bdfb93d4cce484a81fbe45aa9bd6a4fdd986e97b155b9cce2a9c1cda7c546de1d6f71744c4bf0043bdea9cf479ade9383c082cbbf0ef4d78f94185e7c63e56157c57f1453a5622ec30cdde114631e24b1aff62716ad76cf295deaf8c69f55821ef0994e581671ebd5d3db6bf0ab1fdf04846bb50b535140a8d3dda52a9eaeaa57c665e537fb0ce9ee94bc47e427c9b00afd911e5f8b61a547a08a455d54754c1bcae19aae37988acb5971585729987bc0f06679bb45a8eaed6dd2e6fba9ae6a8dbd93ca02a770b6d7296bb150e739a023ee8c41cca1f98f17d7f11dcaecda4157992f882957b5e1ad9c578eb770aaa9e71daefc5162ae19ae206494e90e53a5bb88efb2b7f7f4dc8d8bfa399c01e5bca864851218a0186d3f83723dae7ed3851fd5077aa631ecf9d3a23cd6747b6b295d121c9c8afd62a86bf7386f51cab1a421eb6de706133dac5f04154c4251e41ec0c3a6757e02e2165715d67a4826522f2ab3f3aebdb2be7e0d02bdc9e4aa033ed5d1e35e913c1ae50ab227c7d4da95ed67a94e4432ae0b8f0bb85d5382ce80442f65b4b97cee6ba244b2e60bb08f10b7156bdc6d8cea7b5c4d1ca61658a8bd7a3b6e0fbc0a110aa1e87b22c7a4a715209633a549e3bcea7877bae9145c1717febc7b052c8b44057dea8eddbd691c81a077ea5b8f62b9267be49a45bc0199b810ac614ee9013f37741780bd85233eaefe725e6ab57b4f921d6873e8c9fc82d4ff72cf02b2f8f644a6ac95940482a661a7b7fc01830843c6f1f6ee0270e05bff4f948c2c0480c17ee1b0f828907fc51b50a8fe553ce9e6ca4a808298eabe84ee275cf542d90b530c35efc1f4c921aff16ffe79f0e333c64d64123b607027a2662fc7895ba504777fa117cec0558f3b7810ae47462f9a814046b3b4716f62a37e29bdea650d5337758b232406d9c7682fd8199e8a186edf0d2ebf22940a7edeb3d2570b92e30af3a994ba38057cb5be2acc6ac4ac57c27bfce075b3d71362c47619a4f1e8a09d44fd935c556003a30ab17fc522604d27982df41296c6b1d522cc9cae1908ab0ac46e7e1c6edf931086d5c3eb9e0bed2099ca02dd98e914aecbaa6feee8d825fb242a8f7b3b5ae4739afd62bd1689055a69bd1bd00856f4fbbc568596343dde24f1c2ded9e80bdd6dbaad46d8c414556c36b32c7e0886d0012a6f026e47faa69f87f0687ae52771e9022aa9b03ca80ad0f03f89b1d9fb90db076ca9d4739c19834c238ce794691efefb378604cf03f1d6e161534344a544d0ea54c522bae3d11d0d29bc4dfc13d33a2457a0051bd16b2080d3d49f4870592bbb86e0abb013f81b40f55434859cdc20c10dde964aba4095c971b6a767f1fa16b8ecf0ae4e234d93dd610792ad8babfe08b1edb2f3461b4ea8d4094bb9b8f2c2335ed0d589dbdd2b833a72b6f8a28740f5d9e2087a7685957620ab8ac275383bddf11121eb4a160e2b4ba27df0509dbbb3ec40939422cbd2e59ca23a645fb6fb8b99b9ddc24314596fe7979aadc5b0118d6cce7ff1b3a0875b7da7691fa40d6715db59b817bd158493badabd3b8daa1ea018e150d90d65e6219558dc53bf1404ce019d68b2efa10115a6dc2f45ee7e374cbf1495e606945d4a4e2a6aea05497aee4adc1230d384c355c3124b6be51519ec3afdc377f7cdb7d747ba3ed6d6d258184ba49557f4dcbe2cc6c396941191f92d1b856a9c9347ce68b5078fa4f5b48e96f0d567e1ffbeb8156a898567cd71258ec99b37f46dcdded42414bc040cee5f6c226fc818009952c433f73d5283706af21b687f5f924aac28b1e9954b031165f4c830fd9b6d81894f1adad3903f3ae666aa5be5de431c81fb0bb1665513c35221cd91428c44c000d078f907aa7802c1bcfb6edc3e0f6aac7753fa2e616faae2de1a1ad778acce74e5d99a1648a2b4944ce9b6e7b404ddbf4ea6886396403c75c91007ca28ff088a10a11094373822bf0230cea3e1c83a0abe3176e4864ada3a9dc24558d3b43b962029280276b763041825139026963fcb8672412ac24be63f88fea945be1e8745b84fb2af6658cfd472c1fbd13d62c5dcfdb678ad9224eca965d6f00906b62693e1e59c9be8c3f4bfc61d05946bd3d6a02968adde2abc9e5b7a53fc462bc58acb08907200dfe74702a70c277ba973212a2698d34fadabbf2bf1e2b7188357bd8ba18ce67f222723e263c35e7ba7ec034afaf5b242c59a55f3d35748aa092bd6e9e302ae5ee20101cc140f709498a79378d4e9c4a2b0ad3a36109dd0e8b81b2afdd6ea0af2c0e8b090ccb022855e0e32449591645c8b70ee82855e1b9221ca0308fae11478b423fbe05209b3abece4d1ee26c2eb84e3ee33be48bc1e80f6f61199e245cc24aa465c67a75c42370c744b8713d79237b6842e88df71ed3b5d4c1ad376513f7ca87c5a96586a5f72531404b8eb111c066e7a6d9de6102abeb0ee63eb73c9e5ce8c006c29587a6cd60f9b1370e20c5086a1323ed2fa923f3677f0a72c734bb419b34fd68a967827643de98d6212b2cf58e7a23f6f5e4ba18f7076315de0fa3f67514fa4ec47774d53bbdb161630a91c9b64e6b5cad3392b306b669418b5847b2a0046bfe4bd6e9f3d17d6fabb1e07ceb26bc0507dee73d7989521fa57acdc17173621083c51890d207af2b753afc07f55f5e24ea558fdadcde2df97715f7075049bc667452ce133f9d53e5c0e14bc57798c77862dbdf35c3fe0bcf5b2671fca95fce6afe0b9b7884c8051a288fdec743d9445293a81b233cad3dae92160adeddaea7b186b62865991403afb6989feb4c5ccd4e213a6602478715bae256a0ba5534e81296fcea4c40c76fae9221cfabe6c09664af9fbadc3409a3b31339a0a1ec74e044657081e3265ccb7bc2daeb4667655a97f5f794fcdd582c53f45a1c56225a1b786b2214a2cdee246432f145997c18c3de90ab337704409d26f080bdd44f55f59967be7e8dd97143206bd816362a5e69ea23a38b9b4cb0292a1f34b80189e99a2d3078a15ff810bc65c20f0701bc4b2e55d0a1f08a19088388e68d0863fa18d29c4b278b77955a9e62a927711b34a9ef1ba3aac758b4d15bc284f10c30b397a9e339a3d3e87e4e77425da9c2bc27b33272cc07e8a904067bb4f7972f8df352644e5f5faa43781d9161f8ec2c50a795bc8fdadb97e288b6b4333f65aae7778f9b8c5442d6a0c1", 0x1000}, {&(0x7f00000000c0)="9c4e855809941724f721bed35bb029884db77e91f58b255cdf2563dd4dfc4d5c2451b2c41d54b7c8d15c8e5498fa1e78b328ede3", 0x34}, {&(0x7f00000001c0)}, {&(0x7f0000001640)="9c8b210f9978e1a56cddbc0a00f456cd24bf8ddbd5621c6f8fa1813d1e8674185201d7fef2d4341145c63e6379e3c911e172f4587cb6e8a09357d15e5bd2938a2501de2a48004b4b61ad90030d90221532b956ff74d143d1b2fe76d0457c1a4715c6c5d6bae4ecf01ed21948832e4a7fb93f7e4cc3e0ed026f24bc38", 0x7c}, {&(0x7f00000016c0)="7994ba2932400673656df757709db0c221e14c72d16d1dbc2a6a342f8ac4b537e598bbb0b331f0eef39f25ed51764ea4ee3a8622a6160977eff37c9a63fb31e2a8efd680dc9c75158a2a21803f08fe673477999ecde6305a0d4b2eb7d8fe162f929a439b61ca51", 0x67}, {&(0x7f0000001740)="c16b3adeb804fa48a08b8babe0722f2f9072c4063d7ffac228689caad41153133a3fde3d4d3e637fe41337c97bce8160c112a51c97f141196587fd8a6784eb1a766218a1cd252ef5860a7bb2050ed4b2323b1fa7df534af407cfbfd33e90d3e6fbbd2bf551c92787035a0b7d3d5a68a18408ab7b79b337b700a77a64a7c2", 0x7e}, {&(0x7f00000017c0)="173aafd6284dbf1a0763fcaa64a9c56e280fe2eaedc80c92b0c26c2fb80338998226223790f214e06a535c603b2c", 0x2e}], 0x8)

257.066835ms ago: executing program 3 (id=2857):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) (async)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004005}, 0x801)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000200)={0x0, {{0x2, 0x4e22, @empty}}, 0x1, 0x9, [{{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e23, @private=0xa010100}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @private=0xa010102}}]}, 0x510) (async)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000740)=0x8001, 0x4) (async)
getsockopt(r0, 0x6, 0x9be5, &(0x7f0000000780)=""/147, &(0x7f0000000840)=0x93)
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f00000008c0)=0xe, 0x80800)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000900)=0x5, 0x2) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'bond_slave_1\x00', <r2=>0x0})
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000980)=""/247, 0xf7, 0x40, &(0x7f0000000a80)={0x11, 0xc, r2, 0x1, 0x9}, 0x14) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000ac0)='dctcp\x00', 0x6)
r3 = socket(0xe, 0x0, 0x8)
sendmsg$NFT_BATCH(r3, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x9c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}, @NFTA_SET_USERDATA={0x3f, 0xd, 0x1, 0x0, "3461b3984263835ce097120121a558b3b5750f1209f061c447978ade6a8508703da52086b16fb0f884a680b37ac934a66b062823a173e07d3a5f42"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xc4}}, 0xc000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000cc0), 0x4)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000d40)={{r5}, "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"}) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001d80), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000001e80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000022c0), r3)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x44, r10, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x84) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000002500)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x44, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8090) (async)
socket$unix(0x1, 0x1, 0x0)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002580), r6)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r6, &(0x7f0000002640)={&(0x7f0000002540), 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x1c, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '*'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20048080) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x4c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x13}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x400c040)

166.987964ms ago: executing program 0 (id=2858):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000001e00000000000000", @ANYRES32=0x1, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500000000000000000000110391f3d62d2e610941000000000000000000"], 0x50) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000040), 0x9)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020500000f00000000000000fbdbdf250800120000000000000000000000000006003c0000000000000000000000000000000051050000000000000000000000fe80000000000000000000000000002005001700000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}}, 0x0)

165.90074ms ago: executing program 3 (id=2859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="30000000680001b44a6a9d00fdffff7f00000000000000000c000200010000001500000004000400060003"], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000083000000000000000000000085000000200000001801000020696c2500000000a43320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000001a00010003020000000000000a002015fc0000000020000005001b003a00000008001900", @ANYRES32], 0x2c}}, 0x200000c0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=ANY=[@ANYBLOB="3000005e9513322d4680003e000100fcff07000400000001000000040000000c00018008001080041008800c00020000"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x69)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18d28d0661c19e0000000000000200000000009500000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r8}, 0x18)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r9)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8901, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r11, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r11, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r11, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110c23003f)
ioctl$TUNSETOFFLOAD(r9, 0x4004743c, 0x1a)
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000100)={'syzkaller0\x00', @random="eeadcb9d1ede"})

97.810383ms ago: executing program 1 (id=2860):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a0b0400000000000000000200003d0900020073797a32000000000900010073797a30000000006000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001720000180070001007274"], 0xb4}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x90000009})
sendmsg$nl_route(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000010000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004049}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/432], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf2507000000140001800800fd007f0000010600010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x441c0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r8, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac=@broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, 0xf, 0x1ffffffff}}}, {{@arp={@private=0xa010101, @remote, 0xff, 0xff000000, 0xf, 0xf, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x8, 0x4, 0x5, 0x7f, 0xfffe, 'bond_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac, @local, @empty, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={<r11=>0x0, 0x8}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000080)={r11, 0x3, 0x0, 0x7}, 0x10)

91.728069ms ago: executing program 0 (id=2861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe4, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x8f, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @device_a, @from_mac=@device_b, {0x0, 0xffc}}, 0x0, 0x1, 0x3f, @void, [{0xdd, 0x20, "6100754b92384ff268a8af67ebc78e31367a1731fc4bf7917e3706f8b33d66ea"}, {0xdd, 0x25, "b70bd1f8f5926877e8ae4e4d7236acecc97f6959f0a7c215c10096a4b3e2dcc756784be410"}, {0xdd, 0x22, "37ac3bd8180be651efd4b4dc2b595cb5391b221dfc1907c9136724e32c648c67e9ab"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f7}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008840}, 0x4000815)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000500)={[{0x2d, 'hugetlb'}, {0x2d, 'io'}, {0x2d, 'perf_event'}, {0x2b, 'memory'}, {0x2d, 'memory'}, {0x6, 'pids'}]}, 0x2f)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r1, 0x0, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x4048044)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'erspan0\x00', <r7=>0x0, 0x1, 0x40, 0x3, 0x8, {{0x18, 0x4, 0x0, 0x9, 0x60, 0x67, 0x0, 0x6, 0x29, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x4c, 0xb6, 0x1, 0x8, [{@private=0xa010101}, {@loopback, 0x5}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010101, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7fff}, {@loopback, 0x22d}]}]}}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004010)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r8, 0x58, &(0x7f0000000940)}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIONCLEX(r0, 0x5450)
unshare(0x8000000)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
unshare(0x10000000)
r10 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r10, 0x80044943, &(0x7f0000000a00))
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000a40))
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r9)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r11, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24080)
r12 = accept(r9, &(0x7f0000000bc0)=@qipcrtr, &(0x7f0000000c40)=0x80)
