last executing test programs:

2.140259478s ago: executing program 0 (id=1029):
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast})
close(r2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100030000000000000a000000080003008acbb96cb161", @ANYRES32=r4, @ANYBLOB="180050800400050008000880040002000500020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x20, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x1a}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048094}, 0x4010)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r6)
socket$netlink(0x10, 0x3, 0x0)
preadv(r7, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000091405002cbd7000fbdbdf2508000100050000000800010001000000080001000100000008000100000100"], 0x50}, 0x1, 0x0, 0x0, 0x440008c0}, 0x4804)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x9, 0x200, 0xfff, 0x8, 0x8600, 0xffffffffffffffff, 0x4dae, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @value=r10}, 0x50)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000300b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r5], 0x44}}, 0x0)

1.885098118s ago: executing program 0 (id=1033):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000003800)=""/4111, 0x100f}, {&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000000980)=""/63, 0xffffffc4}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000880)=""/198, 0xc6}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000001000)=""/130, 0x82}], 0xc, 0x0, 0x0, 0xb00}, 0x40d40b70}], 0x1, 0x0, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000100)=0x4)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000180)=0x4)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=@newtaction={0x6c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x200, 0x10000, 0x1, 0x3, 0xc2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

1.829455235s ago: executing program 0 (id=1034):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000280), 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
unshare(0x20000400)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r7, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x3c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0xe821651e0a1b45fc)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000001090300000000000000000001000006240002001600018008000100ffffffff08000200ac1e01010c00028005000100"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)

939.382759ms ago: executing program 0 (id=1045):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async)
r1 = socket$inet_sctp(0x2, 0x0, 0x84) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) (async)
close(0x3) (async, rerun: 32)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (rerun: 32)

870.954834ms ago: executing program 0 (id=1047):
r0 = socket(0x1e, 0x5, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000f9ffffff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280040012000800050006000000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040801)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%pI4   \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x18, r1}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', <r7=>0x0, 0x700, 0x0, 0x0, 0x6, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop, @timestamp={0x44, 0xc, 0x99, 0x0, 0xe, [0x7f, 0xba]}, @generic={0x88, 0x10, "75c0267736390e273f723242b698"}]}}}}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0903006f7d177e0000002a"], 0x14}}, 0x0)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000840)={&(0x7f0000000680), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r10, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x400800c)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x6, 0x0, 0x0, 0xa, 0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000005c0)=""/50, 0x34, 0x32, 0x1, 0x2}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0x21}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x9d, &(0x7f0000000440)=""/157, 0x41100, 0x30, '\x00', r7, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x6, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x6}, 0x94)
socket(0x1e, 0x5, 0x0) (async)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async)
ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000f9ffffff000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280040012000800050006000000"], 0x40}}, 0x0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040801) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%pI4   \x00'}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x18, r1}, 0x18) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x6, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x68, 0x0, 0x4, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, {[@noop, @timestamp={0x44, 0xc, 0x99, 0x0, 0xe, [0x7f, 0xba]}, @generic={0x88, 0x10, "75c0267736390e273f723242b698"}]}}}}}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0903006f7d177e0000002a"], 0x14}}, 0x0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r1) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000840)={&(0x7f0000000680), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r10, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x400800c) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x6, 0x0, 0x0, 0xa, 0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000005c0)=""/50, 0x34, 0x32, 0x1, 0x2}, 0x28) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x12, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0x21}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x9d, &(0x7f0000000440)=""/157, 0x41100, 0x30, '\x00', r7, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0xa, 0x6, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x6}, 0x94) (async)

810.758244ms ago: executing program 0 (id=1049):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20)

730.078009ms ago: executing program 1 (id=1052):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000580), &(0x7f0000000200)=""/28}, 0x20)
close(0x3)

650.663151ms ago: executing program 1 (id=1053):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x83cff000)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f00000002c0)=r0, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x34}, 0x1, 0x1000000, 0x0, 0x20000000}, 0x4004a040)

648.340907ms ago: executing program 1 (id=1055):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan1\x00', <r1=>0x0})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @any, 0x2}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x4008054)