getsockopt$inet6_tcp_buf(r12, 0x6, 0x1a, &(0x7f0000000c80)=""/91, &(0x7f0000000d00)=0x5b)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f00000019c0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001980)={&(0x7f0000000d80)={0xbe0, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf, 0x69}}}}, [@NL80211_ATTR_BEACON_HEAD={0x4b5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xf1}, @broadcast, @broadcast, @from_mac, {0xa, 0x1}}, 0x100, @default, 0xf5da76bb1157901e, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0x2, 0x5, 0x2f, 0x5ed}}, @val={0x6, 0x2, 0xfff9}, @val={0x5, 0xfa, {0x8, 0x5b, 0x8, "3b7eb5a48c5e0af6af52f1c77866e0848deb77afdd126f652b42085b7fd7437281eced52f1194515d4e6a61529eda2862e7b2b4c1ac67236ef945e27c5db800f3a15249dc304549d64c1f4951cebe31c767f1d393b8aa11ceffe5e92bf3d222a2bd27b2e8594fbe0a1cebdda820a32432f65d628cabd02e59ce8c96186daa064b037aa9e37759fed737f68e6f8c229f727935ffb6076779feee9b630a12c0619367817c116559208f5401e49826f07c249e2924a0d8f84a0313d2f57d129332de9aacd38a85a74a258e180fbbfe303081a84798631b9df43234cb9130dbc0aa0012d5ba0e6e709aaca85a30e977284cf82eaabcb464538"}}, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0x17, "324fdc336958e35688c8516c0180dbe721e18990d9648b"}, {0xdd, 0xc4, "ba89501c65508e0adf15568551ae4eb42d050d000785d6ded4d42a04059e5a216533b323cbb55655c4a1aae327e8a07aaaf4d1b00794453220c2f0bdf3fa3d079f74e58c89860704710ce9f013b13cf9f4eab6980b50553e08b95e670f8ebd6fc95a3eec41aa9be8e61f887fbd9acd0996e75ec7b3096edbb80ed4fedef46075661e3d31182d7c2d0f0016f6fb4928c23e208e0e70ec9f938d09e4ff9feb68f8a668b872cebbe394b165788e1ebe2d10bbd3b2700344b5d0b0174bc862519baa0cbf3a32"}, {0xdd, 0xcd, "128ba64722a49db3eaa45ddd51a00c9b529f5f8ca5f618c7af7d21a2f4a58bcb717a1d794b329359626f79a087451481ae82c4d55a54a9ebf6e64ac7ae46f91937bc877bb719d1eea1da94939cc890f6784b7df07e89089f5206ac418bb5ab1134e9ca837cf6cd16c102e9c09e9a7b9369c42acceceb836878be1d75be9e59855f773697d66409232ba926a360b7d5a0ce76a7fb7d4e3b7618790424cbbda8145a92a61d205ba4aba952e6d0be097ae52589020f87dd505a0a2bc1123042e18e03d698afa3bbb9766aa8aa4ea2"}, {0xdd, 0x3f, "392ff49cffc05dcf0363a2d0c5b80f2314327a7c636786e32a229d8f4cd1ca1b5a0c505462454f5f5a16d50a2b88c55a0a63b80d8ce7acd30bb2ce091dc41b"}, {0xdd, 0x38, "2bd88452fb6fdc1ed246881ed8b5f6c741b76e25f1d8aab3863c266d2bbd8550be41c60445a1156c0f7bcee3e6fb69b82d8e5afd62405d7b"}, {0xdd, 0x7e, "5a113f5e6fe92bcce512487f884f230e1f0fc7dd5f3c5453e06475069d4dccdd96cbb8aaabb4d2f2a185f6fc3069dac81acccb6f9c2e82af42744bbae5bf9e51a6bf3b0ff0519b22a79ffadeb4f94209b146e080e4cc2c4c2c9cefa31d87042c519387e82ebdaa23beb5c510dc06099c7460cfaac633e536707eca05fefd"}, {0xdd, 0xcf, "8813afc5c755a39df9c116df8d36d7280f45694519e4b0b0fd56c4ed193adc160d4d2cce91e18bf224f5ad84608ad0f66cb3027a94cf11fd1259f641749cbd34f7a1121937b6ec804721392aef00214a41485614ac22d4cd7bbeadfcace0b774be6c42ffab4157598ee97e126bf90ae251bf6eeac94d608532555de81f807f1298b7ab8104f6f1ab990d4d1db5e79eece023ca05b70ccf6a99fdeddc66a1c31bba62663cebe14a6ca714f3283f417169623d33c825ff0585fae76575d1f11fdd9c7b4d347188d7592e6a3105ac6ee4"}]}}, @NL80211_ATTR_BEACON_TAIL={0xfa, 0xf, [@erp={0x2a, 0x1, {0x1, 0x1}}, @fast_bss_trans={0x37, 0xf1, {0x4, 0x6, "eff6505f12bad863c870b2b239a0f0d5", "9da4a31707c994d49220d1b9d8f6882374bc10744ae78be55d9dbaadc1246a3c", "adc9debb10419733ec2615d0c812e5f8842b68e0d2ebb13d309dcd4893551e94", [{0x4, 0x4, "1d84b754"}, {0x4, 0x24, "f7b2c9e378920862427b784ab1ace2319c7e224fcd7298c698d39ebd7b0fa9dd3db80b1c"}, {0x3, 0x17, "e58c6b32f34a09456da31a638e91dd9d7fa5bf1b26d3ac"}, {0x3, 0x27, "1bbf23eec09cd0b029a8f359073b4452c87a6466af9c26e78df10aec044a270f5475f19fd406d8"}, {0x1, 0x14, "5fc8f68a1e66e1c138eec73c16c9249757b61a61"}, {0x2, 0x19, "8c431c3ca986900d732585a4da25e7d1a731d465be6fe37765"}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x46, 0x7f, [@gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x3, 0x5, 0x3a, 0xffc0}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x7e}, 0x1, 0xf7, @device_b, 0x3, 0x8, 0xe}}]}, @NL80211_ATTR_BEACON_HEAD={0x5c1, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_b, @initial, {0x9}, @value=@ver_80211n={0x0, 0x8, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x5, @random=0x2, 0x0, @void, @val={0x1, 0x5, [{0x9, 0x1}, {0x5, 0x1}, {0x24}, {0x2, 0x1}, {0xc, 0x1}]}, @val={0x3, 0x1, 0xb1}, @void, @val={0x6, 0x2}, @val={0x5, 0xfe, {0x9, 0x42, 0x80, "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"}}, @val={0x25, 0x3, {0x1, 0x6, 0x6}}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x41}}, @val={0x76, 0x6, {0x0, 0x3, 0x30, 0x9}}, [{0xdd, 0xd5, "fc4357a009930e261ad79d2115c1db6a36c9a2e53c8bceb8ebf990ed322a4d28aff6bc580d3ac8a691149c51cf2d4d466a1c831c2ed8112235ef6e0969dee0dd0fbb91f11503b3bc9d2cf3a6f987176ae0b798fc3c520c2a0d041d6fdb6b06c3e961e9c4dfb5c0f2d77033e660fbdb8b9c86799a76cc47d18ae461ad76253191ec879c3d019c9fcd2a028fdb7411b194b51f178d6a2d09a63c65b56127e80370a989f180040055d27c5a0015e8fd9c8a2babd07c358762c4a8f54cf65f75d8dcd5baaac963b79ee6581c231cf0b01dc631eedc3428"}, {0xdd, 0x8e, "4a77431e5bc0d8e4936606eb2222508d1b6e3654d33d6c60189bc57520d26c7e60c7d7198750335e891170ee0c9b1dbdfabee2c985b1b59088b3e968c2d03aff69ff0c0ffcb03def8c3154c92c2f461650c0ed737ef1fc68bb1a7ed4f261b78ef068329b9739eaf58d5d5c8db7ec886d0dc6abe76e8c92616e4df474a664410ada79e80ee18a58618026bf968033"}, {0xdd, 0xe8, "37666cf2d0c330410ae31779eea9587fb94c6b85fc175a1d26c137253f914c7f0721132f38b3c3b37236ed7efcfbcb53578fb0e54c9a4fdcf643c1eed3a8de62506099077f95d9b0e4c2937b56a726fe61ec2805362d7c9217e915c2e0afb7d52bc6674c238090c893ba61e8738f85fc226a7515b5b72095a06a06b4c58b3e67a3c4a19a59a1c1fbb1ecfd2e43c9c1437ec10e2df934a4c14bd0ef421323225fe5f1ac6c6cb2f797a0076b096dbbc82c9f904cffa347d4fb7132860502fdc4b1e5d208beee14dd9a05e2f951f84069b00fc0fb21e23d12a08a2e8d7c99285adbde1b7582ae49d972"}, {0xdd, 0x7f, "79c80ffb203bbbad66668c8fa4c5edfe07b58b5ce1779bfdcfbcf58e2b230cfb224feba2c2bc24999740f97327fe63f15141953a6d1b0b1c99d3428176a043f0103662c73cee118af10f16c37f45644cf032b998f847fe8937fcb77b0675f38014fafdb6e27fbf3c040e437e3a99a9a1483c487f9632484d24e1c1ca020cb1"}, {0xdd, 0x18, "b1399b36d93c8d7db46c1864d1bbfd8840b9878cfedf86c6"}, {0xdd, 0x9b, "ac2dd434bd6cc8a31c05eb899dca4a4aed31f0fe8415451b4394a90bc9845f5091c70576a5d7cb17abdc5121444987b142696b23a75313e44fbc81fd1c6978c2d8a65a3df767483cf4032ec996d3a843a0f0041ba2865cd8e76494388d4255ae65ff4e5fe8178922b2f8a2c6b60cd2eae3281ba9968609ba0304405e1bf714428e2eafce42b5f55bed8798ae0cab81c080ec392a68653b62b02fa3"}, {0xdd, 0xdb, "b58da6d3555309d085a39fb7a25583c8d0ded32dfadc99a46f8ee7d67f178471841073b90ab1323c9312e055df14905e38a2c50c73b4cac32aed49ecb20cc83e85891eb12390f194c838e39dce4a3b3bdef1c444d69f74563141bc490975404168df4f5250b8f9539411173ce32b20162664836e1ba7dc9cce1804b60d6b1e777b2f0c80ad46a6aa14a7086c9ae03946177739a78ae6265cadf7de132874a2d4111a6ba352dfb22d50364fc4d136b53dfe192cde5a20c936ceec00969d886a58cf592f9d1f48e563c9db99f5918e6d3203a07e554261830b776e14"}]}}]}, 0xbe0}, 0x1, 0x0, 0x0, 0x5}, 0x8800)

87.036969ms ago: executing program 0 (id=2862):
listen(0xffffffffffffffff, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r4=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @private, <r5=>0x0}, &(0x7f0000000200)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r6=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@broadcast, @broadcast, <r7=>0x0}, &(0x7f00000002c0)=0xc)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@dev, @multicast1, <r8=>0x0}, &(0x7f0000000340)=0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r9=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', <r11=>0x0, 0x29, 0x9, 0x5, 0x8001, 0x20, @empty, @mcast2, 0x80, 0x80, 0xcd11, 0x60000000}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl1\x00', <r12=>0x0, 0x29, 0x32, 0x1, 0x7, 0x32, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x1, 0x1, 0x9, 0x3}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000840)={'ip_vti0\x00', <r13=>0x0, 0x700, 0x8000, 0x10000, 0x7, {{0x22, 0x4, 0x2, 0x34, 0x88, 0x67, 0x0, 0xd, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@lsrr={0x83, 0xb, 0x5c, [@private=0xa010102, @loopback]}, @ssrr={0x89, 0x2b, 0x9d, [@local, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010100, @private=0xa010102, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x3b, 0x3, [{0x0, 0x9, "51cf4debf596ce"}, {0x5, 0x5, "d3c8a6"}, {0x6, 0xb, "ca09eb1a0c585b72b7"}, {0x7, 0x10, "a8503eeaa9c5795467e4fde15ef0"}, {0x2, 0xc, "8ff23e5cf03d9647190b"}]}, @end]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x180, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x180}}, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@gettfilter={0x74, 0x2e, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x2, 0x2}, {0x6, 0x9}, {0xd, 0xe}}, [{0x8, 0xb, 0x1ff}, {0x8, 0xb, 0xef3}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x7fff}, {0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x79}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0x10}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x1c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000c80)='xdp_cpumap_kthread\x00', 0xffffffffffffffff, 0x0, 0x81}, 0x18)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000e00)={0x0, 0xc4, &(0x7f0000000d00)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x2, @empty}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x2}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0xfffffa50, @private1, 0x8}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000e40)=0x10)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000f40)={'gretap0\x00', &(0x7f0000000e80)={'gretap0\x00', r3, 0x80, 0x80, 0x2, 0x1ff, {{0x1b, 0x4, 0x2, 0x37, 0x6c, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x7, 0xc1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xf, 0xcf, [@local, @broadcast, @empty]}, @ssrr={0x89, 0x23, 0x4, [@remote, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x21}, @broadcast, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x942}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xb, 0x6d, [@rand_addr=0x64010101, @broadcast]}]}}}}})
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$devlink(&(0x7f0000000fc0), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r16, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xd0, r17, 0x800, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7714}, {0x8, 0x15, 0x8f8000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r18 = accept4$netrom(0xffffffffffffffff, &(0x7f0000001180)={{}, [@null, @rose, @default, @default, @netrom, @default, @bcast, @default]}, &(0x7f0000001200)=0x48, 0x80000)
getsockopt$netrom_NETROM_IDLE(r18, 0x103, 0x7, &(0x7f0000001240)=0x7b, &(0x7f0000001280)=0x4)
r19 = socket$kcm(0x29, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r19, 0x89e2, &(0x7f00000012c0)={r15})

965.095µs ago: executing program 0 (id=2863):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600)

0s ago: executing program 0 (id=2864):
syz_80211_inject_frame(0x0, 0x0, 0x32)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
unshare(0x2c020400)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESHEX], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, 0x0}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x32) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
unshare(0x2c020400) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESHEX], 0x48) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, 0x0}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async)

kernel console output (not intermixed with test programs):

een left with an inconsistent configuration, please check.
[   74.500312][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'.
[   74.548290][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.264'.
[   75.078666][ T6920] netlink: 148 bytes leftover after parsing attributes in process `syz.1.271'.
[   75.087161][ T6920] netlink: 23 bytes leftover after parsing attributes in process `syz.1.271'.
[   75.964626][ T6934] block nbd0: server does not support multiple connections per device.
[   75.964707][ T6944] syzkaller0: entered allmulticast mode
[   75.969741][ T6934] block nbd0: shutting down sockets
[   75.996683][ T6946] validate_nla: 4 callbacks suppressed
[   75.996707][ T6946] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[   76.001948][ T6946] netlink: 'syz.1.278': attribute type 4 has an invalid length.
[   76.004667][ T6946] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[   76.007165][ T6946] netlink: 'syz.1.278': attribute type 4 has an invalid length.
[   76.161716][ T6946] block nbd0: server does not support multiple connections per device.
[   76.165236][ T6946] block nbd0: shutting down sockets
[   76.264438][ T6967] vlan2: entered promiscuous mode
[   76.266233][ T6967] vlan2: entered allmulticast mode
[   76.268015][ T6967] hsr_slave_1: entered allmulticast mode
[   76.270437][ T6960] netlink: 'syz.3.285': attribute type 12 has an invalid length.
[   76.277502][ T6960] netlink: 'syz.3.285': attribute type 29 has an invalid length.
[   76.383958][ T6983] netlink: 'syz.3.293': attribute type 2 has an invalid length.
[   76.386269][ T6983] netlink: 'syz.3.293': attribute type 1 has an invalid length.
[   76.521400][ T5835] Bluetooth: hci0: command tx timeout
[   77.297959][ T7007] netlink: 'syz.0.299': attribute type 12 has an invalid length.
[   77.300564][ T7007] netlink: 'syz.0.299': attribute type 29 has an invalid length.
[   77.529509][ T7025] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   78.179992][ T7057] __nla_validate_parse: 13 callbacks suppressed
[   78.180003][ T7057] netlink: 19 bytes leftover after parsing attributes in process `syz.1.309'.
[   78.235727][ T7065] xt_hashlimit: size too large, truncated to 1048576
[   78.353212][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'.
[   78.457715][ T7073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.313'.
[   78.462746][ T7073] unsupported nlmsg_type 40
[   78.895822][ T7098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.113555][   T33] audit: type=1800 audit(1753006860.889:3): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.320" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=560 res=0 errno=0
[   79.125881][ T7114] vti0: entered promiscuous mode
[   79.127424][ T7114] vti0: entered allmulticast mode
[   79.178425][ T7118] bond4: entered promiscuous mode
[   79.180360][ T7118] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.319145][ T7126] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   79.321560][ T5880] IPVS: starting estimator thread 0...
[   79.440980][ T7137] IPVS: using max 61 ests per chain, 146400 per kthread
[   79.473681][ T7149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.327'.
[   79.586461][ T7162] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   79.590291][ T7162] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   79.689955][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'.
[   79.702985][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'.
[   79.715891][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'.
[   79.726100][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'.
[   79.732663][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'.
[   79.744242][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'.
[   80.038261][ T7176] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.163449][ T7186] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   80.316974][ T7190] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[   80.349436][ T7190] macvlan0: left promiscuous mode
[   80.354651][ T7190] macvlan0: entered allmulticast mode
[   80.476525][ T7194] bridge_slave_0: left allmulticast mode
[   80.478271][ T7194] bridge_slave_0: left promiscuous mode
[   80.487388][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.494812][ T7194] bridge_slave_1: left allmulticast mode
[   80.496572][ T7194] bridge_slave_1: left promiscuous mode
[   80.498858][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.516065][ T7194] bond0: (slave bond_slave_0): Releasing backup interface
[   80.522084][ T7194] bond0: (slave bond_slave_1): Releasing backup interface
[   80.537408][ T7194] team0: Port device team_slave_0 removed
[   80.544939][ T7194] team0: Port device team_slave_1 removed
[   80.547037][ T7194] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.549359][ T7194] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.554635][ T7194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.557029][ T7194] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.572316][ T7194] team0: Port device batadv1 removed
[   80.575919][ T7194] bond2: (slave bridge2): Releasing active interface
[   80.578401][ T7194] bridge2: left promiscuous mode
[   80.580332][ T7194] bridge2: left allmulticast mode
[   81.083281][   T47] cfg80211: failed to load regulatory.db
[   82.025567][ T7294] gretap0: entered promiscuous mode
[   82.083829][ T7299] syz_tun: entered allmulticast mode
[   82.297719][ T7316] validate_nla: 7 callbacks suppressed
[   82.297731][ T7316] netlink: 'syz.1.370': attribute type 1 has an invalid length.
[   82.308140][ T7316] netlink: 'syz.1.370': attribute type 2 has an invalid length.
[   82.675576][ T7341] ieee802154 phy0 wpan0: encryption failed: -22
[   82.741376][ T7346] netlink: 'syz.3.381': attribute type 1 has an invalid length.
[   83.107489][ T7373] netlink: 'syz.1.387': attribute type 5 has an invalid length.
[   83.115722][ T7368] netlink: 'syz.3.385': attribute type 8 has an invalid length.
[   83.142914][ T7378] x_tables: duplicate entry at hook 2
[   84.086318][ T7407] netlink: 'syz.1.396': attribute type 4 has an invalid length.
[   84.100837][ T7407] netlink: 'syz.1.396': attribute type 4 has an invalid length.
[   84.327351][ T7423] netlink: 'syz.1.399': attribute type 1 has an invalid length.
[   84.369202][ T7423] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[   84.377677][ T7423] bond4: (slave vxcan1): Error -95 calling set_mac_address
[   84.427808][ T7433] batadv0: entered promiscuous mode
[   84.429691][ T7433] macvtap1: entered promiscuous mode
[   84.442119][ T7433] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   84.455127][ T7433] batadv0: left promiscuous mode
[   84.521112][ T7423] gretap1: entered promiscuous mode
[   84.560160][ T7423] macvlan2: entered promiscuous mode
[   84.562044][ T7423] macvlan2: entered allmulticast mode
[   84.733482][ T7456] __nla_validate_parse: 63 callbacks suppressed
[   84.733493][ T7456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.406'.
[   84.747674][ T7456] netlink: 'syz.1.406': attribute type 1 has an invalid length.
[   84.750089][ T7456] netlink: 228 bytes leftover after parsing attributes in process `syz.1.406'.
[   84.753235][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'.
[   84.779151][ T7458] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.407'.
[   84.857705][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'.
[   84.917753][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'.
[   85.135721][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.1.418'.
[   85.243201][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.420'.
[   85.411102][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.423'.
[   85.542042][ T7560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.169041][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.435'.
[   86.174334][ T7589] netlink: 'syz.1.435': attribute type 5 has an invalid length.
[   86.344717][ T7606] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   87.330571][ T7640] x_tables: unsorted underflow at hook 2
[   87.333721][ T7641] validate_nla: 2 callbacks suppressed
[   87.333732][ T7641] netlink: 'syz.1.452': attribute type 1 has an invalid length.
[   87.393638][ T7641] bond5: (slave bridge3): making interface the new active one
[   87.402239][ T7641] bond5: (slave bridge3): Enslaving as an active interface with an up link
[   87.415649][ T7640] bond5: (slave bridge4): Enslaving as an active interface with a down link
[   87.672004][ T7666] nbd0: detected capacity change from 0 to 128
[   87.678906][   T56] block nbd0: Receive control failed (result -104)
[   87.834771][ T7684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.841782][ T7684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.846772][ T7684] bond0 (unregistering): Released all slaves
[   88.720199][ T7738] netlink: 'syz.1.485': attribute type 8 has an invalid length.
[   89.326848][ T7749] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000
[   89.508145][ T7771] netlink: 'syz.0.496': attribute type 9 has an invalid length.
[   90.041035][ T5835] Bluetooth: hci2: command tx timeout
[   90.444356][ T7784] __nla_validate_parse: 24 callbacks suppressed
[   90.444366][ T7784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.499'.
[   90.783081][ T7816] bond0: option all_slaves_active: invalid value (223)
[   91.031637][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'.
[   91.349555][ T7842] netlink: 'syz.0.516': attribute type 1 has an invalid length.
[   91.370943][ T7842] netlink: 224 bytes leftover after parsing attributes in process `syz.0.516'.
[   91.434154][ T7842] xt_CT: No such helper "snmp"
[   91.459035][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'.
[   91.474143][ T7838] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   91.478728][ T7838] tipc: Enabled bearer <udp:syz1>, priority 10
[   91.824714][ T7873] batadv_slave_1: entered promiscuous mode
[   91.835061][ T7873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.524'.
[   91.846708][ T7870] lo speed is unknown, defaulting to 1000
[   91.847896][ T7872] batadv_slave_1: left promiscuous mode
[   91.850168][ T7879] rdma_rxe: rxe_newlink: failed to add lo
[   91.860489][ T7870] lo speed is unknown, defaulting to 1000
[   91.865504][ T7870] lo speed is unknown, defaulting to 1000
[   91.913285][ T7869] gretap0: left promiscuous mode
[   91.924218][ T7869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.937050][ T7879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.021987][ T5882] lo speed is unknown, defaulting to 1000
[   92.024334][ T7870] infiniband syz0: set active
[   92.026301][ T7870] infiniband syz0: added lo
[   92.059926][ T7870] RDS/IB: syz0: added
[   92.061745][ T7870] smc: adding ib device syz0 with port count 1
[   92.063947][ T7870] smc:    ib device syz0 port 1 has pnetid 
[   92.068707][ T7870] lo speed is unknown, defaulting to 1000
[   92.114404][  T792] lo speed is unknown, defaulting to 1000
[   92.386873][ T7870] lo speed is unknown, defaulting to 1000
[   92.497862][ T7870] lo speed is unknown, defaulting to 1000
[   92.604367][ T5882] tipc: Node number set to 2770614847
[   92.824455][ T7913] netlink: 'syz.1.535': attribute type 2 has an invalid length.
[   92.828029][ T7913] netlink: 'syz.1.535': attribute type 1 has an invalid length.
[   92.830499][ T7913] netlink: 'syz.1.535': attribute type 1 has an invalid length.
[   92.835830][ T7914] netlink: 'syz.1.535': attribute type 11 has an invalid length.
[   92.838140][ T7914] netlink: 'syz.1.535': attribute type 4 has an invalid length.
[   92.840455][ T7914] netlink: 224 bytes leftover after parsing attributes in process `syz.1.535'.
[   93.128816][ T7931] netlink: 'syz.1.537': attribute type 29 has an invalid length.
[   93.140510][ T7925] netlink: 'syz.1.537': attribute type 29 has an invalid length.
[   93.147835][ T7925] netlink: 500 bytes leftover after parsing attributes in process `syz.1.537'.
[   93.152996][ T7925] unsupported nla_type 58
[   93.332314][ T5835] Bluetooth: hci2: command tx timeout
[   93.356810][ T7952] netlink: 'syz.1.541': attribute type 13 has an invalid length.
[   93.359365][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'.
[   93.385169][ T7938] lo speed is unknown, defaulting to 1000
[   93.440203][ T7957] netlink: 'syz.0.544': attribute type 1 has an invalid length.
[   93.443067][ T7957] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.544'.
[   93.445981][ T7956] netlink: 'syz.0.544': attribute type 10 has an invalid length.
[   93.448346][ T7956] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   93.568292][ T7937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.233452][ T7977] bridge: RTM_NEWNEIGH with invalid ether address
[   94.262651][ T7979] xt_hashlimit: size too large, truncated to 1048576
[   94.384540][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'.
[   94.387749][ T7986] openvswitch: netlink: Key type 16144 is out of range max 32
[   94.556604][ T7997] pim6reg: entered allmulticast mode
[   95.506279][ T8020] bond0: entered promiscuous mode
[   95.509289][ T8020] batadv0: entered promiscuous mode
[   95.514578][ T8020] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   95.518741][ T8020] hsr1: entered allmulticast mode
[   95.520410][ T8020] bond0: entered allmulticast mode
[   95.523246][ T8020] batadv0: entered allmulticast mode
[   95.525385][ T8020] 8021q: adding VLAN 0 to HW filter on device hsr1
[   95.528651][ T8020] bond0: left promiscuous mode
[   95.532440][ T8020] batadv0: left promiscuous mode
[   95.628764][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.565'.
[   95.631587][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'.
[   95.998043][ T8048] gre3: entered allmulticast mode
[   96.032213][ T8050] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[   96.050232][ T8050] netlink: 'syz.3.578': attribute type 10 has an invalid length.
[   96.054402][ T8050] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[   96.118764][ T8050] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   96.122564][ T8050] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   96.871265][ T8050] syz.3.578 (8050) used greatest stack depth: 19704 bytes left
[   97.126888][ T8088] xt_socket: unknown flags 0xd0
[   97.756007][ T8149] openvswitch: netlink: Message has 8 unknown bytes.
[   97.894520][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'.
[   97.898904][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.616'.
[   98.065430][ T8173] netlink: 44 bytes leftover after parsing attributes in process `syz.0.622'.
[   98.135921][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'.
[   98.168942][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'.
[   98.279748][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'.
[   98.315253][ T8187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   98.552453][ T8214] netlink: 100 bytes leftover after parsing attributes in process `syz.3.634'.
[   98.555153][ T8214] netlink: 100 bytes leftover after parsing attributes in process `syz.3.634'.
[   98.566225][ T8216] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[   98.675387][ T8225] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   98.965226][ T8240] syzkaller0: entered promiscuous mode
[   98.966935][ T8240] syzkaller0: entered allmulticast mode
[   99.301712][ T8256] validate_nla: 3 callbacks suppressed
[   99.301725][ T8256] netlink: 'syz.0.648': attribute type 1 has an invalid length.
[   99.327971][ T8256] bond6: (slave gretap2): making interface the new active one
[   99.334544][ T8256] bond6: (slave gretap2): Enslaving as an active interface with an up link
[   99.347412][ T8256] syz.0.648 (8256) used greatest stack depth: 18928 bytes left
[   99.794892][ T8302] x_tables: duplicate underflow at hook 2
[   99.980528][ T8320] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  100.390409][ T8346] netlink: 'syz.3.680': attribute type 1 has an invalid length.
[  101.003944][ T8381] netlink: 'syz.0.688': attribute type 10 has an invalid length.
[  101.114018][ T8383] netlink: 'syz.0.688': attribute type 10 has an invalid length.
[  101.429994][ T8395] __nla_validate_parse: 14 callbacks suppressed
[  101.430005][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.692'.
[  101.476616][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'.
[  101.768955][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.697'.
[  101.782044][ T8418] netlink: 84 bytes leftover after parsing attributes in process `syz.1.697'.
[  101.943413][ T8429] netlink: 'syz.3.701': attribute type 1 has an invalid length.
[  101.945901][ T8429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.701'.
[  101.950669][ T8429] netlink: 'syz.3.701': attribute type 1 has an invalid length.
[  102.586447][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'.
[  104.891886][ T8440] lo speed is unknown, defaulting to 1000
[  104.974960][ T8456] netlink: 248 bytes leftover after parsing attributes in process `syz.0.710'.
[  104.977851][ T8456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.710'.
[  105.037443][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'.
[  105.052727][ T8456] rdma_rxe: rxe_newlink: failed to add lo
[  105.075995][ T8457] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  105.159703][ T8464] netlink: 'syz.0.713': attribute type 8 has an invalid length.
[  105.301662][ T8469] netlink: 44 bytes leftover after parsing attributes in process `syz.0.715'.
[  105.356587][ T8469] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input4
[  105.559491][ T8482] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  105.572920][ T8482] Driver unsupported XDP return value 0 on prog  (id 179) dev N/A, expect packet loss!
[  105.823131][ T8513] netlink: 'syz.3.731': attribute type 1 has an invalid length.
[  105.872368][ T8518] netlink: 'syz.3.731': attribute type 1 has an invalid length.
[  105.937917][ T8525] xt_TCPMSS: Only works on TCP SYN packets
[  106.039851][ T8530] openvswitch: netlink: Missing key (keys=40, expected=80)
[  106.186407][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029c53800: rx timeout, send abort
[  106.687094][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029c53c00: rx timeout, send abort
[  106.690089][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029c53800: abort rx timeout. Force session deactivation
[  106.860452][ T8545] __nla_validate_parse: 5 callbacks suppressed
[  106.860517][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'.
[  106.873485][ T8545] netlink: 14220 bytes leftover after parsing attributes in process `syz.0.741'.
[  107.099862][ T8573] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  107.147863][ T8580] netlink: 336 bytes leftover after parsing attributes in process `syz.1.752'.
[  107.189772][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029c53c00: abort rx timeout. Force session deactivation
[  107.212143][ T8584] lo speed is unknown, defaulting to 1000
[  107.220860][ T8590] netlink: 'syz.1.755': attribute type 7 has an invalid length.
[  107.355743][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'.
[  107.483871][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'.
[  107.486560][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'.
[  107.904052][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'.
[  107.906776][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.770'.
[  107.909336][ T8641] netlink: 'syz.3.770': attribute type 4 has an invalid length.
[  107.913499][ T8641] netlink: 224 bytes leftover after parsing attributes in process `syz.3.770'.
[  107.953797][ T8643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.771'.
[  108.024236][ T8656] x_tables: duplicate underflow at hook 1
[  108.869231][ T8733] lo speed is unknown, defaulting to 1000
[  108.972369][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024f9ac00: rx timeout, send abort
[  109.475093][    C0] vcan0: j1939_tp_rxtimer: 0xffff888024f9ac00: abort rx timeout. Force session deactivation
[  109.529920][ T8770] netlink: 'syz.3.815': attribute type 21 has an invalid length.
[  109.537060][ T8770] netlink: 'syz.3.815': attribute type 5 has an invalid length.
[  109.539516][ T8770] netlink: 'syz.3.815': attribute type 6 has an invalid length.
[  109.544097][ T8765] pim6reg1: entered promiscuous mode
[  109.545773][ T8765] pim6reg1: entered allmulticast mode
[  110.340797][ T8765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.464783][ T8787] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.493398][ T8790] netlink: 'syz.3.821': attribute type 4 has an invalid length.
[  110.516172][ T8787] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.563209][ T8787] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.624421][ T8787] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.671818][ T8788] ieee802154 phy1 wpan1: encryption failed: -22
[  110.706675][ T8787] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.719440][ T8787] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.735165][ T8787] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.748428][ T8787] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.931811][ T8815] ieee802154 phy1 wpan1: encryption failed: -90
[  110.986264][ T8818] openvswitch: netlink: Missing key (keys=40, expected=80)
[  111.006347][ T8818] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  111.023795][ T8822] netlink: 'syz.3.832': attribute type 5 has an invalid length.
[  111.125644][ T8829] geneve3: entered promiscuous mode
[  111.310407][ T8855] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  111.316742][ T8855] sctp: [Deprecated]: syz.0.843 (pid 8855) Use of int in maxseg socket option.
[  111.316742][ T8855] Use struct sctp_assoc_value instead
[  111.317698][ T8848] ip6gretap2: entered promiscuous mode
[  111.647446][ T8895] Bluetooth: MGMT ver 1.23
[  111.996874][ T8914] __nla_validate_parse: 13 callbacks suppressed
[  111.996885][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'.
[  112.002742][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'.
[  112.059976][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'.
[  112.073121][ T8922] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  112.077299][ T8923] netlink: 224 bytes leftover after parsing attributes in process `syz.1.862'.
[  112.077305][ T8922] netlink: 224 bytes leftover after parsing attributes in process `syz.1.862'.
[  112.106131][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[  112.108939][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'.
[  112.459042][ T8942] netlink: 'syz.1.868': attribute type 13 has an invalid length.
[  112.472512][ T8942] netlink: 'syz.1.868': attribute type 17 has an invalid length.
[  112.541370][ T8942] 8021q: adding VLAN 0 to HW filter on device team0
[  112.544676][ T8942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.584218][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'.
[  112.692925][ T8968] batadv_slave_1: entered promiscuous mode
[  112.697073][ T8968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.875'.
[  112.711725][ T8967] batadv_slave_1: left promiscuous mode
[  112.741414][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'.
[  113.637843][ T8985] bridge0: port 3(batadv0) entered disabled state
[  113.641358][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.645523][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.767493][ T8985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.776784][ T8985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.865211][ T8985] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.868662][ T8985] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.873114][ T8985] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.875711][ T8985] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.893234][   T47] lo speed is unknown, defaulting to 1000
[  113.895245][   T47] syz0: Port: 1 Link DOWN
[  113.922838][   T47] lo speed is unknown, defaulting to 1000
[  114.019597][ T9008] bridge: RTM_NEWNEIGH with invalid state 0x1
[  114.105140][ T9015] pimreg: entered allmulticast mode
[  114.115129][ T9015] pimreg: left allmulticast mode
[  114.226870][ T9024] netlink: 'syz.3.891': attribute type 1 has an invalid length.
[  114.396151][ T9042] netlink: 'syz.3.897': attribute type 1 has an invalid length.
[  114.516180][ T9054] ieee802154 phy1 wpan1: encryption failed: -22
[  114.879311][ T9085] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  114.891510][ T9085] batadv0: left allmulticast mode
[  114.893178][ T9085] batadv0: left promiscuous mode
[  114.894969][ T9085] bridge0: port 3(batadv0) entered disabled state
[  114.903960][ T9085] bridge_slave_0: left allmulticast mode
[  114.910188][ T9085] bridge_slave_0: left promiscuous mode
[  114.917748][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.928233][ T9085] bridge_slave_1: left allmulticast mode
[  114.930778][ T9085] bridge_slave_1: left promiscuous mode
[  114.932593][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.938445][ T9085] team0: Port device team_slave_0 removed
[  114.944608][ T9085] team0: Port device team_slave_1 removed
[  114.946578][ T9085] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.949926][ T9085] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.957337][ T9085] netlink: 'syz.3.912': attribute type 10 has an invalid length.