459.928321ms ago: executing program 1 (id=1057):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f00000003c0)='GPL\x00', 0x4, 0x1f, &(0x7f0000000400)=""/31, 0x40f00, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x4, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
unshare(0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c0001800100000001000000100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
unshare(0x2000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x54, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "d80002", 0x0, 0x11, 0x0, @local, @mcast2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2f}, @hao={0xc9, 0x10, @mcast1}]}], "2b58959e"}}}}}}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0)
recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002022, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendto$netrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000001ec0)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="bfcd929b970a7e9f5fd30a98c15640bf4af4e0a4362851be429ebbb8c47aba7b17ca6f01b1582adef0b4cba94b2254c3af106db0845580fc563cbf9445582973b85650a461cbc6775e3b9e6df5f8cf88bcfeb7ed7c8fbb55d2f3a3a6bd157700c4a18b9b4edf22941d611bcf63211df56e6f1d7efb4e6f2e752b3736f3c0d1faccc6d0105484eabb743bad94674ed84b104d6999c703a5b978e85b4a4e24991e3a393a3c780c8ba3c45c2a8bea0c2428da0afca50337", 0xb6}, {&(0x7f0000000140)="a8f32d3e767a41a31f2a800511ac185ae18455b4577bde016d31e2980d42a574f1a8b3357e0926f2ce70f606a2d00ed00f9ee39edcfe008d571c1592fc9d35357a61c79daca3c072679164041e868eeb3080ded7b3dc6b02e1e52fbfc15d9488498822a9d6804ce19fa6e038fd34709bbd2c81b53e740fced1906e93c6d09ba9", 0x80}, {&(0x7f00000001c0)="c0c7b371e3abe9b5443fea106336f387387d3994f5200d2473f6988cc2f235d0811cb02b7888343c6713f3fa62f2c7ac16ecc03b984eb9f0fcda303d8e898bd67e78dde0f5a5618a5c109bc75425b39b25e1c5f54065d9a6a9307f49c08ee76f41d58907375f3db66809e97498f2e7e67ef4f77af2a6c56315a1380aa6c632f71b4048788ae56165724f", 0x8a}, {&(0x7f0000000280)="cabe6d9a077517e8da0d63d567fbb3b18fe5ec5b82703ccbd0516839bdbe3bff5ba2d75355a14b4474893f980a7862272867bc55457ff9a51ac3dd625dcf5beff96ca5a59e725b15b758e031a88e7afe6f34fa3070b038c807beb855", 0x5c}], 0x4, &(0x7f0000000640)=[{0xf8, 0x108, 0x2, "0a88aec0bbda59179b2960ae7acdb2e9aac2061a70d399fcc7a480707844b655ebd6ca04d6174b3855bb98e133f86187bba42ff195f860cc8af627c1dbfb20592c6b64b9d135991eab8b27d068d80507506a4927b820f15a32d7f8d23b8cf06356e6dfdc0cf20414baf8f34e557e4b90093a716fa8dd855ffbdc68105e4506ee4cba46235fbb673c99a5fbf5f4bb1b7d4114423836566bc19596183936b6e7a7635cb4e27e4f199400b12e6b0142ddb8eb61e8c02270ef5f234d3a33cd818a356a196bde7737245aa6f0fced74dc857fb0014c23ae3cbe52b352c97a6d5a04a1bfc614c5"}, {0x28, 0x118, 0x7, "7a40385df2ddc0e95b82c4e852ac4eb2a6f9ea56c598"}], 0x120}}, {{&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x4, 0x4, {0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x937b}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)="8c861e41e9ef34cca80ebc9bc7396569992a6cf3c59f60ca9be037a99676e33119c2622398e4f29eac441f37d9189a25caed7029f79bf2752de34b9e58b57d3109fc6acfba2f7cf9183cd7cd3a2ab4cd391ec1ae2fe8af92bc318d0ad56d3eee7275c4dff7", 0x65}, {&(0x7f0000000380)="f6192b5c4932bf6d4faad274cd2f25", 0xf}, {&(0x7f0000000800)}, {0x0}, {&(0x7f0000000900)="587dfda2ec5c5eeb3c656316f0fa7423afe39ffce138a87fb334d4a92645d359fde46fc7025c375ab0573ed4145c30faa68f6d9e6fb7df59bb0f80fa9436945a3fb665a792661f11ce91e74a820a8fb230129c7a", 0x54}], 0x5, &(0x7f0000000a00)=[{0x18, 0x108, 0x200, "3a458f"}, {0x10, 0x1, 0x9}], 0x28}}, {{&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x1, 0x1, 0x1, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x15}, 0x401}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000b00)="b3f383949f8350fb523423c93a99c6a31a9d35a35bb0d14e5bf12ad5870b889aac7be988146d4fab0cd73a21ee3d54bcab0c87c67a5d9291670f0d41d645c7f71a1648351cf743e2750f5d14c9098aab008de76d15f9f92804260690dd6d1a576ee5138054f8d0028faa8c99a05084a0492d8da2fa11bb1fb6e387d30578f3f9910b437610073e1dce5d6dc17c7c3755961ae11590d19e6a529d32a48ccfe93937704ab316116ff1390532b9aaa044c550dc4aa5d42d50b8943ed1038745b7425ac55e8100bb6ea191d46ee4adda094272a1de3b21cf298e9aa339e5f4", 0xdd}, {&(0x7f0000000c00)="4296aa615d5a1bb5dfa37d64130f3049b424805f7a474e909ae57ed3428215e0c0041b147ec3bb0c558dd3a307f51a5cd5e012c0951fde8d8e8af20b3b9dec497e6990111b56298e45bec316a7dfd98f1ab413117aea45316859e7073262a9337ebc38be4ab0ede8954df618d475718b72b0a1fe0707778cb13448dffba03035c708b6b060f9d7b60bcbfb48c1b6caae114fb1820a0409b4d7a871d37082b0a8e7c194cc6300848c3d5199a188199c4c", 0xb0}], 0x2, &(0x7f0000000cc0)=[{0xd8, 0x10e, 0x71, "b6cd01fef3728c574aba9c52df8e00f05bafc4e87b203cd33bf9d7e633116cb6c56eda583d7881b99065c7421faac8e654284f392c001481b1f42ee34c39a6379db8dccf1ad9af5ac7e585531025a58e843dc9e5d8b291de18d5592a4e360f0e59f86fce7ad79122ab1f138804b8fd930e68c433aeff95e8456a164bade74946bec60391ea338c70ce21bf113025f68f4146e750d4a69c37d2c9ad8c38602aeeff030f3d06334c0052be8980541d333a005b5638163f7aa2efbdff174cd47ffc30e846"}, {0xe8, 0x3a, 0x10001, "c98c56147d70f376086bec5fc453c824ae2093d9ddc2e795890eddaa6b6a826e4ff74e7d7b317870d90e13ed9e638ff566c5dba98db304e1a3b419124a9af273b4eb4ee3a18c03e2f15f45714f97c453cdfb696215e82ae802afdcc2ba37e7d4f810d6838c54cee95378b16490d1e944f2dd356f29a636d0dee3475d1a501ad1502715d0d7425705b1d18beb73dc87f32dba6bde7ec03fbc87180381974f4986bca4ac372877f6d404538ec613e67462fe6a312b7cb15c0c5121f52a81a6f9c435fa688a2a54592f3ccdb0ea9edee251c506212014"}], 0x1c0}}], 0x3, 0x28040010)
close(0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000540)=0x5, 0x4)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt(r4, 0x65, 0x7, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f00000003c0)='GPL\x00', 0x4, 0x1f, &(0x7f0000000400)=""/31, 0x40f00, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x4, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async)
unshare(0x0) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c0001800100000001000000100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async)
unshare(0x2000000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0x8a, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x54, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "d80002", 0x0, 0x11, 0x0, @local, @mcast2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2f}, @hao={0xc9, 0x10, @mcast1}]}], "2b58959e"}}}}}}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) (async)
recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002022, 0x0) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
sendto$netrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0) (async)
sendmmsg(r2, &(0x7f0000001ec0)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="bfcd929b970a7e9f5fd30a98c15640bf4af4e0a4362851be429ebbb8c47aba7b17ca6f01b1582adef0b4cba94b2254c3af106db0845580fc563cbf9445582973b85650a461cbc6775e3b9e6df5f8cf88bcfeb7ed7c8fbb55d2f3a3a6bd157700c4a18b9b4edf22941d611bcf63211df56e6f1d7efb4e6f2e752b3736f3c0d1faccc6d0105484eabb743bad94674ed84b104d6999c703a5b978e85b4a4e24991e3a393a3c780c8ba3c45c2a8bea0c2428da0afca50337", 0xb6}, {&(0x7f0000000140)="a8f32d3e767a41a31f2a800511ac185ae18455b4577bde016d31e2980d42a574f1a8b3357e0926f2ce70f606a2d00ed00f9ee39edcfe008d571c1592fc9d35357a61c79daca3c072679164041e868eeb3080ded7b3dc6b02e1e52fbfc15d9488498822a9d6804ce19fa6e038fd34709bbd2c81b53e740fced1906e93c6d09ba9", 0x80}, {&(0x7f00000001c0)="c0c7b371e3abe9b5443fea106336f387387d3994f5200d2473f6988cc2f235d0811cb02b7888343c6713f3fa62f2c7ac16ecc03b984eb9f0fcda303d8e898bd67e78dde0f5a5618a5c109bc75425b39b25e1c5f54065d9a6a9307f49c08ee76f41d58907375f3db66809e97498f2e7e67ef4f77af2a6c56315a1380aa6c632f71b4048788ae56165724f", 0x8a}, {&(0x7f0000000280)="cabe6d9a077517e8da0d63d567fbb3b18fe5ec5b82703ccbd0516839bdbe3bff5ba2d75355a14b4474893f980a7862272867bc55457ff9a51ac3dd625dcf5beff96ca5a59e725b15b758e031a88e7afe6f34fa3070b038c807beb855", 0x5c}], 0x4, &(0x7f0000000640)=[{0xf8, 0x108, 0x2, "0a88aec0bbda59179b2960ae7acdb2e9aac2061a70d399fcc7a480707844b655ebd6ca04d6174b3855bb98e133f86187bba42ff195f860cc8af627c1dbfb20592c6b64b9d135991eab8b27d068d80507506a4927b820f15a32d7f8d23b8cf06356e6dfdc0cf20414baf8f34e557e4b90093a716fa8dd855ffbdc68105e4506ee4cba46235fbb673c99a5fbf5f4bb1b7d4114423836566bc19596183936b6e7a7635cb4e27e4f199400b12e6b0142ddb8eb61e8c02270ef5f234d3a33cd818a356a196bde7737245aa6f0fced74dc857fb0014c23ae3cbe52b352c97a6d5a04a1bfc614c5"}, {0x28, 0x118, 0x7, "7a40385df2ddc0e95b82c4e852ac4eb2a6f9ea56c598"}], 0x120}}, {{&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x4, 0x4, {0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x937b}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)="8c861e41e9ef34cca80ebc9bc7396569992a6cf3c59f60ca9be037a99676e33119c2622398e4f29eac441f37d9189a25caed7029f79bf2752de34b9e58b57d3109fc6acfba2f7cf9183cd7cd3a2ab4cd391ec1ae2fe8af92bc318d0ad56d3eee7275c4dff7", 0x65}, {&(0x7f0000000380)="f6192b5c4932bf6d4faad274cd2f25", 0xf}, {&(0x7f0000000800)}, {0x0}, {&(0x7f0000000900)="587dfda2ec5c5eeb3c656316f0fa7423afe39ffce138a87fb334d4a92645d359fde46fc7025c375ab0573ed4145c30faa68f6d9e6fb7df59bb0f80fa9436945a3fb665a792661f11ce91e74a820a8fb230129c7a", 0x54}], 0x5, &(0x7f0000000a00)=[{0x18, 0x108, 0x200, "3a458f"}, {0x10, 0x1, 0x9}], 0x28}}, {{&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x1, 0x1, 0x1, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x15}, 0x401}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000b00)="b3f383949f8350fb523423c93a99c6a31a9d35a35bb0d14e5bf12ad5870b889aac7be988146d4fab0cd73a21ee3d54bcab0c87c67a5d9291670f0d41d645c7f71a1648351cf743e2750f5d14c9098aab008de76d15f9f92804260690dd6d1a576ee5138054f8d0028faa8c99a05084a0492d8da2fa11bb1fb6e387d30578f3f9910b437610073e1dce5d6dc17c7c3755961ae11590d19e6a529d32a48ccfe93937704ab316116ff1390532b9aaa044c550dc4aa5d42d50b8943ed1038745b7425ac55e8100bb6ea191d46ee4adda094272a1de3b21cf298e9aa339e5f4", 0xdd}, {&(0x7f0000000c00)="4296aa615d5a1bb5dfa37d64130f3049b424805f7a474e909ae57ed3428215e0c0041b147ec3bb0c558dd3a307f51a5cd5e012c0951fde8d8e8af20b3b9dec497e6990111b56298e45bec316a7dfd98f1ab413117aea45316859e7073262a9337ebc38be4ab0ede8954df618d475718b72b0a1fe0707778cb13448dffba03035c708b6b060f9d7b60bcbfb48c1b6caae114fb1820a0409b4d7a871d37082b0a8e7c194cc6300848c3d5199a188199c4c", 0xb0}], 0x2, &(0x7f0000000cc0)=[{0xd8, 0x10e, 0x71, "b6cd01fef3728c574aba9c52df8e00f05bafc4e87b203cd33bf9d7e633116cb6c56eda583d7881b99065c7421faac8e654284f392c001481b1f42ee34c39a6379db8dccf1ad9af5ac7e585531025a58e843dc9e5d8b291de18d5592a4e360f0e59f86fce7ad79122ab1f138804b8fd930e68c433aeff95e8456a164bade74946bec60391ea338c70ce21bf113025f68f4146e750d4a69c37d2c9ad8c38602aeeff030f3d06334c0052be8980541d333a005b5638163f7aa2efbdff174cd47ffc30e846"}, {0xe8, 0x3a, 0x10001, "c98c56147d70f376086bec5fc453c824ae2093d9ddc2e795890eddaa6b6a826e4ff74e7d7b317870d90e13ed9e638ff566c5dba98db304e1a3b419124a9af273b4eb4ee3a18c03e2f15f45714f97c453cdfb696215e82ae802afdcc2ba37e7d4f810d6838c54cee95378b16490d1e944f2dd356f29a636d0dee3475d1a501ad1502715d0d7425705b1d18beb73dc87f32dba6bde7ec03fbc87180381974f4986bca4ac372877f6d404538ec613e67462fe6a312b7cb15c0c5121f52a81a6f9c435fa688a2a54592f3ccdb0ea9edee251c506212014"}], 0x1c0}}], 0x3, 0x28040010) (async)
close(0x4) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000540)=0x5, 0x4) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
getsockopt(r4, 0x65, 0x7, 0x0, 0x0) (async)

457.348099ms ago: executing program 1 (id=1058):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0) (async, rerun: 64)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 64)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r3=>0x0}) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x203, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x800000003b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44040) (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) (async)
getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x4, 0x0, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe6d1076cc2e625a815cb58000000000000000000000000000aa14000400000000000000000000000000000000080007400000000010000d800400038006000200"/174], 0xa4}}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async, rerun: 32)
r10 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x20010, r0, 0xa55d5000) (async, rerun: 32)
writev(r10, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (rerun: 32)

330.29242ms ago: executing program 1 (id=1061):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = socket$tipc(0x1e, 0x4, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
socketpair(0x5, 0x800, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061184d000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7})
setsockopt$sock_int(r8, 0x1, 0x20, &(0x7f0000000440)=0x9, 0x1a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000240)={@empty, <r10=>0x0}, &(0x7f0000000280)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=@newtclass={0x60, 0x28, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xe, 0x9}, {0xd, 0x6}, {0x8, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xc, 0xa}}, @TCA_RATE={0x6}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0xf}}, @TCA_RATE={0x6, 0x5, {0x1, 0xe}}, @TCA_RATE={0x6, 0x5, {0x93, 0xc7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x6000)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd27, 0xfffffffc, 0x2000000, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffc}]}, 0x2c}}, 0x200400d4)

169.736695ms ago: executing program 2 (id=1064):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8000}, 0x50)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r5, 0x0, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000002060300000000000000"], 0x48}}, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r8=>0x0}, 0x0)
r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r9, r6, 0x4, r7}, 0x10) (async)
r10 = socket$inet6(0xa, 0x800, 0x4)
connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async)
unshare(0x2c060000) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
unshare(0x24020400)
sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x58, 0x0, 0xb, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'hash\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x58}}, 0x8050) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r4)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000001900)={&(0x7f00000017c0), 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x58, r12, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x8, 0xffffffffffffffc0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x106, &(0x7f0000000280)=""/262, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x760}, 0x94)

145.231185ms ago: executing program 2 (id=1065):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000001000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/112], 0xb8}}, 0x0)

80.847464ms ago: executing program 2 (id=1066):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x34, r1, 0x701, 0x0, 0xffffffff, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x34}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="1400001b1000010000000000000000000000000a64000000060a0b040900000000000000020000043800448034000580095601006861736800000000240002800800074000b2000108000440fdfffff7080002400000001008000640000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0)