[  114.959834][ T9085] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  114.967509][ T9089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.970716][ T9085] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  114.971514][ T9089] syzkaller0: entered promiscuous mode
[  114.973585][ T9085] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  114.975161][ T9089] syzkaller0: entered allmulticast mode
[  114.989349][ T9089] sch_fq: defrate 257 ignored.
[  114.994315][ T9089] tipc: Resetting bearer <eth:syzkaller0>
[  114.997949][ T9088] tipc: Resetting bearer <eth:syzkaller0>
[  115.009720][ T9088] tipc: Disabling bearer <eth:syzkaller0>
[  115.173555][ T9096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.347862][ T9100] bridge0: port 3(erspan0) entered blocking state
[  115.350227][ T9100] bridge0: port 3(erspan0) entered disabled state
[  115.354175][ T9100] erspan0: entered allmulticast mode
[  115.356898][ T9100] erspan0: entered promiscuous mode
[  115.359218][ T9100] bridge0: port 3(erspan0) entered blocking state
[  115.361508][ T9100] bridge0: port 3(erspan0) entered forwarding state
[  115.366156][ T9101] erspan0: left allmulticast mode
[  115.368030][ T9101] erspan0: left promiscuous mode
[  115.370429][ T9101] bridge0: port 3(erspan0) entered disabled state
[  116.056255][ T9153] netlink: 'syz.1.939': attribute type 1 has an invalid length.
[  116.207505][ T9167] netlink: 'syz.3.946': attribute type 1 has an invalid length.
[  116.426774][ T9185] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.429241][ T9185] bridge0: port 1(bond1) entered blocking state
[  116.432168][ T9185] bridge0: port 1(bond1) entered disabled state
[  116.434807][ T9185] bond1: entered allmulticast mode
[  116.437811][ T9185] bond1: entered promiscuous mode
[  116.449358][ T9185] batadv0: entered promiscuous mode
[  116.451997][ T9185] batadv0: left promiscuous mode
[  116.855862][ T9205] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  116.944323][ T9210] netlink: 'syz.0.964': attribute type 6 has an invalid length.
[  117.157179][ T9225] netlink: 'syz.0.970': attribute type 10 has an invalid length.
[  117.159577][ T9225] __nla_validate_parse: 26 callbacks suppressed
[  117.159584][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.970'.
[  117.167006][ T9225] dummy0: entered promiscuous mode
[  117.168796][ T9225] dummy0: entered allmulticast mode
[  117.171935][ T9225] bridge0: port 3(dummy0) entered blocking state
[  117.174102][ T9225] bridge0: port 3(dummy0) entered disabled state
[  117.177572][ T9225] bridge0: port 3(dummy0) entered blocking state
[  117.179619][ T9225] bridge0: port 3(dummy0) entered forwarding state
[  117.184575][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'.
[  117.195538][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'.
[  117.198254][ T9225] openvswitch: netlink: Flow actions attr not present in new flow.
[  117.309828][ T9231] netlink: 'syz.1.973': attribute type 2 has an invalid length.
[  117.313382][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.973'.
[  117.606876][ T9256] 8021q: adding VLAN 0 to HW filter on device team0
[  117.612150][ T9256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.617194][  T791] lo speed is unknown, defaulting to 1000
[  117.619157][  T791] syz0: Port: 1 Link ACTIVE
[  117.621891][  T791] lo speed is unknown, defaulting to 1000
[  117.666795][ T9262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.982'.
[  117.681663][ T9262] netlink: 'syz.1.982': attribute type 12 has an invalid length.
[  117.684574][ T9262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.982'.
[  117.727338][ T9269] Cannot find add_set index 0 as target
[  117.897647][ T9282] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  117.908414][ T9282] netlink: 40 bytes leftover after parsing attributes in process `syz.1.989'.
[  117.913864][ T9282] unknown channel width for channel at 909000KHz?
[  117.916061][ T9282] unknown channel width for channel at 909000KHz?
[  117.918061][ T9282] unknown channel width for channel at 909000KHz?
[  117.920234][ T9282] netlink: 'syz.1.989': attribute type 10 has an invalid length.
[  117.923996][ T9282] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  117.931732][ T9282] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.937197][ T9282] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  117.940294][ T9282] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  117.953800][ T9282] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  117.956685][ T9282] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  117.966801][ T9284] netlink: 304 bytes leftover after parsing attributes in process `syz.3.990'.
[  118.203487][   T98] block nbd0: Possible stuck request ffff8880212f0000: control (read@0,4096B). Runtime 30 seconds
[  118.418207][ T9308] tipc: Started in network mode
[  118.419741][ T9308] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  118.426602][ T9308] tipc: Enabled bearer <eth:team0>, priority 0
[  118.792922][ T9326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1005'.
[  118.987893][ T9330] bond0: (slave wlan1): Releasing backup interface
[  118.993046][ T9330] mac80211_hwsim hwsim3 wlan1 (unregistering): left allmulticast mode
[  119.000169][ T9330] bond0: Destroying bond
[  119.003734][ T9332] openvswitch: netlink: Key type 30 is not supported
[  119.007018][ T9332] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1008'.
[  119.068395][ T9330] bond0 (unregistering): Released all slaves
[  119.421068][   T47] tipc: Node number set to 11578026
[  119.451707][ T9370] lo speed is unknown, defaulting to 1000
[  119.469962][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.495735][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.503779][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.519404][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.525200][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.529973][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.535375][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.550317][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.555028][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.559434][ T9372] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  119.680313][ T9380] lo speed is unknown, defaulting to 1000
[  119.871784][ T9400] Cannot find set identified by id 65535 to match
[  119.957756][ T9402] netlink: 'syz.3.1030': attribute type 10 has an invalid length.
[  119.963748][ T9402] dummy0: entered promiscuous mode
[  119.967232][ T9402] dummy0: entered allmulticast mode
[  119.971648][ T9402] bridge0: port 2(dummy0) entered blocking state
[  119.976479][ T9402] bridge0: port 2(dummy0) entered disabled state
[  119.987003][ T9402] bridge0: port 2(dummy0) entered blocking state
[  119.989127][ T9402] bridge0: port 2(dummy0) entered forwarding state
[  120.720145][ T9439] netlink: 'syz.3.1042': attribute type 10 has an invalid length.
[  120.891947][ T9456] netlink: 'syz.0.1050': attribute type 10 has an invalid length.
[  120.929342][ T9465] tipc: Resetting bearer <eth:team0>
[  120.966664][ T9472] syzkaller1: entered promiscuous mode
[  120.968473][ T9472] syzkaller1: entered allmulticast mode
[  120.973254][ T9472] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  121.019576][ T9475] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.093443][ T9476] bond0: (slave wlan1): Releasing backup interface
[  121.141252][ T9488] validate_nla: 3 callbacks suppressed
[  121.141263][ T9488] netlink: 'syz.1.1061': attribute type 10 has an invalid length.
[  121.203712][ T9491] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.206357][ T9491] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.208854][ T9491] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.211801][ T9491] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.224120][ T9491] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.226731][ T9491] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.229368][ T9491] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.232278][ T9491] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.261597][ T9490] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  121.264143][ T9490] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  121.266581][ T9490] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  121.269097][ T9490] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  121.278104][ T9490] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.280794][ T9490] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.283364][ T9490] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.285921][ T9490] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.295455][ T9504] netlink: 'syz.0.1065': attribute type 4 has an invalid length.
[  121.298321][ T9506] netlink: 'syz.0.1065': attribute type 4 has an invalid length.
[  121.416887][ T9514] netlink: 'syz.1.1070': attribute type 10 has an invalid length.
[  121.436663][ T9516] netlink: 'syz.0.1069': attribute type 1 has an invalid length.
[  121.457319][ T9516] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.471083][ T9516] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.473619][ T9516] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  121.478184][ T9516] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  121.573843][ T9516] gretap3: entered promiscuous mode
[  121.579692][ T9516] bond7: (slave gretap3): making interface the new active one
[  121.585889][ T9516] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  121.597584][ T9516] macvlan2: entered promiscuous mode
[  121.599382][ T9516] macvlan2: entered allmulticast mode
[  121.608812][ T9516] bond7: entered promiscuous mode
[  121.611269][ T9516] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  121.622079][ T9516] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3
[  121.632990][ T9516] bond7: left promiscuous mode
[  121.939490][ T9568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  121.940693][ T9565] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  121.995636][ T9576] netlink: 'syz.0.1088': attribute type 10 has an invalid length.
[  122.105901][ T9588] syzkaller0: entered promiscuous mode
[  122.107731][ T9588] syzkaller0: entered allmulticast mode
[  122.175036][ T9592] __nla_validate_parse: 23 callbacks suppressed
[  122.175048][ T9592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1095'.
[  122.257209][ T9592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  122.340586][ T9604] netlink: 'syz.0.1097': attribute type 10 has an invalid length.
[  122.343270][ T9604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1097'.
[  122.352739][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1097'.
[  122.583202][ T9619] infiniband syz2: set down
[  122.584891][ T9619] infiniband syz2: added syzkaller0
[  122.609967][ T9619] RDS/IB: syz2: added
[  122.611530][ T9619] smc: adding ib device syz2 with port count 1
[  122.613581][ T9619] smc:    ib device syz2 port 1 has pnetid 
[  122.892573][ T9648] netlink: 'syz.3.1113': attribute type 1 has an invalid length.
[  122.955516][   T64] smc: removing ib device syz2
[  122.991473][ T9651] netlink: 'syz.3.1114': attribute type 7 has an invalid length.
[  123.054101][ T9654] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1115'.
[  123.057816][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1115'.
[  123.214754][ T9662] netlink: 'syz.3.1119': attribute type 10 has an invalid length.
[  123.217393][ T9662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1119'.
[  123.486061][ T9675] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1123'.
[  123.488862][ T9675] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1123'.
[  123.550091][ T9677] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1124'.
[  123.862684][  T792] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  123.865048][  T792] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  123.893658][  T792] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  124.106057][ T9735] raw_sendmsg: syz.3.1138 forgot to set AF_INET. Fix it!
[  124.827838][ T9768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1150'.
[  124.898085][ T9774] batman_adv: batadv0: Adding interface: ipvlan2
[  124.900153][ T9774] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.908347][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.911743][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.914834][ T9774] batman_adv: batadv0: Interface activated: ipvlan2
[  125.037773][ T9782] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  125.105842][ T9789] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  125.109694][ T9789] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  125.114973][ T9789] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  125.361156][ T9812] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  125.417053][  T791] lo speed is unknown, defaulting to 1000
[  125.418845][  T791] syz0: Port: 1 Link DOWN
[  125.420220][  T791] lo speed is unknown, defaulting to 1000
[  125.465525][ T9832] xt_check_target: 23 callbacks suppressed
[  125.465539][ T9832] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  125.863797][   T33] audit: type=1107 audit(1753006907.639:4): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='FOqZ\e+CQ	ٶqR܂iclF3)>QVQPNt#Ʋ:S
[  125.863797][   T33] ",ٍ@oYWB}I'
[  125.873502][ T9872] x_tables: duplicate underflow at hook 2
[  126.216581][ T9905] validate_nla: 6 callbacks suppressed
[  126.216592][ T9905] netlink: 'syz.1.1195': attribute type 10 has an invalid length.
[  126.225204][ T9905] batman_adv: batadv0: Adding interface: netdevsim0
[  126.227232][ T9905] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1038) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.237417][ T9905] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  126.529716][ T9921] netlink: 'syz.1.1202': attribute type 12 has an invalid length.
[  126.533703][ T9921] netlink: 'syz.1.1202': attribute type 12 has an invalid length.
[  126.576930][ T9925] ip6gre1: entered allmulticast mode
[  126.667589][ T9931] lo speed is unknown, defaulting to 1000
[  126.798616][ T9941] netlink: 'syz.1.1207': attribute type 10 has an invalid length.
[  127.542904][ T9978] __nla_validate_parse: 21 callbacks suppressed
[  127.542918][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'.
[  128.643352][T10049] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1239'.
[  128.895066][T10075] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  129.108454][T10114] netlink: 'syz.3.1258': attribute type 4 has an invalid length.
[  129.124150][  T792] lo speed is unknown, defaulting to 1000
[  129.125988][  T792] syz0: Port: 1 Link ACTIVE
[  129.127584][ T5880] lo speed is unknown, defaulting to 1000
[  129.246143][T10131] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1265'.
[  129.257600][T10125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1264'.
[  129.352483][ T5844] nci: nci_rx_work: unknown MT 0x1
[  129.368723][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1265'.
[  130.504896][T10188] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  130.507779][T10188] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  130.739902][T10201] xt_hashlimit: size too large, truncated to 1048576
[  130.791543][T10203] : renamed from bridge_slave_0
[  130.889079][T10207] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1287'.
[  130.971558][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'.
[  130.985342][T10212] ip6gretap0: entered promiscuous mode
[  130.987430][T10212] macsec1: entered promiscuous mode
[  130.989257][T10212] macsec1: entered allmulticast mode
[  130.991381][T10212] ip6gretap0: entered allmulticast mode
[  131.173621][T10226] syzkaller0: entered promiscuous mode
[  131.175586][T10226] syzkaller0: entered allmulticast mode
[  131.266617][T10230] netlink: 'syz.0.1296': attribute type 1 has an invalid length.
[  131.269097][T10230] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1296'.
[  131.363848][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'.
[  131.366854][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1300'.
[  131.388539][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803db7bc00: rx timeout, send abort
[  131.737240][T10267] netlink: 'syz.1.1308': attribute type 1 has an invalid length.
[  131.891194][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803db7bc00: abort rx timeout. Force session deactivation
[  131.922574][T10288] netlink: 'syz.3.1313': attribute type 9 has an invalid length.
[  131.948925][T10287] macvlan0: left promiscuous mode
[  131.950709][T10287] netlink: 'syz.0.1312': attribute type 2 has an invalid length.
[  132.284214][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.352915][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803bcb2800: rx timeout, send abort
[  132.514724][   T33] audit: type=1107 audit(1753006914.289:5): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='9%ѶaAlqͽ~SJmydYCl?=hEAs:L*pܷR}gH_Kwc	k4t.1Y"[6e,긢<.W(Ii5Zn6,R"w;8l6.&iښ|BpV'
[  132.624195][T10347] __nla_validate_parse: 10 callbacks suppressed
[  132.624209][T10347] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1332'.
[  132.626212][T10348] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1332'.
[  132.770009][T10360] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1335'.
[  132.852976][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029afec00: rx timeout, send abort
[  132.855781][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803bcb2800: abort rx timeout. Force session deactivation
[  133.048036][T10370] xt_bpf: check failed: parse error
[  133.355669][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029afec00: abort rx timeout. Force session deactivation
[  133.431124][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e1f8400: rx timeout, send abort
[  133.488177][T10405] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  133.931191][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e1f9000: rx timeout, send abort
[  133.933785][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e1f8400: abort rx timeout. Force session deactivation
[  133.963965][T10422] netlink: 'syz.1.1356': attribute type 4 has an invalid length.
[  133.972803][T10422] netlink: 'syz.1.1356': attribute type 4 has an invalid length.
[  134.010844][T10424] syzkaller1: entered promiscuous mode
[  134.012685][T10424] syzkaller1: entered allmulticast mode
[  134.122286][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  134.358567][T10438] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.403769][T10438] block nbd1: not configured, cannot reconfigure
[  134.433895][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810e1f9000: abort rx timeout. Force session deactivation
[  134.550170][    C1] vcan0: j1939_tp_rxtimer: 0xffff888029a63000: rx timeout, send abort
[  134.652143][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1367'.
[  134.773726][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'.
[  134.814804][T10465] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1372'.
[  134.946780][T10471] lo speed is unknown, defaulting to 1000
[  134.988272][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1373'.
[  135.050227][    C1] vcan0: j1939_tp_rxtimer: 0xffff888108329000: rx timeout, send abort
[  135.052941][    C1] vcan0: j1939_tp_rxtimer: 0xffff888029a63000: abort rx timeout. Force session deactivation
[  135.087460][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'.
[  135.090351][T10475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1374'.
[  135.234076][T10478] netlink: 54 bytes leftover after parsing attributes in process `syz.1.1375'.
[  135.268849][T10481] netlink: 'syz.1.1376': attribute type 1 has an invalid length.
[  135.272166][T10482] netlink: 'syz.1.1376': attribute type 1 has an invalid length.
[  135.301384][T10484] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  135.552834][    C1] vcan0: j1939_tp_rxtimer: 0xffff888108329000: abort rx timeout. Force session deactivation
[  135.798930][T10513] netlink: 'syz.0.1385': attribute type 1 has an invalid length.
[  135.803422][T10513] netlink: 'syz.0.1385': attribute type 1 has an invalid length.