80.535105ms ago: executing program 2 (id=1067):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000480)="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", &(0x7f00000001c0)=""/72, 0x4}, 0x20) (async, rerun: 64)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000004000000010000001e00000e0200000000000000005f6100"], 0x0, 0x2c, 0x0, 0x1, 0x1ff}, 0x28) (rerun: 64)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x13, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x98}, [@map_fd={0x18, 0x8, 0x1, 0x0, r0}, @ldst={0x2, 0x0, 0x0, 0x6, 0x2, 0x50, 0x10}, @ldst={0x0, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffc, 0x1}, @call={0x85, 0x0, 0x0, 0x9c}, @alu={0x7, 0x1, 0xc, 0x0, 0x1, 0x1, 0x4}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f0000000400)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001480)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0x8, 0x40, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001500)=[r0], &(0x7f0000001540)=[{0x5, 0x4, 0x6, 0x4}, {0x3, 0x4, 0x6, 0x4}, {0x1, 0x1, 0xf, 0x2}, {0x5, 0x4, 0x0, 0x6}, {0x2, 0x1, 0x5, 0x6}, {0x0, 0x5, 0xa, 0x3}], 0x10, 0x10001}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001940)={r2, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001680)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000001740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001780), &(0x7f00000017c0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000001800)}}, 0x10) (async, rerun: 64)
socket$inet(0x2, 0xa, 0x10001) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000019005f690000000000000000061880000000fd010002000008001e0007"], 0x2c}, 0x1, 0x0, 0x0, 0x30069a425c69d1ea}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000170000000c0000fbffffffffffffff00000000070000000000302e005f00613003950043f39be2f283f577fa9ab1f012e24efea9d1e433692779efd52aad1920b7086dcabd9be015e14eaf8cc7bc35a0d6be1c687b7416832680987548faf35464c819b754"], 0x0, 0x2f, 0x0, 0x1, 0x3}, 0x28)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f727400050004000000000f0900020073797a3000000000050005000000000005000100060000001c000780060004400000000006000540100000000800084000000074"], 0x64}}, 0x40400) (async)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2d, 0x25dfdbef, {0x7, 0x0, 0x0, r4, 0x80, 0x1, 0x1}, [@NDA_VLAN={0x6, 0x5, 0x2}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x20040040)

884.19µs ago: executing program 2 (id=1068):
r0 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}}, 0x0)
r1 = accept(r0, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x80)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}, {0xa, 0x4e20, 0x6, @mcast1, 0x6}, 0xffffffffffffffff, {[0x8, 0xea71, 0x3b, 0x10000000, 0x9ab, 0x400, 0x80000001, 0x7f]}}, 0x5c)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
bind$llc(r2, &(0x7f0000000900)={0x1a, 0x107, 0x7, 0x7, 0x1, 0x9, @random="16e2f7f2d8e1"}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="6b09000000000000000080106301310000000000950000000000000000000000cc789b5cee404943a40f30f305a2b342e9cca972d3091824d33cd9801fa6ca847562dd2553f377454fb7f191f4309fd0b0ceb5028fc9987774a1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xb}, 0x97)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000003c0)={0x3, {{0x2, 0x4e23, @empty}}, 0x1, 0x9, [{{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4c21, @dev={0xac, 0x14, 0x14, 0x5}}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @multicast2}}]}, 0x510)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000100)=0x15, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0x4, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f40)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880)

0s ago: executing program 2 (id=1069):
r0 = socket$nl_audit(0x10, 0x3, 0x9) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (rerun: 32)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async)
recvmmsg(r6, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 64)
sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2000000000000000840000000100"], 0x20, 0x2400e044}, 0x0) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r7=>0x0}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20) (async)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073112300000000008510000002"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) (async, rerun: 64)
r9 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64)
setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="714d7ead", @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES32=r7, @ANYBLOB="3401028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573689d0f5737ac6dfad26c00000000000058f39cad7b455fca74f89db4a36af0000500030003000000080004002182000040000900240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400020000000800070000"], 0x150}, 0x1, 0x0, 0x0, 0x40404}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:34150' (ED25519) to the list of known hosts.
syzkaller login: [   47.320129][ T5819] cgroup: Unknown subsys name 'net'
[   47.444887][ T5819] cgroup: Unknown subsys name 'cpuset'
[   47.449648][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.187169][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.003856][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.007070][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.009624][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.012747][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.015289][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.063562][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.067295][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.069909][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.080869][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.083694][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.107516][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.110266][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.113057][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.115819][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.118310][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.214443][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   53.328257][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.330856][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.333230][ T5827] bridge_slave_0: entered allmulticast mode
[   53.336654][ T5827] bridge_slave_0: entered promiscuous mode
[   53.343122][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.345377][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.347596][ T5827] bridge_slave_1: entered allmulticast mode
[   53.350219][ T5827] bridge_slave_1: entered promiscuous mode
[   53.367774][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   53.421476][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.429368][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.479888][ T5827] team0: Port device team_slave_0 added
[   53.497681][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   53.504830][ T5827] team0: Port device team_slave_1 added
[   53.506916][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.509217][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.511846][ T5832] bridge_slave_0: entered allmulticast mode
[   53.514608][ T5832] bridge_slave_0: entered promiscuous mode
[   53.529263][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.531842][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.534099][ T5832] bridge_slave_1: entered allmulticast mode
[   53.537468][ T5832] bridge_slave_1: entered promiscuous mode
[   53.568989][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.571419][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.579076][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.594270][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.597465][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.599627][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.608025][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.617534][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.661146][ T5832] team0: Port device team_slave_0 added
[   53.689543][ T5832] team0: Port device team_slave_1 added
[   53.691736][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.694086][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.696334][ T5835] bridge_slave_0: entered allmulticast mode
[   53.699034][ T5835] bridge_slave_0: entered promiscuous mode
[   53.714493][ T5827] hsr_slave_0: entered promiscuous mode
[   53.716935][ T5827] hsr_slave_1: entered promiscuous mode
[   53.735089][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.737235][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.739425][ T5835] bridge_slave_1: entered allmulticast mode
[   53.742415][ T5835] bridge_slave_1: entered promiscuous mode
[   53.762419][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.764601][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.774014][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.799334][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.801606][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.809386][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.819799][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.833458][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.885221][ T5832] hsr_slave_0: entered promiscuous mode
[   53.887525][ T5832] hsr_slave_1: entered promiscuous mode
[   53.889664][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.893745][ T5832] Cannot create hsr debugfs directory
[   53.897506][ T5835] team0: Port device team_slave_0 added
[   53.918484][ T5835] team0: Port device team_slave_1 added
[   53.962804][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.965435][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.975875][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.000228][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.007392][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.015577][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.082005][ T5835] hsr_slave_0: entered promiscuous mode
[   54.084317][ T5835] hsr_slave_1: entered promiscuous mode
[   54.086399][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.088692][ T5835] Cannot create hsr debugfs directory
[   54.149028][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.164860][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.177910][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.192917][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.271326][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.285045][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.303844][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.309666][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.337047][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.348980][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.353805][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.358516][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.428714][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.456171][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   54.471805][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.476770][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.479091][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.493543][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.495866][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.509013][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   54.530589][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.532850][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.545803][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.548056][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.570040][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.613086][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   54.631714][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.634070][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.638528][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.641382][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.727907][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.806791][ T5827] veth0_vlan: entered promiscuous mode
[   54.810080][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.817631][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.829044][ T5827] veth1_vlan: entered promiscuous mode
[   54.873113][ T5827] veth0_macvtap: entered promiscuous mode
[   54.884388][ T5835] veth0_vlan: entered promiscuous mode
[   54.886342][ T5832] veth0_vlan: entered promiscuous mode
[   54.890680][ T5827] veth1_macvtap: entered promiscuous mode
[   54.903491][ T5835] veth1_vlan: entered promiscuous mode
[   54.910594][ T5832] veth1_vlan: entered promiscuous mode
[   54.915153][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.925563][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.933026][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.935875][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.938632][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.942921][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.971368][ T5835] veth0_macvtap: entered promiscuous mode
[   54.987832][ T5835] veth1_macvtap: entered promiscuous mode
[   55.009060][ T5832] veth0_macvtap: entered promiscuous mode
[   55.031102][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.033713][ T5832] veth1_macvtap: entered promiscuous mode
[   55.046662][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.049225][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.052907][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.069976][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.073444][ T5219] Bluetooth: hci0: command tx timeout
[   55.076807][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.079687][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.082724][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.085624][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.107031][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.123802][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.126337][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.131850][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.135224][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.137903][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.140565][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.155288][   T53] Bluetooth: hci1: command tx timeout
[   55.157423][ T5219] Bluetooth: hci2: command tx timeout