[  136.378165][T10540] tipc: Resetting bearer <eth:geneve1>
[  136.381765][T10540] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.384545][T10540] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.387248][T10540] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.389969][T10540] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.408742][T10540] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  136.414992][T10540] veth3: left promiscuous mode
[  136.416561][T10540] veth3: left allmulticast mode
[  136.419630][T10540] veth5: left promiscuous mode
[  136.422228][T10540] veth5: left allmulticast mode
[  136.425171][T10540] bond2: left promiscuous mode
[  136.426694][T10540] bond2: left allmulticast mode
[  136.437555][T10540] gre3: left allmulticast mode
[  136.604967][T10555] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  136.607383][T10555] team0: Device ipvlan2 is already an upper device of the team interface
[  136.886368][T10594] netlink: 'syz.0.1412': attribute type 12 has an invalid length.
[  136.892084][T10594] netlink: 'syz.0.1412': attribute type 29 has an invalid length.
[  136.964205][T10605] openvswitch: netlink: Unknown key attributes 2
[  137.249821][T10641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.261437][T10641] netlink: 'syz.1.1425': attribute type 1 has an invalid length.
[  137.265015][T10644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.269124][T10642] netlink: 'syz.1.1425': attribute type 1 has an invalid length.
[  137.328944][T10642] bond0: (slave gretap1): making interface the new active one
[  137.347082][T10642] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  137.409155][T10658] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  137.417749][T10660] netlink: 'syz.3.1431': attribute type 3 has an invalid length.
[  137.451849][ T5835] Bluetooth: hci2: link tx timeout
[  137.462483][ T5835] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  137.784471][T10695] __nla_validate_parse: 24 callbacks suppressed
[  137.784481][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'.
[  137.795390][T10695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  137.800112][   T47] lo speed is unknown, defaulting to 1000
[  137.804665][   T47] syz0: Port: 1 Link DOWN
[  137.806237][   T47] lo speed is unknown, defaulting to 1000
[  137.809747][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1438'.
[  137.838272][T10697] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  137.840878][T10697] tipc: Enabled bearer <udp:syz2>, priority 10
[  137.873452][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'.
[  137.971276][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  138.043719][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'.
[  138.048427][T10716] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1445'.
[  138.240841][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  138.274027][T10725] pim6reg0: tun_chr_ioctl cmd 1074025694
[  138.407701][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'.
[  138.447045][T10748] 8021q: adding VLAN 0 to HW filter on device bond7
[  138.451350][T10748] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1457'.
[  138.637090][T10761] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1462'.
[  138.747403][T10763] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  138.770753][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  138.881827][T10772] openvswitch: netlink: Flow key attr not present in new flow.
[  138.886979][T10774] openvswitch: netlink: Flow key attr not present in new flow.
[  139.480804][ T5836] Bluetooth: hci2: command 0x0405 tx timeout
[  139.827638][T10794] bond3: entered promiscuous mode
[  139.829365][T10794] bond3: entered allmulticast mode
[  139.834177][T10794] 8021q: adding VLAN 0 to HW filter on device bond3
[  139.894369][T10797] netlink: 'syz.3.1474': attribute type 5 has an invalid length.
[  139.896814][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'.
[  140.003747][T10806] netlink: 'syz.3.1478': attribute type 7 has an invalid length.
[  140.014953][T10806] : entered promiscuous mode
[  140.190528][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1481'.
[  141.232647][T10836] nbd: must specify at least one socket
[  142.111590][T10843] ipt_REJECT: TCP_RESET invalid for non-tcp
[  142.268779][T10853] netlink: 'syz.1.1494': attribute type 9 has an invalid length.
[  142.272156][T10853] net_ratelimit: 3 callbacks suppressed
[  142.272166][T10853] openvswitch: netlink: Key type 12298 is out of range max 32
[  142.276728][T10853] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002
[  142.920730][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  143.088205][T10872] __nla_validate_parse: 3 callbacks suppressed
[  143.088217][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'.
[  143.093382][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'.
[  143.337792][T10890] netlink: 'syz.0.1508': attribute type 9 has an invalid length.
[  143.343299][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'.
[  143.363828][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'.
[  143.393768][T10892] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  143.642920][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1522'.
[  143.651255][T10930] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  143.686995][T10937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1521'.
[  143.741503][T10941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1526'.
[  143.747593][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'.
[  143.764377][T10941] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1526'.
[  143.767117][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'.
[  143.858262][T10952] syzkaller1: entered promiscuous mode
[  143.860047][T10952] syzkaller1: entered allmulticast mode
[  143.903056][T10965] netlink: 'syz.3.1533': attribute type 1 has an invalid length.
[  143.909019][ T5880] IPVS: starting estimator thread 0...
[  143.942039][T10969] x_tables: duplicate underflow at hook 1
[  143.962340][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  143.984650][T10971] netlink: 'syz.3.1535': attribute type 5 has an invalid length.
[  143.993887][T10971] ip6erspan0: entered promiscuous mode
[  144.002562][T10967] IPVS: using max 61 ests per chain, 146400 per kthread
[  144.005909][T10975] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  144.433636][T10981] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  144.558336][T11001] netlink: 'syz.3.1543': attribute type 9 has an invalid length.
[  144.563577][T11001] netlink: 'syz.3.1543': attribute type 6 has an invalid length.
[  144.568854][T10992] netlink: 'syz.0.1539': attribute type 2 has an invalid length.
[  145.000836][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  145.279358][T11015] ip6erspan0: entered promiscuous mode
[  145.519667][T11042] syzkaller0: entered promiscuous mode
[  145.523205][T11042] syzkaller0: entered allmulticast mode
[  145.637253][T11062] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  145.641154][T11062] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  146.040751][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  146.221465][T11098] netlink: 'syz.3.1573': attribute type 20 has an invalid length.
[  146.223983][T11098] netlink: 'syz.3.1573': attribute type 21 has an invalid length.
[  146.635574][T11125] netlink: 'syz.1.1578': attribute type 8 has an invalid length.
[  147.080769][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  147.284888][T11180] trusted_key: syz.3.1600 sent an empty control message without MSG_MORE.
[  147.295156][T11180] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  147.316512][T11180] bridge2: entered promiscuous mode
[  147.318212][T11180] bridge2: entered allmulticast mode
[  147.343320][T11180] team0: Port device bridge2 added
[  147.843528][T11192] netlink: 'syz.3.1604': attribute type 3 has an invalid length.
[  148.075885][T11199] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  148.120791][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  148.253115][T11206] __nla_validate_parse: 84 callbacks suppressed
[  148.253127][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1610'.
[  148.298469][   T98] block nbd0: Possible stuck request ffff8880212f0000: control (read@0,4096B). Runtime 60 seconds
[  148.463866][T11210] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001
[  148.607841][T11218] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  148.706936][T11222] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1616'.
[  148.999442][T11237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'.
[  149.011214][T11237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1618'.
[  149.015330][T11237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'.
[  149.024194][T11237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'.
[  149.160808][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  149.380364][T11248] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  149.381486][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1623'.
[  149.386495][T11249] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  149.388930][T11249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.106050][T11266] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1629'.
[  150.200860][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  150.239168][T11276] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  150.247800][T11276] bridge0: port 2(dummy0) entered disabled state
[  150.254760][T11276] bond1: left allmulticast mode
[  150.256344][T11276] bond1: left promiscuous mode
[  150.257969][T11276] bridge0: port 1(bond1) entered disabled state
[  150.272897][T11276] bond4: (slave bridge1): Releasing backup interface
[  150.291896][T11276] team0: Port device bridge2 removed
[  150.297512][T11279] netlink: 'syz.3.1632': attribute type 10 has an invalid length.
[  150.358571][T11285] netlink: 'syz.3.1635': attribute type 1 has an invalid length.
[  150.363328][T11285] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1635'.
[  150.366159][T11285] netlink: 'syz.3.1635': attribute type 1 has an invalid length.
[  150.368592][T11285] netlink: 'syz.3.1635': attribute type 2 has an invalid length.
[  150.397025][T11287] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1636'.
[  150.438113][T11289] pimreg: entered allmulticast mode
[  150.466238][T11297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.542018][T11302] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  150.575832][T11304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.579064][T11304] sctp: [Deprecated]: syz.3.1642 (pid 11304) Use of int in maxseg socket option.
[  150.579064][T11304] Use struct sctp_assoc_value instead
[  150.954584][T11324] Unsupported ieee802154 address type: 0
[  151.011065][T11329] sctp: [Deprecated]: syz.3.1651 (pid 11329) Use of int in max_burst socket option.
[  151.011065][T11329] Use struct sctp_assoc_value instead
[  151.124781][T11332] netlink: 'syz.0.1653': attribute type 83 has an invalid length.
[  151.240823][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  151.349219][T11343] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  151.435001][T11346] netlink: 'syz.1.1657': attribute type 11 has an invalid length.
[  151.437566][T11346] netlink: 'syz.1.1657': attribute type 4 has an invalid length.
[  151.924313][T11355] netlink: 'syz.3.1660': attribute type 1 has an invalid length.
[  151.926866][T11355] NCSI netlink: No device for ifindex 813332851
[  152.085896][T11363] netlink: 'syz.0.1663': attribute type 4 has an invalid length.
[  152.118911][T11365] netlink: 'syz.0.1664': attribute type 1 has an invalid length.
[  152.133289][T11365] 8021q: adding VLAN 0 to HW filter on device bond8
[  152.149152][T11365] 8021q: adding VLAN 0 to HW filter on device bond8
[  152.151842][T11365] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  152.155947][T11365] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  152.189332][T11366] erspan0: entered allmulticast mode
[  152.200188][T11366] bond8: (slave erspan0): making interface the new active one
[  152.209587][T11366] bond8: (slave erspan0): Enslaving as an active interface with an up link
[  152.280763][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  152.288249][T11372] bond0: option miimon: invalid value (18446744073709551615)
[  152.290722][T11372] bond0: option miimon: allowed values 0 - 2147483647
[  152.389875][T11384] atomic_op ffff88803c2ef198 conn xmit_atomic 0000000000000000
[  152.406791][T11386] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  152.433329][T11388] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  152.436452][T11390] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.588670][   T33] audit: type=1107 audit(1753006934.359:6): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  152.660798][T11408] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  152.718683][T11415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.724832][T11415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.775200][T11421] xt_TPROXY: Can be used only with -p tcp or -p udp
[  152.806493][T11426] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  152.810175][T11426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.873564][T11436] netlink: 'syz.1.1691': attribute type 1 has an invalid length.
[  152.875516][T11437] xt_hashlimit: invalid rate
[  152.892988][T11436] 8021q: adding VLAN 0 to HW filter on device bond8
[  152.895426][T11433] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  152.897757][T11436] batadv_slave_1: entered promiscuous mode
[  152.903262][T11436] bond8: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  152.989577][T11444] xt_hashlimit: size too large, truncated to 1048576
[  153.104791][T11456] x_tables: duplicate underflow at hook 1
[  153.320736][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  153.321767][T11460] infiniband syz2: set down
[  153.324378][T11460] infiniband syz2: added syzkaller0
[  153.327448][T11460] syz2: rxe_create_cq: returned err = -12
[  153.329394][T11460] infiniband syz2: Couldn't create ib_mad CQ
[  153.336063][T11460] infiniband syz2: Couldn't open port 1
[  153.361251][T11460] RDS/IB: syz2: added
[  153.362708][T11460] smc: adding ib device syz2 with port count 1
[  153.365437][T11460] smc:    ib device syz2 port 1 has pnetid 
[  153.406488][T11479] netlink: 'syz.3.1704': attribute type 1 has an invalid length.
[  153.422781][T11479] bond5: entered promiscuous mode
[  153.424695][T11479] 8021q: adding VLAN 0 to HW filter on device bond5
[  153.428316][T11479] __nla_validate_parse: 11 callbacks suppressed
[  153.428324][T11479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1704'.
[  153.496707][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1706'.
[  153.714757][ T1088] smc: removing ib device syz2
[  154.119267][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'.
[  154.269232][T11528] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1724'.
[  154.336309][T11539] netlink: 'syz.1.1722': attribute type 64 has an invalid length.
[  154.360828][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  154.373294][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'.
[  154.421365][T11521] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1722'.
[  154.541003][T11560] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1731'.
[  154.565687][T11562] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  154.608377][T11568] syzkaller1: entered promiscuous mode
[  154.610099][T11568] syzkaller1: entered allmulticast mode
[  154.714885][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'.
[  154.717567][T11575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1736'.
[  154.728002][T11575] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.730918][T11575] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.733470][T11575] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.735909][T11575] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.739829][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'.
[  154.898475][T11595] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  155.286931][T11634] delete_channel: no stack
[  155.400845][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  155.566096][T11657] netlink: 'syz.1.1764': attribute type 1 has an invalid length.
[  155.589792][T11657] bond9: (slave gretap3): making interface the new active one
[  155.593075][T11657] bond9: (slave gretap3): Enslaving as an active interface with an up link
[  155.610969][T11657] syz.1.1764 (11657) used greatest stack depth: 17528 bytes left
[  155.800436][T11682] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  155.869135][T11683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.873719][T11683] syzkaller0: entered promiscuous mode
[  155.878620][T11683] syzkaller0: entered allmulticast mode
[  155.905475][T11683] tipc: Resetting bearer <eth:syzkaller0>
[  155.909693][T11697] netlink: 'syz.0.1777': attribute type 4 has an invalid length.
[  155.918379][T11697] netlink: 'syz.0.1777': attribute type 4 has an invalid length.
[  156.137308][T11706] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  156.353379][T11713] --map-set only usable from mangle table
[  156.363989][T11709] xt_CT: No such helper "pptp"
[  156.440844][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  156.591524][T11678] tipc: Resetting bearer <eth:syzkaller0>
[  156.608521][T11678] tipc: Disabling bearer <eth:syzkaller0>
[  156.673543][T11722] syzkaller0: entered promiscuous mode
[  156.675725][T11722] syzkaller0: entered allmulticast mode
[  157.483694][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  157.750225][T11732] lo speed is unknown, defaulting to 1000
[  157.914429][T11753] : renamed from bond_slave_0 (while UP)
[  157.982545][T11756] xt_ecn: cannot match TCP bits for non-tcp packets
[  158.002587][T11759] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  158.064264][T11765] xt_ecn: cannot match TCP bits for non-tcp packets
[  158.412599][T11796] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  158.521102][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  158.623852][T11798] nbd: must specify at least one socket
[  158.937016][T11837] __nla_validate_parse: 21 callbacks suppressed
[  158.937029][T11837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1820'.
[  159.068941][T11848] openvswitch: netlink: Duplicate or invalid key (type 0).
[  159.072754][T11848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.220125][T11865] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  159.374399][T11875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1833'.
[  159.384874][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1834'.
[  159.391199][T11875] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1833'.
[  159.396003][T11875] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1833'.
[  159.418856][T11876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.422073][T11876] syzkaller0: entered promiscuous mode
[  159.423794][T11876] syzkaller0: entered allmulticast mode
[  159.435773][T11876] tipc: Resetting bearer <eth:syzkaller0>
[  159.469070][T11879] lo speed is unknown, defaulting to 1000
[  159.503164][T11882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1836'.
[  159.505900][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'.
[  159.560872][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  159.734224][T11896] openvswitch: netlink: Key type 30 is not supported
[  159.787363][T11900] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1842'.
[  159.814083][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'.
[  159.817617][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1841'.
[  159.956826][T11914] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  160.137850][T11932] lo speed is unknown, defaulting to 1000
[  160.172097][T11935] 8021q: adding VLAN 0 to HW filter on device team0
[  160.176024][T11935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.416612][T11952] netlink: 'syz.1.1857': attribute type 1 has an invalid length.
[  160.419450][T11952] netlink: 'syz.1.1857': attribute type 4 has an invalid length.
[  160.424229][T11952] netlink: 'syz.1.1857': attribute type 1 has an invalid length.
[  160.426661][T11952] netlink: 'syz.1.1857': attribute type 4 has an invalid length.
[  160.475622][T11952] netlink: 'syz.1.1857': attribute type 5 has an invalid length.
[  160.600931][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  160.652974][T11964] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  160.656062][T11964] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  160.861482][T11971] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  160.996413][T11978] netlink: 'syz.3.1864': attribute type 1 has an invalid length.
[  161.320344][T12002] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  161.631858][T12026] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  161.640869][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  161.735295][T12028] netlink: 'syz.1.1881': attribute type 5 has an invalid length.
[  162.082901][T12053] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  162.113405][T12055] netlink: 'syz.1.1890': attribute type 1 has an invalid length.
[  162.354027][T12078] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  162.420318][T12083] netlink: 'syz.1.1899': attribute type 1 has an invalid length.