[   55.210132][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.213528][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.223899][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.256475][ T1351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.258923][ T1351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.283641][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.289316][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.307116][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.309472][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.418691][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   55.418858][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.560357][ T5899] pimreg: entered allmulticast mode
[   55.659700][ T5910] geneve1: entered promiscuous mode
[   55.665020][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   55.680469][ T5910] geneve1 (unregistering): left promiscuous mode
[   55.727386][ T5914] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9'.
[   55.915845][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   55.918629][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'.
[   55.922754][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   55.926510][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'.
[   55.929348][ T5931] Zero length message leads to an empty skb
[   55.967223][ T5933] netlink: 'syz.1.11': attribute type 1 has an invalid length.
[   55.969982][ T5933] netlink: 184 bytes leftover after parsing attributes in process `syz.1.11'.
[   55.973482][ T5933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11'.
[   56.006924][ T5935] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   56.020237][ T5935] gretap1: entered promiscuous mode
[   56.023331][ T5935] batman_adv: batadv0: Adding interface: gretap1
[   56.025459][ T5935] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.034744][ T5935] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[   56.186898][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.328894][ T5954] netlink: 'syz.1.17': attribute type 10 has an invalid length.
[   56.340094][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.347590][ T5954] team0: Port device bond0 added
[   56.352284][ T5954] syz.1.17 (5954) used greatest stack depth: 20664 bytes left
[   56.389366][ T5963] netlink: 'syz.0.19': attribute type 10 has an invalid length.
[   56.393164][ T5967] netlink: 'syz.1.20': attribute type 1 has an invalid length.
[   56.414310][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.417439][ T5963] team0: Port device bond0 added
[   56.469911][ T5967] veth3: entered promiscuous mode
[   56.506546][ T5967] erspan0: entered allmulticast mode
[   56.581460][ T5979] netlink: 'syz.1.23': attribute type 1 has an invalid length.
[   56.594534][ T5979] netlink: 'syz.1.23': attribute type 3 has an invalid length.
[   56.688218][ T5982] Bluetooth: MGMT ver 1.23
[   56.759742][ T5989] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   56.794558][ T5991] ipvlan2: entered promiscuous mode
[   56.798310][ T5991] bridge0: port 3(ipvlan2) entered blocking state
[   56.800400][ T5991] bridge0: port 3(ipvlan2) entered disabled state
[   56.803679][ T5991] ipvlan2: entered allmulticast mode
[   56.805290][ T5991] gretap0: entered allmulticast mode
[   56.808237][ T5991] ipvlan2: left allmulticast mode
[   56.809753][ T5991] gretap0: left allmulticast mode
[   56.938009][ T6004] warning: `syz.2.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.014435][ T6014] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET)
[   57.016648][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.048281][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.151034][ T5219] Bluetooth: hci0: command tx timeout
[   57.230964][ T5219] Bluetooth: hci2: command tx timeout
[   57.232789][ T5219] Bluetooth: hci1: command tx timeout
[   57.424895][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.464330][ T6036] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0
[   57.513736][ T6038] veth3: entered allmulticast mode
[   58.022117][ T6067] netlink: 'syz.0.49': attribute type 18 has an invalid length.
[   58.206601][ T6073] netlink: zone id is out of range
[   58.208282][ T6073] netlink: zone id is out of range
[   58.214192][ T6073] netlink: zone id is out of range
[   58.216535][ T6073] netlink: zone id is out of range
[   58.218460][ T6073] netlink: zone id is out of range
[   58.220577][ T6073] netlink: zone id is out of range
[   58.224105][ T6073] netlink: zone id is out of range
[   58.225782][ T6073] netlink: zone id is out of range
[   58.228285][ T6073] netlink: zone id is out of range
[   58.593076][ T6101] netlink: 'syz.1.60': attribute type 3 has an invalid length.
[   58.643493][ T6107] (unnamed net_device) (uninitialized): option mode: invalid value (119)
[   58.909264][ T6128] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   59.231134][   T53] Bluetooth: hci0: command tx timeout
[   59.321069][   T53] Bluetooth: hci1: command tx timeout
[   59.321236][ T5219] Bluetooth: hci2: command tx timeout
[   59.478933][ T6151] tipc: Started in network mode
[   59.480604][ T6151] tipc: Node identity 4, cluster identity 4711
[   59.483147][ T6151] tipc: Node number set to 4
[   60.192197][ T6193] xt_CT: No such helper "snmp"
[   60.205576][ T6191] 8021q: adding VLAN 0 to HW filter on device bond2
[   60.210205][ T6191] bond1: (slave bond2): making interface the new active one
[   60.218711][ T6191] bond1: (slave bond2): Enslaving as an active interface with an up link
[   60.244157][ T6191] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[   60.332526][ T6203] pim6reg1: entered promiscuous mode
[   60.334350][ T6203] pim6reg1: entered allmulticast mode
[   60.448532][ T6203] __nla_validate_parse: 16 callbacks suppressed
[   60.448549][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.89'.
[   60.472166][ T6203] 8021q: adding VLAN 0 to HW filter on device bond3
[   60.475294][ T6203] team0: Port device bond3 added
[   60.643912][ T6214] netlink: 104 bytes leftover after parsing attributes in process `syz.0.92'.
[   60.959274][ T6231] ip6t_rpfilter: unknown options
[   61.128931][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'.
[   61.134645][ T6241] bridge_slave_1: left allmulticast mode
[   61.143567][ T6241] bridge_slave_1: left promiscuous mode
[   61.146155][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.152514][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.103'.
[   61.158405][ T6241] bridge_slave_0: left allmulticast mode
[   61.160258][ T6241] bridge_slave_0: left promiscuous mode
[   61.164472][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.307172][ T6252] lo speed is unknown, defaulting to 1000
[   61.309050][ T6252] lo speed is unknown, defaulting to 1000
[   61.315113][ T6252] lo speed is unknown, defaulting to 1000
[   61.319755][ T6252] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   61.324139][ T5219] Bluetooth: hci0: command tx timeout
[   61.329426][ T6252] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   61.354263][ T6252] lo speed is unknown, defaulting to 1000
[   61.358755][ T6252] lo speed is unknown, defaulting to 1000
[   61.366956][ T6252] lo speed is unknown, defaulting to 1000
[   61.370262][ T6252] lo speed is unknown, defaulting to 1000
[   61.377411][ T6254] ipvlan2: entered promiscuous mode
[   61.384728][ T6252] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   61.391455][ T5219] Bluetooth: hci2: command tx timeout
[   61.393220][ T5219] Bluetooth: hci1: command tx timeout
[   61.454273][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.107'.
[   61.494716][ T6258] netlink: 104 bytes leftover after parsing attributes in process `syz.2.108'.
[   61.543609][ T6253] block nbd0: server does not support multiple connections per device.
[   61.549861][ T6253] block nbd0: shutting down sockets
[   61.715435][ T6271] validate_nla: 3 callbacks suppressed
[   61.715465][ T6271] netlink: 'syz.1.112': attribute type 8 has an invalid length.
[   61.764956][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.115'.
[   61.769825][ T6276] net_ratelimit: 106 callbacks suppressed
[   61.769835][ T6276] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   61.828857][ T6280] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   61.838263][ T6279] vlan2: entered promiscuous mode
[   61.839903][ T6279] bond0: entered promiscuous mode
[   61.842361][ T6279] bond_slave_0: entered promiscuous mode
[   61.844289][ T6279] bond_slave_1: entered promiscuous mode
[   61.847239][ T6279] vlan2: entered allmulticast mode
[   61.848909][ T6279] bond0: entered allmulticast mode
[   61.850540][ T6279] bond_slave_0: entered allmulticast mode
[   61.854759][ T6279] bond_slave_1: entered allmulticast mode
[   61.869997][ T6280] netlink: 'syz.2.116': attribute type 3 has an invalid length.
[   61.922002][ T6287] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   61.924358][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'.
[   61.943169][ T6287] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   61.946054][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'.
[   61.964025][ T6287] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   61.966312][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'.
[   61.969328][ T6288] lo speed is unknown, defaulting to 1000
[   61.976160][ T6287] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   61.981574][ T6287] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   61.993814][ T6287] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   62.001849][ T6287] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   62.013178][ T6287] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   62.176469][ T6302] hsr_slave_1 (unregistering): left promiscuous mode
[   62.194245][ T6305] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   62.196745][ T6305] openvswitch: netlink: Message has 1 unknown bytes.
[   62.334197][ T6309] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   62.527108][ T6321] lo speed is unknown, defaulting to 1000
[   62.734019][ T6334] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   62.737865][ T6334] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   62.808905][ T6344] pim6reg1: entered promiscuous mode
[   62.810597][ T6344] pim6reg1: entered allmulticast mode
[   62.967516][ T6347] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.973058][ T6347] team0: Port device bond2 added
[   63.283394][ T6365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   63.326737][ T6382] lo speed is unknown, defaulting to 1000
[   63.327184][ T6365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.384361][ T6365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.351246][   T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   64.426341][   T10] cfg80211: failed to load regulatory.db
[   64.930434][ T2307] hid-generic 0005:0B57:1010.0001: item fetching failed at offset 0/1
[   64.939604][ T2307] hid-generic 0005:0B57:1010.0001: probe with driver hid-generic failed with error -22
[   64.977784][ T6409] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   65.017830][ T6409] bond4: entered promiscuous mode
[   65.019606][ T6409] bond4: entered allmulticast mode
[   65.022732][ T6409] 8021q: adding VLAN 0 to HW filter on device bond4
[   65.051769][ T6409] `: entered promiscuous mode
[   65.153694][ T6418] lo speed is unknown, defaulting to 1000
[   65.374432][ T6428] IPVS: Scheduler module ip_vs_sip not found
[   65.376803][ T6428] IPVS: length: 146 != 8
[   65.556935][ T6435] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[   65.609349][ T6440] __nla_validate_parse: 102 callbacks suppressed
[   65.609362][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'.
[   65.615298][ T6440] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   65.618402][ T6440] tipc: Enabled bearer <udp:syz1>, priority 10
[   65.859228][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'.
[   65.874013][ T6464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.164'.
[   66.019001][ T6469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.027700][ T6074] lo speed is unknown, defaulting to 1000
[   66.083271][ T6477] lo speed is unknown, defaulting to 1000
[   66.095123][ T6479] netlink: 104 bytes leftover after parsing attributes in process `syz.0.167'.
[   66.175510][ T6486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.169'.
[   66.178252][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[   66.181189][ T6486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.169'.
[   66.184158][ T6486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.169'.
[   66.336934][ T6493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.365377][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   66.472775][ T6493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.529493][ T6493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.633952][ T6493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.752001][ T6493] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.763041][ T6493] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.771664][ T6493] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.779634][ T6493] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.789857][ T6516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.792268][ T6516] IPv6: NLM_F_CREATE should be set when creating new route
[   66.794383][ T6516] IPv6: NLM_F_CREATE should be set when creating new route
[   66.796487][ T6516] IPv6: NLM_F_CREATE should be set when creating new route
[   67.027280][ T6528] netlink: 104 bytes leftover after parsing attributes in process `syz.1.183'.
[   67.086534][ T6526] delete_channel: no stack
[   67.233791][ T6541] lo speed is unknown, defaulting to 1000
[   67.730298][ T6576] unsupported nlmsg_type 40
[   67.806196][ T6588] tipc: Started in network mode
[   67.807708][ T6588] tipc: Node identity 56aae87f95e4, cluster identity 4711
[   67.809982][ T6588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.823465][ T6588] syzkaller0: entered promiscuous mode
[   67.832912][ T6588] syzkaller0: entered allmulticast mode
[   67.975144][ T6587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.053511][ T6587] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.057151][ T6587] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.060665][ T6587] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.065468][ T6587] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.137336][ T6595] tipc: Resetting bearer <eth:syzkaller0>
[   68.146435][   T10] lo speed is unknown, defaulting to 1000
[   68.148674][   T10] syz1: Port: 1 Link DOWN
[   68.160240][ T6585] tipc: Resetting bearer <eth:syzkaller0>
[   68.189556][ T6585] tipc: Disabling bearer <eth:syzkaller0>
[   68.226121][ T6600] validate_nla: 64 callbacks suppressed
[   68.226133][ T6600] netlink: 'syz.2.204': attribute type 10 has an invalid length.
[   68.243069][ T6600] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   68.254024][ T6600] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[   68.264578][ T6601] sock: sock_set_timeout: `syz.0.203' (pid 6601) tries to set negative timeout
[   68.301795][ T6603] pim6reg1: entered promiscuous mode
[   68.303443][ T6603] pim6reg1: entered allmulticast mode
[   68.440032][ T6603] 8021q: adding VLAN 0 to HW filter on device bond3
[   68.446362][ T6603] team0: Port device bond3 added
[   68.464101][ T6609] lo speed is unknown, defaulting to 1000
[   68.741312][ T6628] lo speed is unknown, defaulting to 1000
[   68.926947][ T6635] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   69.114418][ T6641] pim6reg1: entered promiscuous mode
[   69.116218][ T6641] pim6reg1: entered allmulticast mode
[   69.255211][ T6641] 8021q: adding VLAN 0 to HW filter on device bond5
[   69.258087][ T6641] team0: Port device bond5 added
[   69.420133][ T6666] lo speed is unknown, defaulting to 1000
[   69.725564][ T6677] netlink: 'syz.0.224': attribute type 3 has an invalid length.
[   70.263169][ T6686] syzkaller1: entered promiscuous mode
[   70.266056][ T6686] syzkaller1: entered allmulticast mode
[   70.409563][ T6694] pim6reg1: entered promiscuous mode
[   70.414143][ T6694] pim6reg1: entered allmulticast mode
[   70.487973][ T6699] lo speed is unknown, defaulting to 1000
[   70.555719][ T6694] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.558675][ T6694] team0: Port device bond1 added
[   70.715421][ T6706] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   70.719086][ T6706] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[   70.722874][ T6706] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[   70.835787][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.140608][ T6726] pim6reg1: entered promiscuous mode
[   71.143900][ T6726] pim6reg1: entered allmulticast mode
[   71.287401][ T6727] __nla_validate_parse: 15 callbacks suppressed
[   71.287426][ T6727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.240'.
[   71.362752][ T6727] 8021q: adding VLAN 0 to HW filter on device bond4
[   71.371257][ T6727] team0: Port device bond4 added
[   71.728353][ T6734] lo speed is unknown, defaulting to 1000
[   72.025608][ T6749] netlink: 104 bytes leftover after parsing attributes in process `syz.0.248'.
[   72.068556][ T6753] tipc: Started in network mode
[   72.070136][ T6753] tipc: Node identity ac14142f, cluster identity 4711
[   72.073046][ T6753] tipc: New replicast peer: 0.0.0.0
[   72.075211][ T6753] tipc: Enabled bearer <udp:syz2>, priority 10
[   72.077156][ T6754] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   72.143467][ T6757] pim6reg1: entered promiscuous mode
[   72.145137][ T6757] pim6reg1: entered allmulticast mode
[   72.261597][ T6757] netlink: 32 bytes leftover after parsing attributes in process `syz.0.250'.
[   72.267601][ T6761] netlink: 14 bytes leftover after parsing attributes in process `syz.1.251'.
[   72.333917][ T6761] team0: Port device bond0 removed
[   72.342669][ T6761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.345574][ T6761] bond_slave_0: left promiscuous mode
[   72.347363][ T6761] bond_slave_0: left allmulticast mode
[   72.351675][ T6761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.354669][ T6761] bond_slave_1: left promiscuous mode
[   72.356460][ T6761] bond_slave_1: left allmulticast mode
[   72.358978][ T6761] bond0 (unregistering): Released all slaves
[   72.390564][ T6757] 8021q: adding VLAN 0 to HW filter on device bond6
[   72.405502][ T6757] team0: Port device bond6 added
[   72.639425][ T6775] netlink: 'syz.0.256': attribute type 1 has an invalid length.
[   72.658292][ T6775] 8021q: adding VLAN 0 to HW filter on device bond7
[   72.676586][ T6775] bond7: (slave geneve2): making interface the new active one
[   72.680268][ T6775] bond7: (slave geneve2): Enslaving as an active interface with an up link
[   72.732161][ T6775] bond7: entered promiscuous mode
[   72.733999][ T6775] geneve2: entered promiscuous mode
[   72.774261][ T6780] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   72.798573][ T6780] netlink: 'syz.0.257': attribute type 3 has an invalid length.
[   72.821272][ T6780] lo speed is unknown, defaulting to 1000
[   72.967254][ T6793] netlink: 104 bytes leftover after parsing attributes in process `syz.0.259'.
[   73.064928][ T6801] pim6reg1: entered promiscuous mode
[   73.066609][ T6801] pim6reg1: entered allmulticast mode
[   73.195650][   T63] tipc: Node number set to 2886997039
[   73.195947][ T6805] netlink: 32 bytes leftover after parsing attributes in process `syz.1.261'.
[   73.229362][ T6805] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.234304][ T6805] team0: Port device bond0 added
[   73.265365][ T6808] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   73.270224][ T6808] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   73.318205][ T6813] netlink: 'syz.0.262': attribute type 64 has an invalid length.
[   73.325410][ T6816] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   73.345082][ T6816] netlink: 'syz.1.265': attribute type 3 has an invalid length.
[   73.347881][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'.
[   73.366819][ T6816] lo speed is unknown, defaulting to 1000
[   73.497777][ T6829] batman_adv: batadv0: Adding interface: dummy0
[   73.499796][ T6829] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.508031][ T6829] batman_adv: batadv0: Interface activated: dummy0
[   73.517656][ T6829] batadv0: mtu less than device minimum
[   73.520070][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.523861][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.527502][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.531191][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.534825][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.538560][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.542275][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.545950][ T6829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.600486][ T6832] netlink: 'syz.1.269': attribute type 2 has an invalid length.
[   73.616063][ T6832] netlink: 'syz.1.269': attribute type 1 has an invalid length.
[   73.618871][ T6832] netlink: 'syz.1.269': attribute type 1 has an invalid length.
[   73.622784][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.269'.
[   73.757655][ T6837] netlink: 32 bytes leftover after parsing attributes in process `syz.1.271'.
[   73.840615][ T6839] lo speed is unknown, defaulting to 1000
[   74.128718][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'.
[   74.177413][ T6844] bridge_slave_1: left allmulticast mode
[   74.179200][ T6844] bridge_slave_1: left promiscuous mode
[   74.181633][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.187013][ T6844] bridge_slave_0: left allmulticast mode
[   74.188813][ T6844] bridge_slave_0: left promiscuous mode
[   74.190586][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.337417][ T6848] netlink: 'syz.2.275': attribute type 3 has an invalid length.
[   74.479399][ T6868] netlink: 'syz.2.280': attribute type 126 has an invalid length.
[   74.548958][ T6874] lo speed is unknown, defaulting to 1000
[   74.570597][ T6876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.609935][ T6876] syzkaller0: entered promiscuous mode
[   74.613348][ T6876] syzkaller0: entered allmulticast mode
[   74.615908][ T6876] tipc: Resetting bearer <eth:syzkaller0>
[   74.643508][ T6875] tipc: Resetting bearer <eth:syzkaller0>
[   75.455471][ T6875] tipc: Disabling bearer <eth:syzkaller0>
[   75.538227][ T6894] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   75.558811][ T6894] batman_adv: batadv0: Interface deactivated: dummy0