[  162.440473][T12083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  162.447678][T12083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  162.450671][T12083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  162.454130][T12083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  162.459796][T12083] bond10: (slave geneve2): making interface the new active one
[  162.464577][T12083] bond10: (slave geneve2): Enslaving as an active interface with an up link
[  162.568506][T12088] xt_CT: No such helper "snmp"
[  162.643778][T12103] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  162.656872][T12099] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  162.659347][T12099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.676252][T12105] @: renamed from bond_slave_0
[  162.690805][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  162.721458][T12109] netlink: 'syz.1.1907': attribute type 1 has an invalid length.
[  162.727611][T12107] bond0: entered promiscuous mode
[  162.729631][T12107] : entered promiscuous mode
[  162.733768][T12107] bond_slave_1: entered promiscuous mode
[  162.736374][T12107] xt_hashlimit: size too large, truncated to 1048576
[  162.787506][T12114] debugfs: Directory 'netdev:nicvf0' with parent 'phy5' already present!
[  162.826876][T12106] bond0: left promiscuous mode
[  162.828528][T12106] : left promiscuous mode
[  162.830348][T12106] bond_slave_1: left promiscuous mode
[  162.864667][T12120] unknown channel width for channel at 909000KHz?
[  162.866966][T12120] unknown channel width for channel at 909000KHz?
[  162.869422][T12120] unknown channel width for channel at 909000KHz?
[  162.913033][T12127] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  162.951309][T12129] bridge0: port 1(erspan0) entered blocking state
[  162.958551][T12129] bridge0: port 1(erspan0) entered disabled state
[  162.962446][T12129] erspan0: entered allmulticast mode
[  162.971241][T12129] erspan0: entered promiscuous mode
[  162.976133][T12129] bridge0: port 1(erspan0) entered blocking state
[  162.979247][T12129] bridge0: port 1(erspan0) entered forwarding state
[  163.011519][T12130] erspan0: left allmulticast mode
[  163.013174][T12130] erspan0: left promiscuous mode
[  163.014987][T12130] bridge0: port 1(erspan0) entered disabled state
[  163.730858][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  164.017580][T12169] __nla_validate_parse: 27 callbacks suppressed
[  164.017595][T12169] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1921'.
[  164.028156][T12177] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1921'.
[  164.032606][T12178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1923'.
[  164.035363][T12178] dummy0: left promiscuous mode
[  164.036900][T12178] dummy0: left allmulticast mode
[  164.041313][T12178] bridge0: port 1(dummy0) entered blocking state
[  164.043356][T12178] bridge0: port 1(dummy0) entered disabled state
[  164.045386][T12178] dummy0: entered allmulticast mode
[  164.055299][T12178] dummy0: entered promiscuous mode
[  164.059832][T12178] bridge0: port 1(dummy0) entered blocking state
[  164.062012][T12178] bridge0: port 1(dummy0) entered forwarding state
[  164.112576][T12186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1925'.
[  164.154507][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1926'.
[  164.157367][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1926'.
[  164.162453][T12190] bridge_slave_1: default FDB implementation only supports local addresses
[  164.306383][T12186] lo speed is unknown, defaulting to 1000
[  164.441158][T12207] ip6tnl1: entered promiscuous mode
[  164.443123][T12207] ip6tnl1: entered allmulticast mode
[  164.445800][T12207] team0: Device ip6tnl1 is of different type
[  164.638419][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1936'.
[  164.642363][T12220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1936'.
[  164.714418][T12228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'.
[  164.765823][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  164.800104][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1940'.
[  165.044836][T12263] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  165.241202][   T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  165.322576][T12293] dummy0: left allmulticast mode
[  165.324203][T12293] dummy0: left promiscuous mode
[  165.325855][T12293] bridge0: port 1(dummy0) entered disabled state
[  165.802338][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  166.235782][T12314] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  166.316812][T12327] x_tables: duplicate underflow at hook 4
[  166.451134][T12343] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  166.473691][T12345] validate_nla: 10 callbacks suppressed
[  166.473704][T12345] netlink: 'syz.0.1972': attribute type 1 has an invalid length.
[  166.524790][T12349] tipc: Enabling of bearer <et:g> rejected, media not registered
[  166.635570][T12360] xt_cgroup: xt_cgroup: no path or classid specified
[  166.737957][T12370] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  166.746734][T12372] netlink: 'syz.1.1982': attribute type 1 has an invalid length.
[  166.782249][T12372] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  166.787133][ T5844] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  166.787762][T12372] 8021q: adding VLAN 0 to HW filter on device bond11
[  166.840934][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  166.910837][   T13] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  167.013964][T12398] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  167.066992][T12402] netlink: 'syz.0.1992': attribute type 2 has an invalid length.
[  167.139635][T12400] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  167.237477][T12417] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  167.278371][T12421] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  167.547290][T12441] syzkaller1: entered promiscuous mode
[  167.549088][T12441] syzkaller1: entered allmulticast mode
[  167.880804][    C0] net_ratelimit: 3 callbacks suppressed
[  167.880821][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  168.801587][T12460] xt_l2tp: wrong L2TP version: 0
[  168.803112][T12459] Unsupported ieee802154 address type: 0
[  168.920850][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  169.861380][T12493] __nla_validate_parse: 11 callbacks suppressed
[  169.861395][T12493] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2019'.
[  169.878107][T12493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2019'.
[  169.961026][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  169.975125][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2020'.
[  169.993936][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'.
[  170.070098][T12511] netlink: 'syz.1.2023': attribute type 64 has an invalid length.
[  170.113346][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2023'.
[  170.264539][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2029'.
[  170.271661][T12529] netlink: 'syz.3.2029': attribute type 5 has an invalid length.
[  170.274260][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'.
[  170.325739][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2031'.
[  170.639868][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2035'.
[  170.837385][T12561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2041'.
[  170.852944][T12561] bond9: entered promiscuous mode
[  170.854874][T12561] 8021q: adding VLAN 0 to HW filter on device bond9
[  170.934407][T12561] bond9 (unregistering): Released all slaves
[  171.000926][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  171.034556][T12565] netlink: 'syz.0.2042': attribute type 1 has an invalid length.
[  171.072205][T12565] nbd: socks must be embedded in a SOCK_ITEM attr
[  171.075230][T12565] block nbd1: shutting down sockets
[  171.164385][T12571] xt_hashlimit: invalid rate
[  171.311680][T12577] netlink: 'syz.0.2047': attribute type 6 has an invalid length.
[  171.534490][T12604] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  171.893889][T12627] veth0_to_team: entered promiscuous mode
[  171.895780][T12627] veth0_to_team: entered allmulticast mode
[  171.977976][T12631] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  172.040880][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  172.268590][T12644] netlink: 'syz.1.2071': attribute type 83 has an invalid length.
[  172.322701][T12652] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  172.325181][T12652] tipc: Bearer <udp:s>: trying with adjusted priority
[  172.327846][T12652] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  172.332980][T12652] netlink: 'syz.0.2074': attribute type 1 has an invalid length.
[  172.691802][T12673] lo speed is unknown, defaulting to 1000
[  173.080797][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  173.309875][T12703] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  173.683447][T12735] netlink: 'syz.0.2103': attribute type 1 has an invalid length.
[  173.685979][T12735] netlink: 'syz.0.2103': attribute type 1 has an invalid length.
[  174.120897][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  174.283911][T12769] Cannot find add_set index 2 as target
[  174.673704][T12795] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  174.684615][T12797] netlink: 'syz.1.2123': attribute type 10 has an invalid length.
[  174.710303][T12799] netlink: 'syz.3.2124': attribute type 1 has an invalid length.
[  174.732428][T12799] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  174.736576][T12799] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  174.782372][T12804] macvlan6: entered promiscuous mode
[  174.784673][T12804] macvlan6: entered allmulticast mode
[  174.787171][T12804] bond6: entered promiscuous mode
[  174.790392][T12804] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  174.797436][T12804] bond6: left promiscuous mode
[  175.161061][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  175.378801][T12811] __nla_validate_parse: 22 callbacks suppressed
[  175.378815][T12811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2127'.
[  175.386190][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2127'.
[  175.388999][T12811] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2127'.
[  175.537429][T12820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2130'.
[  175.542793][T12822] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  175.581291][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2132'.
[  175.786262][T12841] netlink: 'syz.3.2137': attribute type 1 has an invalid length.
[  175.795134][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2136'.
[  175.852791][T12841] nbd1: detected capacity change from 0 to 127
[  175.861579][T12841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2137'.
[  175.864613][T12841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2137'.
[  175.884266][   T56] block nbd1: Receive control failed (result -104)
[  175.937532][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2141'.
[  175.942279][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2140'.
[  176.000332][T12857] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  176.064464][T12859] wireguard0: entered promiscuous mode
[  176.066222][T12859] wireguard0: entered allmulticast mode
[  176.142318][T12874] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.200823][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  177.250946][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  178.280916][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  178.374166][   T98] block nbd0: Possible stuck request ffff8880212f0000: control (read@0,4096B). Runtime 90 seconds
[  179.320962][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  180.089341][ T5280] udevd[5280]: worker [6101] /devices/virtual/block/nbd0 is taking a long time
[  180.360895][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  180.441604][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  181.400870][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  182.440905][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  183.483996][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  184.520951][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  185.560857][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  186.600982][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  187.641008][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  188.690828][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  189.730903][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  190.760996][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  191.800946][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  192.840919][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  193.880988][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  194.930878][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  195.960852][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  197.001294][    C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  198.040781][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  199.080853][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  200.120814][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  201.160968][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  202.200949][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  203.240966][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  204.280901][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  204.760178][T12887] __nla_validate_parse: 3 callbacks suppressed
[  204.760189][T12887] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2149'.
[  204.803820][T12894] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  204.844719][T12898] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2156'.
[  204.854662][T12898] tap0: tun_chr_ioctl cmd 1074025680
[  204.858653][T12898] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.862029][T12898] sch_fq: defrate 0 ignored.
[  204.863804][T12898] D: renamed from syzkaller0 (while UP)
[  204.866368][T12898] tipc: Disabling bearer <eth:syzkaller0>
[  204.875660][T12898] veth0_macvtap: left promiscuous mode
[  205.027148][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'.
[  205.056833][T12920] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  205.065890][T12923] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  205.274718][T12953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.277256][T12953] syzkaller0: entered promiscuous mode
[  205.279088][T12953] syzkaller0: entered allmulticast mode
[  205.294807][T12953] tipc: Resetting bearer <eth:syzkaller0>
[  205.299810][T12952] tipc: Resetting bearer <eth:syzkaller0>
[  205.309585][T12952] tipc: Disabling bearer <eth:syzkaller0>
[  205.320843][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  205.465409][T12972] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001
[  205.498681][T12975] sctp: [Deprecated]: syz.1.2176 (pid 12975) Use of struct sctp_assoc_value in delayed_ack socket option.
[  205.498681][T12975] Use struct sctp_sack_info instead
[  206.169369][T12984] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2181'.
[  206.270199][T12998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2185'.
[  206.357734][T13007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2190'.
[  206.360800][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  206.368117][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2191'.
[  206.374065][T13011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2190'.
[  206.388850][T13007] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2190'.
[  206.469058][T13025] netlink: 'syz.1.2195': attribute type 11 has an invalid length.
[  206.473976][T13025] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2195'.
[  206.525339][T13033] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  206.595690][T13042] syzkaller1: entered promiscuous mode
[  206.597470][T13042] syzkaller1: entered allmulticast mode
[  206.708872][T13056] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  206.845458][T13073] netlink: 'syz.1.2209': attribute type 1 has an invalid length.
[  206.927282][T13080] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  207.311365][T13102] netlink: 'syz.1.2218': attribute type 83 has an invalid length.
[  207.400774][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  207.434550][T13108] xt_TCPMSS: Only works on TCP SYN packets
[  207.553841][T13116] sctp: [Deprecated]: syz.3.2223 (pid 13116) Use of int in maxseg socket option.
[  207.553841][T13116] Use struct sctp_assoc_value instead
[  207.607085][T13121] lo speed is unknown, defaulting to 1000
[  208.263717][T13176] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  208.284020][T13179] netlink: 'syz.3.2246': attribute type 4 has an invalid length.
[  208.309563][T13173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  208.329847][T13181] lo speed is unknown, defaulting to 1000
[  208.386174][T13184] netlink: 'syz.3.2247': attribute type 1 has an invalid length.
[  208.418458][T13184] bond7: (slave gretap2): making interface the new active one
[  208.421680][T13184] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  208.440902][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  208.450956][   T98] block nbd0: Possible stuck request ffff8880212f0000: control (read@0,4096B). Runtime 120 seconds
[  208.738242][T13201] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  208.889507][T13207] netlink: 'syz.1.2257': attribute type 1 has an invalid length.
[  208.917587][T13209] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  209.179395][T13236] netlink: 'syz.0.2267': attribute type 1 has an invalid length.
[  209.182957][T13236] netlink: 'syz.0.2267': attribute type 10 has an invalid length.
[  209.204396][T13240] ipt_REJECT: ECHOREPLY no longer supported.
[  209.240041][T13247] netlink: 'syz.0.2267': attribute type 17 has an invalid length.
[  209.243810][T13247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.248557][T13248] 8021q: VLANs not supported on gre0
[  209.319009][T13255] openvswitch: netlink: Flow actions attr not present in new flow.
[  209.328327][T13255] netlink: 'syz.3.2273': attribute type 5 has an invalid length.
[  209.385781][T13256] syzkaller1: entered promiscuous mode
[  209.387459][T13256] syzkaller1: entered allmulticast mode
[  209.480911][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  210.099770][T13260] __nla_validate_parse: 22 callbacks suppressed
[  210.099782][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'.
[  210.105519][T13260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'.
[  210.108456][T13260] netlink: 'syz.1.2275': attribute type 5 has an invalid length.
[  210.289913][T13287] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2280'.
[  210.293649][T13287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2280'.
[  210.329266][T13293] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  210.367622][T13299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2284'.
[  210.389559][T13301] macsec2: entered allmulticast mode
[  210.391545][T13301] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode
[  210.395246][T13301] mac80211_hwsim hwsim11 wlan0: left allmulticast mode
[  210.442747][T13307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2286'.
[  210.521043][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  210.599307][T13327] Cannot find add_set index 2 as target
[  210.695689][T13343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2293'.
[  210.706988][T13345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2295'.
[  210.755936][T13347] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.2296'.
[  210.816889][    C1] vcan0: j1939_tp_rxtimer: 0xffff888109037c00: rx timeout, send abort
[  211.117075][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112a00800: rx timeout, send abort
[  211.319595][    C1] vcan0: j1939_tp_rxtimer: 0xffff888109037c00: abort rx timeout. Force session deactivation
[  211.373384][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'.
[  211.560869][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  211.591617][T13369] xt_CT: No such helper "pptp"
[  211.619734][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112a00800: abort rx timeout. Force session deactivation
[  212.168314][T13414] SET target dimension over the limit!
[  212.287365][T13417] Unsupported ieee802154 address type: 0
[  212.386893][T13423] netlink: 'syz.1.2319': attribute type 1 has an invalid length.
[  212.570413][T13444] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  212.576343][T13444] netlink: 'syz.3.2325': attribute type 7 has an invalid length.
[  212.600819][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  212.703630][T13464] syzkaller1: entered promiscuous mode
[  212.707825][T13464] syzkaller1: entered allmulticast mode
[  213.149593][T13514] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  213.640815][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  214.690827][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  215.028592][T13590] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.269104][T13609] __nla_validate_parse: 17 callbacks suppressed
[  215.269121][T13609] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2365'.
[  215.427953][T13617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2368'.
[  215.430910][T13617] netlink: 'syz.1.2368': attribute type 7 has an invalid length.
[  215.433411][T13617] netlink: 'syz.1.2368': attribute type 8 has an invalid length.
[  215.435862][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'.
[  215.532347][T13626] xt_limit: Overflow, try lower: 0/0
[  215.645350][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'.
[  215.720847][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  215.762564][T13640] x_tables: duplicate underflow at hook 2
[  215.791549][T13649] smc: net device bond0 applied user defined pnetid SYZ2
[  215.794927][T13649] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2376'.
[  216.038453][T13678] tipc: Resetting bearer <ib:ip6gre0>
[  216.048509][T13678] bridge0: port 3(dummy0) entered disabled state
[  216.050575][T13678] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.053186][T13678] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.137655][T13678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.158672][T13678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.233004][T13678] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.235911][T13678] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.242433][T13678] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.245296][T13678] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  216.277127][T13678] batman_adv: batadv0: Interface deactivated: ipvlan2
[  216.412390][T13700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2390'.
[  216.553984][T13709] xt_bpf: check failed: parse error
[  216.556797][T13711] IPVS: Unknown mcast interface: syz_tun
[  216.619173][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2394'.
[  216.663201][T13724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2398'.
[  216.760813][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  216.847614][T13741] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2404'.
[  217.046865][T13757] netlink: 'syz.0.2409': attribute type 10 has an invalid length.
[  217.050875][T13757] 8021q: adding VLAN 0 to HW filter on device team0
[  217.053998][T13757] bond0: (slave team0): Enslaving as an active interface with an up link
[  217.062943][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'.
[  217.109098][T13775] pimreg: entered allmulticast mode
[  217.252204][T13792] netlink: 'syz.0.2419': attribute type 1 has an invalid length.
[  217.513165][T13814] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  217.630862][T13819] bridge0: port 3(dummy0) entered disabled state
[  217.634198][T13819] bridge_slave_1: left allmulticast mode
[  217.636088][T13819] bridge_slave_1: left promiscuous mode
[  217.637916][T13819] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.643058][T13819] bridge_slave_0: left allmulticast mode
[  217.644905][T13819] bridge_slave_0: left promiscuous mode
[  217.646871][T13819] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.800842][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  218.099814][T13838] lo speed is unknown, defaulting to 1000
[  218.510213][T13848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.514453][T13848] syzkaller0: entered promiscuous mode
[  218.516364][T13848] syzkaller0: entered allmulticast mode
[  218.532474][T13849] tipc: Resetting bearer <eth:syzkaller0>
[  218.535867][T13847] tipc: Resetting bearer <eth:syzkaller0>
[  218.544277][T13847] tipc: Disabling bearer <eth:syzkaller0>
[  218.689832][T13857] openvswitch: netlink: IP tunnel dst address not specified
[  218.721551][T13857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.836807][T13864] 8021q: adding VLAN 0 to HW filter on device bond8
[  218.840846][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  218.851841][T13864] macvlan6: entered promiscuous mode
[  218.853665][T13864] macvlan6: entered allmulticast mode
[  218.856226][T13864] bond0: entered allmulticast mode
[  218.857955][T13864] bond0: entered promiscuous mode
[  218.859963][T13864] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  218.866827][T13864] bond8: (slave macvlan6): Enslaving as an active interface with an up link
[  218.965062][T13879] netlink: 'syz.3.2447': attribute type 1 has an invalid length.
[  218.995163][T13879] 8021q: adding VLAN 0 to HW filter on device bond10
[  218.998740][T13879] bond9: (slave bond10): making interface the new active one
[  219.003973][T13879] bond9: (slave bond10): Enslaving as an active interface with an up link
[  219.317828][T13910] tipc: Enabled bearer <eth:vlan0>, priority 18
[  219.363259][T13920] netlink: 'syz.0.2461': attribute type 1 has an invalid length.
[  219.383395][T13923] erspan0: entered promiscuous mode
[  219.385840][T13923] macvtap1: entered promiscuous mode
[  219.387829][T13923] macvtap1: entered allmulticast mode
[  219.389525][T13923] erspan0: entered allmulticast mode
[  219.554518][T13950] _Z`Ԁ@: entered promiscuous mode
[  219.880872][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  219.996015][T13997] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20003
[  220.099953][T14009] netlink: 'syz.3.2484': attribute type 4 has an invalid length.
[  220.352204][T14031] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  220.387316][T14031] __nla_validate_parse: 61 callbacks suppressed
[  220.387328][T14031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2488'.
[  220.438281][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2490'.
[  220.441980][T14039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.588709][T14060] netlink: 'syz.3.2494': attribute type 39 has an invalid length.
[  220.672304][T14068] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  220.709590][T14072] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.2498'.
[  220.733598][T14074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2499'.
[  220.799176][T14087] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  220.814779][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'.
[  220.893592][T14102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2508'.
[  220.920834][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  221.029938][T14119] openvswitch: netlink: Missing key (keys=40, expected=80)
[  221.145183][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2517'.
[  221.233374][T14132] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2518'.
[  221.262926][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2519'.
[  221.266011][T14134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2519'.
[  221.303497][T14136] syzkaller1: entered promiscuous mode
[  221.305269][T14136] syzkaller1: entered allmulticast mode
[  221.456312][T14142] netlink: 'syz.1.2522': attribute type 2 has an invalid length.
[  221.456312][T14140] netlink: 'syz.1.2522': attribute type 2 has an invalid length.
[  221.852267][T14165] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  221.861077][T14165] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  221.960801][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  222.476460][T14190] sctp: [Deprecated]: syz.1.2533 (pid 14190) Use of int in max_burst socket option deprecated.
[  222.476460][T14190] Use struct sctp_assoc_value instead
[  222.536878][T14192] sctp: [Deprecated]: syz.1.2533 (pid 14192) Use of int in max_burst socket option deprecated.
[  222.536878][T14192] Use struct sctp_assoc_value instead
[  222.872441][T14221] veth0: entered promiscuous mode
[  223.000831][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  223.234451][T14227] xt_CT: You must specify a L4 protocol and not use inversions on it
[  223.581913][T14213] veth0: left promiscuous mode
[  223.714322][T14254] netlink: 'syz.0.2552': attribute type 4 has an invalid length.
[  224.040867][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  224.167838][T14315] pim6reg: left allmulticast mode
[  224.647877][T14330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.651886][T14330] syzkaller0: entered promiscuous mode
[  224.653874][T14330] syzkaller0: entered allmulticast mode
[  224.664127][T14329] tipc: Resetting bearer <eth:syzkaller0>
[  224.683116][T14329] tipc: Disabling bearer <eth:syzkaller0>
[  224.770961][T14339] bond_slave_1: mtu greater than device maximum
[  224.828421][T14350] netlink: 'syz.3.2572': attribute type 11 has an invalid length.
[  225.080866][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  225.254548][T14379] syzkaller1: entered promiscuous mode
[  225.256843][T14379] syzkaller1: entered allmulticast mode
[  225.433826][T14385] __nla_validate_parse: 13 callbacks suppressed
[  225.433836][T14385] netlink: 14220 bytes leftover after parsing attributes in process `syz.1.2584'.
[  225.543033][T14394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.749985][T14406] netlink: 'syz.1.2591': attribute type 1 has an invalid length.
[  225.763260][T14406] bond12: entered promiscuous mode
[  225.765398][T14406] 8021q: adding VLAN 0 to HW filter on device bond12
[  225.776768][T14406] 8021q: adding VLAN 0 to HW filter on device bond12
[  225.779849][T14406] bond12: (slave vcan1): The slave device specified does not support setting the MAC address
[  225.783313][T14406] bond12: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  225.788706][T14406] bond12: (slave vcan1): making interface the new active one
[  225.791745][T14406] vcan1: entered promiscuous mode
[  225.794032][T14406] bond12: (slave vcan1): Enslaving as an active interface with an up link
[  225.871388][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'.
[  225.874218][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2596'.
[  225.939858][T14416] workqueue: Failed to create a rescuer kthread for wq "nfc13_nci_tx_wq": -EINTR
[  225.943393][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'.
[  225.953933][T14458] netlink: 'syz.0.2597': attribute type 30 has an invalid length.
[  225.956731][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2597'.
[  225.968550][T14458] macsec1: entered allmulticast mode
[  225.970268][T14458] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  225.982038][T14458] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  226.121744][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  226.309142][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'.
[  226.313319][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'.
[  226.323787][T14482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2607'.
[  226.751420][T14513] vlan0: entered promiscuous mode
[  226.753044][T14513] veth1_to_bridge: entered promiscuous mode
[  226.902187][T14528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2620'.
[  227.160791][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  227.210182][T14541] netlink: 'syz.0.2623': attribute type 64 has an invalid length.
[  227.214167][T14541] netlink: 'syz.0.2623': attribute type 1 has an invalid length.
[  227.299999][T14550] openvswitch: netlink: IPv4 tunnel dst address is zero
[  227.419734][T14559] team0: Device gtp1 is of different type
[  227.634453][T14573] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  227.664883][T14575] netlink: 'syz.0.2633': attribute type 6 has an invalid length.
[  227.669080][T14576] netlink: 'syz.0.2633': attribute type 6 has an invalid length.
[  227.679278][ T5880] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1
[  227.685917][ T5880] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22
[  227.735840][T14576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2633'.
[  228.179138][T14616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.181637][T14616] IPv6: NLM_F_CREATE should be set when creating new route
[  228.183830][T14616] IPv6: NLM_F_CREATE should be set when creating new route
[  228.186063][T14616] IPv6: NLM_F_CREATE should be set when creating new route
[  228.193299][T14616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.200782][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  228.214463][T14618] netlink: 'syz.3.2645': attribute type 1 has an invalid length.
[  228.216858][T14618] netlink: 'syz.3.2645': attribute type 2 has an invalid length.
[  228.300805][T14626] xt_TPROXY: Can be used only with -p tcp or -p udp
[  228.305815][T14626] set match dimension is over the limit!
[  228.334882][T14630] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  229.162146][T14651] netlink: 'syz.3.2655': attribute type 39 has an invalid length.
[  229.240757][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  229.525315][T14680] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  229.648508][T14686] lo speed is unknown, defaulting to 1000
[  229.976571][T14731] netlink: 'syz.3.2680': attribute type 4 has an invalid length.
[  230.036231][T14735] netlink: 'syz.3.2683': attribute type 3 has an invalid length.
[  230.280812][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  230.635536][T14769] __nla_validate_parse: 10 callbacks suppressed
[  230.635573][T14769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2692'.
[  230.675299][T14771] bridge_slave_0: default FDB implementation only supports local addresses
[  230.840462][T14788] team0: Port device gtp0 added
[  230.855894][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'.
[  230.855906][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'.
[  230.957039][T14804] netlink: zone id is out of range
[  230.958737][T14804] netlink: zone id is out of range
[  230.960344][T14804] netlink: zone id is out of range
[  230.965495][T14804] netlink: zone id is out of range
[  230.967201][T14804] netlink: zone id is out of range
[  230.968954][T14804] netlink: zone id is out of range
[  230.971118][T14804] netlink: zone id is out of range
[  230.973040][T14804] netlink: zone id is out of range
[  230.974736][T14804] netlink: zone id is out of range
[  231.018982][T14809] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  231.058717][T14809] can: request_module (can-proto-5) failed.
[  231.067644][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'.
[  231.185765][T14827] netlink: 'syz.0.2708': attribute type 1 has an invalid length.
[  231.188684][T14827] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2708'.
[  231.266013][T14839] team0: Device gtp1 is of different type
[  231.377189][T14851] x_tables: duplicate underflow at hook 2
[  231.390989][T14851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2717'.
[  231.405493][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'.
[  231.525565][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2724'.
[  231.620186][T14880] set match dimension is over the limit!
[  231.637638][T14882] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  231.646456][T14882] bond8: (slave erspan0): Releasing active interface
[  231.653472][T14882] bond0: (slave team0): Releasing backup interface
[  231.658112][T14882] bond0: (slave ): Releasing backup interface
[  231.664284][T14882] bond0: (slave bond_slave_1): Releasing backup interface
[  231.669893][T14882] team0: Port device team_slave_0 removed
[  231.674471][T14882] team0: Port device team_slave_1 removed
[  231.676517][T14882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.679307][T14882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  231.679501][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'.
[  231.686350][T14882] bond2: (slave gretap1): Releasing active interface
[  231.690278][T14882] bond6: (slave gretap2): Releasing active interface
[  231.694362][T14882] bond7: (slave gretap3): Releasing active interface
[  231.697859][T14882] batman_adv: batadv0: Removing interface: ipvlan2
[  231.712061][T14882] netlink: 'syz.0.2729': attribute type 10 has an invalid length.
[  231.715943][T14882] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  231.718931][T14882] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  231.757813][T14890] 8021q: adding VLAN 0 to HW filter on device bond11
[  231.762529][T14890] bridge0: port 1(bond11) entered blocking state
[  231.764607][T14890] bridge0: port 1(bond11) entered disabled state
[  231.766657][T14890] bond11: entered allmulticast mode
[  231.769503][T14890] bond11: entered promiscuous mode
[  231.773854][T14890] bridge0: port 1(bond11) entered blocking state
[  231.776077][T14890] bridge0: port 1(bond11) entered forwarding state
[  231.783858][ T7557] bridge0: port 1(bond11) entered disabled state
[  231.844004][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'.
[  231.855421][T14899] netlink: 'syz.3.2733': attribute type 10 has an invalid length.
[  232.074130][T14916] tipc: Enabled bearer <eth:team0>, priority 0
[  232.371862][T14946] netlink: 'syz.1.2748': attribute type 1 has an invalid length.
[  232.510400][T14954] vxcan0: entered allmulticast mode
[  232.622492][T14978] netlink: 'syz.1.2756': attribute type 12 has an invalid length.
[  232.626699][T14978] netlink: 'syz.1.2756': attribute type 12 has an invalid length.
[  232.712353][T14980] netlink: 'syz.3.2757': attribute type 1 has an invalid length.
[  232.714774][T14980] netlink: 'syz.3.2757': attribute type 3 has an invalid length.
[  232.810338][T14992] bond9: (slave bridge0): Enslaving as an active interface with an up link
[  232.915810][T15016] geneve4: entered promiscuous mode
[  232.929151][T15014] vlan2: entered promiscuous mode
[  232.931448][T15014] bond0: entered promiscuous mode
[  233.109904][T15038] 8021q: adding VLAN 0 to HW filter on device bond10
[  233.245505][T15058] IPVS: Unknown mcast interface: wg0
[  233.684979][T15103] NCSI netlink: No device for ifindex 3088861696
[  233.948019][ T5837] cgroup: fork rejected by pids controller in /syz0
[  234.676328][T15127] sctp: [Deprecated]: syz.1.2804 (pid 15127) Use of int in max_burst socket option deprecated.
[  234.676328][T15127] Use struct sctp_assoc_value instead
[  235.305504][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.309191][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.313213][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.316508][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.319172][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.369813][T15135] lo speed is unknown, defaulting to 1000
[  235.480762][    C0] net_ratelimit: 271 callbacks suppressed
[  235.480773][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  235.559219][T15135] chnl_net:caif_netlink_parms(): no params data found
[  235.620409][T15135] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.624581][T15135] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.626848][T15135] bridge_slave_0: entered allmulticast mode
[  235.629565][T15135] bridge_slave_0: entered promiscuous mode
[  235.633391][T15135] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.635606][T15135] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.637853][T15135] bridge_slave_1: entered allmulticast mode
[  235.642838][T15135] bridge_slave_1: entered promiscuous mode
[  235.670865][T15135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.675505][T15135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.701358][T15160] __nla_validate_parse: 20 callbacks suppressed
[  235.701369][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2810'.
[  236.217107][T15167] SET target dimension over the limit!
[  236.224679][T15135] team0: Port device team_slave_0 added
[  236.232494][T15135] team0: Port device team_slave_1 added
[  236.255984][T15135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.258113][T15135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.290951][T15135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.294757][T15170] bridge_slave_1: default FDB implementation only supports local addresses
[  236.299614][T15135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.304666][T15135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.313068][T15135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.317101][T15173] bridge_slave_1: default FDB implementation only supports local addresses
[  236.372993][T15135] hsr_slave_0: entered promiscuous mode
[  236.377475][T15135] hsr_slave_1: entered promiscuous mode
[  236.395033][T15135] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.397329][T15135] Cannot create hsr debugfs directory
[  236.420000][T15180] team0: Port device gtp1 added
[  236.517791][T15188] netlink: 410 bytes leftover after parsing attributes in process `syz.1.2820'.
[  236.520838][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  236.543208][T15188] xt_CT: No such helper "syz1"
[  236.614000][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'.
[  236.617094][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2822'.
[  236.672743][T15200] team0: Port device gtp1 added
[  236.751767][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'.
[  236.757960][T15202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2825'.
[  236.777714][T15135] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  236.783617][T15135] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  236.788552][T15135] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  236.794845][T15135] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  236.840447][T15207] openvswitch: netlink: Key type 77 is out of range max 32
[  236.909137][T15135] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.401526][ T5836] Bluetooth: hci2: command tx timeout
[  237.560807][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  237.960125][T15135] 8021q: adding VLAN 0 to HW filter on device team0
[  237.966068][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.968201][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.981844][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.984067][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.028072][T15216] validate_nla: 10 callbacks suppressed
[  238.028088][T15216] netlink: 'syz.3.2827': attribute type 1 has an invalid length.
[  238.065988][T15216] 8021q: adding VLAN 0 to HW filter on device bond12
[  238.070529][T15216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2827'.
[  238.098902][T15216] vlan3: entered allmulticast mode
[  238.100538][T15216] bond12: entered allmulticast mode
[  238.137199][T15135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.169440][T15135] veth0_vlan: entered promiscuous mode
[  238.196548][T15135] veth1_vlan: entered promiscuous mode
[  238.212906][T15234] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2831'.
[  238.222198][T15135] veth0_macvtap: entered promiscuous mode
[  238.227201][T15135] veth1_macvtap: entered promiscuous mode
[  238.239650][T15135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  238.257711][T15135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.266178][T15135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.268946][T15135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.273522][T15135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.276295][T15135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.292382][T15241] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  238.315079][T15241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  238.373732][T15244] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  238.375702][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.379804][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.400099][T15244] xt_hashlimit: overflow, try lower: 72057594037927936/255
[  238.407262][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.409786][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.495246][T15256] team0: Port device gtp2 added
[  238.524554][   T98] block nbd0: Possible stuck request ffff8880212f0000: control (read@0,4096B). Runtime 150 seconds
[  238.529804][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2840'.
[  238.574384][T15260] bond17: entered promiscuous mode
[  238.581186][T15260] 8021q: adding VLAN 0 to HW filter on device bond17
[  238.600869][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  238.717829][T15271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2843'.
[  238.724798][T15271] nbd: must specify a device to reconfigure
[  238.784190][T15281] team0: Port device gtp3 added
[  239.289554][T15308] netlink: 'syz.3.2852': attribute type 1 has an invalid length.
[  239.365762][T15310] team0: Port device gtp4 added
[  239.391844][T15312] bridge_slave_0: left allmulticast mode
[  239.393772][T15312] bridge_slave_0: left promiscuous mode
[  239.395784][T15312] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.413658][T15312] bridge_slave_1: left allmulticast mode
[  239.415495][T15312] bridge_slave_1: left promiscuous mode
[  239.417530][T15312] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.440326][T15312] bond0: (slave bond_slave_0): Releasing backup interface
[  239.454576][T15312] bond0: (slave bond_slave_1): Releasing backup interface
[  239.468343][   T33] audit: type=1800 audit(1753007021.239:7): pid=15316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2856" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=4468 res=0 errno=0
[  239.476671][   T33] audit: type=1804 audit(1753007021.239:8): pid=15316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2856" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=4468 res=1 errno=0
[  239.484791][ T5836] Bluetooth: hci2: command tx timeout
[  239.503938][T15312] team0: Port device team_slave_0 removed
[  239.517752][T15312] team0: Port device team_slave_1 removed
[  239.522597][T15312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.524993][T15312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.530095][T15312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.533540][T15312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.640869][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  239.696406][T15333] syzkaller1: entered promiscuous mode
[  239.698203][T15333] syzkaller1: entered allmulticast mode
[  239.718199][T15328] syz.3.2859 (15328) used obsolete PPPIOCDETACH ioctl
Connection to localhost closed by remote host.
[  240.166339][T15243] ==================================================================
[  240.168857][T15243] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  240.171141][T15243] Read of size 8 at addr ffff88802a1cc0a0 by task khidpd_15be5886/15243
[  240.173771][T15243] 
[  240.175150][T15243] CPU: 1 UID: 0 PID: 15243 Comm: khidpd_15be5886 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  240.175163][T15243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.175169][T15243] Call Trace:
[  240.175174][T15243]  <TASK>
[  240.175192][T15243]  dump_stack_lvl+0x189/0x250
[  240.175205][T15243]  ? __virt_addr_valid+0x1c8/0x5c0
[  240.175217][T15243]  ? rcu_is_watching+0x15/0xb0
[  240.175226][T15243]  ? __kasan_check_byte+0x12/0x40
[  240.175239][T15243]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.175248][T15243]  ? rcu_is_watching+0x15/0xb0
[  240.175257][T15243]  ? lock_release+0x4b/0x3e0
[  240.175266][T15243]  ? __virt_addr_valid+0x1c8/0x5c0
[  240.175277][T15243]  ? __virt_addr_valid+0x4a5/0x5c0
[  240.175287][T15243]  print_report+0xd2/0x2b0
[  240.175295][T15243]  ? __mutex_lock+0x738/0xe80
[  240.175304][T15243]  kasan_report+0x118/0x150
[  240.175316][T15243]  ? __mutex_lock+0x738/0xe80
[  240.175325][T15243]  __mutex_lock+0x738/0xe80
[  240.175334][T15243]  ? __mutex_lock+0x51b/0xe80
[  240.175343][T15243]  ? l2cap_unregister_user+0x6a/0x1b0
[  240.175353][T15243]  ? __pfx___mutex_lock+0x10/0x10
[  240.175364][T15243]  ? __pfx___timer_delete_sync+0x10/0x10
[  240.175377][T15243]  l2cap_unregister_user+0x6a/0x1b0
[  240.175386][T15243]  hidp_session_thread+0x3c9/0x410
[  240.175396][T15243]  ? __pfx_hidp_session_thread+0x10/0x10
[  240.175404][T15243]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.175422][T15243]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  240.175431][T15243]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  240.175440][T15243]  ? __kthread_parkme+0x7b/0x200
[  240.175450][T15243]  ? __kthread_parkme+0x1a1/0x200
[  240.175461][T15243]  kthread+0x711/0x8a0
[  240.175472][T15243]  ? __pfx_hidp_session_thread+0x10/0x10
[  240.175481][T15243]  ? __pfx_kthread+0x10/0x10
[  240.175492][T15243]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.175503][T15243]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.175511][T15243]  ? __pfx_kthread+0x10/0x10
[  240.175522][T15243]  ret_from_fork+0x3fc/0x770
[  240.175531][T15243]  ? __pfx_ret_from_fork+0x10/0x10
[  240.175540][T15243]  ? __switch_to_asm+0x39/0x70
[  240.175550][T15243]  ? __switch_to_asm+0x33/0x70
[  240.175560][T15243]  ? __pfx_kthread+0x10/0x10
[  240.175571][T15243]  ret_from_fork_asm+0x1a/0x30
[  240.175584][T15243]  </TASK>
[  240.175588][T15243] 
[  240.244304][T15243] Allocated by task 15135:
[  240.245667][T15243]  kasan_save_track+0x3e/0x80
[  240.247096][T15243]  __kasan_kmalloc+0x93/0xb0
[  240.248511][T15243]  __kmalloc_noprof+0x27a/0x4f0
[  240.250003][T15243]  hci_alloc_dev_priv+0x28/0x2040
[  240.251538][T15243]  vhci_create_device+0x120/0x6e0
[  240.253090][T15243]  vhci_write+0x3ce/0x4a0
[  240.254430][T15243]  vfs_write+0x54b/0xa90
[  240.255690][T15243]  ksys_write+0x145/0x250
[  240.256956][T15243]  do_syscall_64+0xfa/0x3b0
[  240.258359][T15243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.260150][T15243] 
[  240.260877][T15243] Freed by task 15135:
[  240.262125][T15243]  kasan_save_track+0x3e/0x80
[  240.263586][T15243]  kasan_save_free_info+0x46/0x50
[  240.265170][T15243]  __kasan_slab_free+0x62/0x70
[  240.266736][T15243]  kfree+0x18e/0x440
[  240.268010][T15243]  bt_host_release+0x82/0x90
[  240.269489][T15243]  device_release+0x9c/0x1c0
[  240.270975][T15243]  kobject_put+0x22b/0x480
[  240.272334][T15243]  vhci_release+0x88/0xd0
[  240.273657][T15243]  __fput+0x44c/0xa70
[  240.274873][T15243]  task_work_run+0x1d4/0x260
[  240.276233][T15243]  do_exit+0x6b5/0x22e0
[  240.277569][T15243]  do_group_exit+0x21c/0x2d0
[  240.279018][T15243]  __x64_sys_exit_group+0x3f/0x40
[  240.280540][T15243]  x64_sys_call+0x21ba/0x21c0
[  240.281916][T15243]  do_syscall_64+0xfa/0x3b0
[  240.283319][T15243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.285138][T15243] 
[  240.285905][T15243] Last potentially related work creation:
[  240.287671][T15243]  kasan_save_stack+0x3e/0x60
[  240.289121][T15243]  kasan_record_aux_stack+0xbd/0xd0
[  240.290729][T15243]  insert_work+0x3d/0x330
[  240.292050][T15243]  __queue_work+0xbd9/0xfe0
[  240.293443][T15243]  queue_work_on+0x181/0x270
[  240.294870][T15243]  process_scheduled_works+0xae1/0x17b0
[  240.296566][T15243]  worker_thread+0x8a0/0xda0
[  240.298013][T15243]  kthread+0x711/0x8a0
[  240.299337][T15243]  ret_from_fork+0x3fc/0x770
[  240.300775][T15243]  ret_from_fork_asm+0x1a/0x30
[  240.302247][T15243] 
[  240.303004][T15243] Second to last potentially related work creation:
[  240.304935][T15243]  kasan_save_stack+0x3e/0x60
[  240.306372][T15243]  kasan_record_aux_stack+0xbd/0xd0
[  240.307998][T15243]  insert_work+0x3d/0x330
[  240.309326][T15243]  __queue_work+0xcfc/0xfe0
[  240.310732][T15243]  call_timer_fn+0x17e/0x5f0
[  240.312095][T15243]  __run_timer_base+0x646/0x860
[  240.313572][T15243]  run_timer_softirq+0xb7/0x180
[  240.315094][T15243]  handle_softirqs+0x286/0x870
[  240.316565][T15243]  __irq_exit_rcu+0xca/0x1f0
[  240.318020][T15243]  irq_exit_rcu+0x9/0x30
[  240.319328][T15243]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  240.321003][T15243]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  240.322839][T15243] 
[  240.323580][T15243] The buggy address belongs to the object at ffff88802a1cc000
[  240.323580][T15243]  which belongs to the cache kmalloc-8k of size 8192
[  240.327745][T15243] The buggy address is located 160 bytes inside of
[  240.327745][T15243]  freed 8192-byte region [ffff88802a1cc000, ffff88802a1ce000)
[  240.331733][T15243] 
[  240.332493][T15243] The buggy address belongs to the physical page:
[  240.334482][T15243] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a1c8
[  240.337179][T15243] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  240.339797][T15243] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  240.342123][T15243] page_type: f5(slab)
[  240.343352][T15243] raw: 00fff00000000040 ffff88801a442280 ffffea00008ee400 0000000000000002
[  240.345957][T15243] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  240.348473][T15243] head: 00fff00000000040 ffff88801a442280 ffffea00008ee400 0000000000000002
[  240.351128][T15243] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  240.353712][T15243] head: 00fff00000000003 ffffea0000a87201 00000000ffffffff 00000000ffffffff
[  240.356310][T15243] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  240.358871][T15243] page dumped because: kasan: bad access detected
[  240.360834][T15243] page_owner tracks the page as allocated
[  240.362567][T15243] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14864, tgid 14863 (syz.1.2722), ts 231477400169, free_ts 231469983626
[  240.368903][T15243]  post_alloc_hook+0x240/0x2a0
[  240.370318][T15243]  get_page_from_freelist+0x21e4/0x22c0
[  240.372019][T15243]  __alloc_frozen_pages_noprof+0x181/0x370
[  240.373797][T15243]  alloc_pages_mpol+0x232/0x4a0
[  240.375266][T15243]  allocate_slab+0x8a/0x3b0
[  240.376654][T15243]  ___slab_alloc+0xbfc/0x1480
[  240.378090][T15243]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  240.380119][T15243]  kmalloc_reserve+0x136/0x290
[  240.381565][T15243]  __alloc_skb+0x142/0x2d0
[  240.382935][T15243]  netlink_ack+0x146/0xa50
[  240.384290][T15243]  netlink_rcv_skb+0x28c/0x470
[  240.385750][T15243]  genl_rcv+0x28/0x40
[  240.386964][T15243]  netlink_unicast+0x75c/0x8e0
[  240.388414][T15243]  netlink_sendmsg+0x805/0xb30
[  240.389862][T15243]  __sock_sendmsg+0x21c/0x270
[  240.391283][T15243]  ____sys_sendmsg+0x505/0x830
[  240.392805][T15243] page last free pid 14862 tgid 14859 stack trace:
[  240.394781][T15243]  __free_frozen_pages+0xc71/0xe70
[  240.396363][T15243]  __folio_put+0x21b/0x2c0
[  240.397749][T15243]  free_large_kmalloc+0x145/0x200
[  240.399246][T15243]  bpf_check+0x14767/0x19c60
[  240.400641][T15243]  bpf_prog_load+0x1318/0x1930
[  240.402082][T15243]  __sys_bpf+0x5f1/0x860
[  240.403396][T15243]  __x64_sys_bpf+0x7c/0x90
[  240.404780][T15243]  do_syscall_64+0xfa/0x3b0
[  240.406173][T15243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.407988][T15243] 
[  240.408738][T15243] Memory state around the buggy address:
[  240.410374][T15243]  ffff88802a1cbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  240.412774][T15243]  ffff88802a1cc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.415176][T15243] >ffff88802a1cc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.417603][T15243]                                ^
[  240.419165][T15243]  ffff88802a1cc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.421641][T15243]  ffff88802a1cc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  240.424290][T15243] ==================================================================
[  240.427365][T15243] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  240.429684][T15243] CPU: 1 UID: 0 PID: 15243 Comm: khidpd_15be5886 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  240.434132][T15243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.437394][T15243] Call Trace:
[  240.438484][T15243]  <TASK>
[  240.439441][T15243]  dump_stack_lvl+0x99/0x250
[  240.441103][T15243]  ? __asan_memcpy+0x40/0x70
[  240.442596][T15243]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.444287][T15243]  ? __pfx__printk+0x10/0x10
[  240.445823][T15243]  panic+0x2db/0x790
[  240.447095][T15243]  ? __pfx_panic+0x10/0x10
[  240.448559][T15243]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  240.450541][T15243]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.452856][T15243]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.455221][T15243]  ? print_memory_metadata+0x314/0x400
[  240.457204][T15243]  ? __mutex_lock+0x738/0xe80
[  240.458980][T15243]  check_panic_on_warn+0x89/0xb0
[  240.460910][T15243]  ? __mutex_lock+0x738/0xe80
[  240.462788][T15243]  end_report+0x78/0x160
[  240.464460][T15243]  kasan_report+0x129/0x150
[  240.466046][T15243]  ? __mutex_lock+0x738/0xe80
[  240.467648][T15243]  __mutex_lock+0x738/0xe80
[  240.469160][T15243]  ? __mutex_lock+0x51b/0xe80
[  240.470832][T15243]  ? l2cap_unregister_user+0x6a/0x1b0
[  240.472945][T15243]  ? __pfx___mutex_lock+0x10/0x10
[  240.474902][T15243]  ? __pfx___timer_delete_sync+0x10/0x10
[  240.477102][T15243]  l2cap_unregister_user+0x6a/0x1b0
[  240.479186][T15243]  hidp_session_thread+0x3c9/0x410
[  240.481190][T15243]  ? __pfx_hidp_session_thread+0x10/0x10
[  240.483343][T15243]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.485584][T15243]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  240.487771][T15243]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  240.490112][T15243]  ? __kthread_parkme+0x7b/0x200
[  240.492086][T15243]  ? __kthread_parkme+0x1a1/0x200
[  240.494052][T15243]  kthread+0x711/0x8a0
[  240.495700][T15243]  ? __pfx_hidp_session_thread+0x10/0x10
[  240.497916][T15243]  ? __pfx_kthread+0x10/0x10
[  240.499738][T15243]  ? _raw_spin_unlock_irq+0x23/0x50
[  240.501792][T15243]  ? lockdep_hardirqs_on+0x9c/0x150
[  240.503828][T15243]  ? __pfx_kthread+0x10/0x10
[  240.505665][T15243]  ret_from_fork+0x3fc/0x770
[  240.507484][T15243]  ? __pfx_ret_from_fork+0x10/0x10
[  240.509426][T15243]  ? __switch_to_asm+0x39/0x70
[  240.511239][T15243]  ? __switch_to_asm+0x33/0x70
[  240.513056][T15243]  ? __pfx_kthread+0x10/0x10
[  240.514862][T15243]  ret_from_fork_asm+0x1a/0x30
[  240.516740][T15243]  </TASK>
[  240.518566][T15243] Kernel Offset: disabled
[  240.520306][T15243] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:23:42  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff9200089bec8 RBX=ffffffff81852a7c RCX=9492a05a4776e500 RDX=dffffc0000000000
RSI=ffffffff81852a7c RDI=ffffc900044df608 RBP=dffffc0000000000 RSP=ffffc900044df538
R8 =ffffc900044df6d0 R9 =0000000000000006 R10=ffffc900044df658 R11=ffffffff81ad03a0
R12=ffff8881095b8000 R13=ffffc900044df640 R14=ffffc900044df608 R15=ffffc900044df608
RIP=ffffffff8172aaa7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555589db4500 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f60962e7d60 CR3=0000000109aae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=326963682f68746f 6f7465756c622f6c XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00007f29f3650068 746f6f7465756c62 XMM03=0000000000000000 ffff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=000000000000003a 0000000000326963
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=706e692f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000005 RBX=0000000000000005 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f9 RSP=ffffc90006eaf370
R8 =ffff88801ff98237 R9 =1ffff11003ff3046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd0eb4e7d60 CR3=00000000226c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000076 0000000000377475
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=00000000000000b1 0000000000377475
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