[   75.562483][ T6894] batman_adv: batadv0: Removing interface: dummy0
[   75.566858][ T6894] bridge_slave_0: left allmulticast mode
[   75.568607][ T6894] bridge_slave_0: left promiscuous mode
[   75.570443][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.575223][ T6894] bridge_slave_1: left allmulticast mode
[   75.576899][ T6894] bridge_slave_1: left promiscuous mode
[   75.578684][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.593483][ T6894] team0: Port device team_slave_0 removed
[   75.598183][ T6894] team0: Port device team_slave_1 removed
[   75.600267][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.604796][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.608411][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.610564][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.617296][ T6894] batman_adv: batadv0: Removing interface: gretap1
[   75.623761][ T6894] team0: Port device bond2 removed
[   75.627182][ T6894] team0: Port device bond3 removed
[   75.630525][ T6894] team0: Port device bond4 removed
[   75.634822][ T6894] team0: Port device bond0 removed
[   75.705275][ T6898] team0: Port device bond0 removed
[   75.708607][ T6898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.715189][ T6898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.719449][ T6898] bond0 (unregistering): Released all slaves
[   75.736959][ T6901] unknown channel width for channel at 909000KHz?
[   75.845423][ T6911] netlink: 'syz.1.290': attribute type 4 has an invalid length.
[   75.988387][ T6923] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   76.054557][ T6074] IPVS: starting estimator thread 0...
[   76.058655][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.063329][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.075228][ T6926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.151287][ T6935] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.160902][ T6929] IPVS: using max 62 ests per chain, 148800 per kthread
[   76.196417][ T6935] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.254551][ T6935] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.295282][ T6935] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.375343][ T6935] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.384347][ T6935] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.393264][ T6935] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.402613][ T6935] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.469486][ T6940] __nla_validate_parse: 14 callbacks suppressed
[   76.469500][ T6940] netlink: 104 bytes leftover after parsing attributes in process `syz.0.300'.
[   76.516017][ T6942] netlink: 'syz.0.301': attribute type 39 has an invalid length.
[   76.622568][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'.
[   76.689757][ T6947] netlink: 'syz.1.303': attribute type 3 has an invalid length.
[   76.711331][ T6947] lo speed is unknown, defaulting to 1000
[   76.736193][ T6952] pim6reg1: entered promiscuous mode
[   76.737994][ T6952] pim6reg1: entered allmulticast mode
[   76.850378][ T6959] netlink: 104 bytes leftover after parsing attributes in process `syz.1.307'.
[   76.865934][ T6955] netlink: 32 bytes leftover after parsing attributes in process `syz.2.305'.
[   76.900031][ T6955] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.903414][ T6955] team0: Port device bond2 added
[   76.973999][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'.
[   77.006807][ T6966] bond0: (slave gretap0): Opening slave failed
[   77.063447][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[   77.139126][ T6972] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.227784][ T6983] netlink: 104 bytes leftover after parsing attributes in process `syz.2.315'.
[   77.268831][ T6986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'.
[   77.320030][ T6992] lo speed is unknown, defaulting to 1000
[   77.522147][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.321'.
[   77.526986][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.321'.
[   78.369662][ T7037] net_ratelimit: 13 callbacks suppressed
[   78.369675][ T7037] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   78.397596][ T7037] validate_nla: 2 callbacks suppressed
[   78.397608][ T7037] netlink: 'syz.1.329': attribute type 3 has an invalid length.
[   78.420342][ T7037] lo speed is unknown, defaulting to 1000
[   78.428765][ T7041] lo speed is unknown, defaulting to 1000
[   78.813781][ T7061] pim6reg1: entered promiscuous mode
[   78.815370][ T7061] pim6reg1: entered allmulticast mode
[   78.945578][ T7061] 8021q: adding VLAN 0 to HW filter on device bond4
[   78.948449][ T7061] team0: Port device bond4 added
[   79.312051][ T1086] wlan1: Trigger new scan to find an IBSS to join
[   79.998548][ T7078] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[   80.036892][ T7072] xt_CT: No such helper "snmp"
[   80.040868][ T7072] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   80.043576][ T7072] tipc: Enabled bearer <udp:syz1>, priority 10
[   80.169466][ T7087] pim6reg1: entered promiscuous mode
[   80.171575][ T7087] pim6reg1: entered allmulticast mode
[   80.245923][ T7093] lo speed is unknown, defaulting to 1000
[   80.315191][ T7094] 8021q: adding VLAN 0 to HW filter on device bond5
[   80.320094][ T7094] team0: Port device bond5 added
[   80.560775][ T7105] IPv6: addrconf: prefix option has invalid lifetime
[   80.768179][ T7121] pim6reg1: entered promiscuous mode
[   80.769838][ T7121] pim6reg1: entered allmulticast mode
[   80.850620][ T7126] lo speed is unknown, defaulting to 1000
[   80.900203][ T7121] 8021q: adding VLAN 0 to HW filter on device bond5
[   80.904151][ T7121] team0: Port device bond5 added
[   81.042209][ T5874] tipc: Node number set to 3276728447
[   81.357227][ T7163] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   81.519198][ T7177] __nla_validate_parse: 20 callbacks suppressed
[   81.519212][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'.
[   81.616651][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'.
[   81.619276][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'.
[   81.623754][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.379'.
[   81.628004][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.379'.
[   81.657450][ T7190] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.660436][ T7190] syzkaller0: entered allmulticast mode
[   81.663790][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.379'.
[   81.794038][ T7208] pim6reg1: entered promiscuous mode
[   81.795740][ T7208] pim6reg1: entered allmulticast mode
[   81.899674][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.382'.
[   81.939159][ T7211] 8021q: adding VLAN 0 to HW filter on device bond7
[   81.945111][ T7211] team0: Port device bond7 added
[   81.993936][ T7217] lo speed is unknown, defaulting to 1000
[   82.041713][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'.
[   82.045176][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'.
[   82.099978][ T7237] netlink: 104 bytes leftover after parsing attributes in process `syz.1.389'.
[   82.155801][ T7239] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[   82.223182][ T7245] syzkaller0: entered promiscuous mode
[   82.225013][ T7245] syzkaller0: entered allmulticast mode
[   82.353344][   T29] wlan1: Trigger new scan to find an IBSS to join
[   82.928134][ T7258] netem: change failed
[   82.936095][ T7256] netlink: 'syz.2.396': attribute type 1 has an invalid length.
[   82.940612][ T7259] netem: change failed
[   82.999986][ T7265] tipc: Enabling of bearer <eth:bridge0> rejected, failed to enable media
[   83.021486][ T7266] pim6reg1: entered promiscuous mode
[   83.023136][ T7266] pim6reg1: entered allmulticast mode
[   83.153540][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.156455][ T7271] team0: Port device bond0 added
[   83.194084][ T7287] netlink: 'syz.2.404': attribute type 30 has an invalid length.
[   83.205698][ T7287] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.208505][ T7287] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.211932][ T7287] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.215388][ T7287] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.230052][ T7287] netlink: 'syz.2.404': attribute type 30 has an invalid length.
[   83.463091][ T7305] netlink: 'syz.0.412': attribute type 62 has an invalid length.
[   83.477533][ T7308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.486991][ T7311] pim6reg1: entered promiscuous mode
[   83.488964][ T7311] pim6reg1: entered allmulticast mode
[   83.526868][ T7313] netlink: 'syz.0.416': attribute type 1 has an invalid length.
[   83.548468][ T7313] 8021q: adding VLAN 0 to HW filter on device bond8
[   83.561678][ T7313] bond8: (slave ip6gretap1): making interface the new active one
[   83.564723][ T7313] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[   83.595118][ T7313] veth7: entered promiscuous mode
[   83.598606][ T7313] bond8: (slave veth7): Enslaving as an active interface with a down link
[   83.601650][ T7315] lo speed is unknown, defaulting to 1000
[   83.616392][ T7313] erspan0: entered allmulticast mode
[   83.622881][ T7313] bond8: (slave erspan0): Enslaving as an active interface with an up link
[   83.648364][ T7317] 8021q: adding VLAN 0 to HW filter on device bond6
[   83.659580][ T7317] team0: Port device bond6 added
[   83.797171][ T7327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.848380][ T7327] syzkaller0: entered promiscuous mode
[   83.850227][ T7327] syzkaller0: entered allmulticast mode
[   83.882424][ T7327] tipc: Resetting bearer <eth:syzkaller0>
[   83.914447][ T7326] tipc: Resetting bearer <eth:syzkaller0>
[   83.948913][ T7326] tipc: Disabling bearer <eth:syzkaller0>
[   83.965600][ T7337] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   84.065284][ T7350] pim6reg1: entered promiscuous mode
[   84.067186][ T7350] pim6reg1: entered allmulticast mode
[   84.108847][ T7355] netlink: 'syz.1.426': attribute type 2 has an invalid length.
[   84.112659][ T7355] netlink: 'syz.1.426': attribute type 2 has an invalid length.
[   84.208234][ T7356] 8021q: adding VLAN 0 to HW filter on device bond9
[   84.212619][ T7356] team0: Port device bond9 added
[   84.317861][ T7375] netlink: 'syz.0.432': attribute type 29 has an invalid length.
[   84.322571][ T7375] netlink: 'syz.0.432': attribute type 29 has an invalid length.
[   84.325358][ T7373] netlink: 'syz.1.431': attribute type 10 has an invalid length.
[   84.339876][ T7373] team0: Port device dummy0 added
[   84.349755][ T7373] netlink: 'syz.1.431': attribute type 10 has an invalid length.
[   84.375303][ T7373] team0: Port device dummy0 removed
[   84.383004][ T7373] netlink: 'syz.1.431': attribute type 10 has an invalid length.
[   84.409533][ T7373] veth0_vlan: left promiscuous mode
[   84.415159][ T7373] veth0_vlan: entered promiscuous mode
[   84.418976][ T7383] netlink: 'syz.0.435': attribute type 1 has an invalid length.
[   84.420168][ T7373] team0: Device veth0_vlan failed to register rx_handler
[   84.441336][ T7373] syz.1.431 (7373) used greatest stack depth: 19376 bytes left
[   84.468710][ T7383] 8021q: adding VLAN 0 to HW filter on device bond10
[   84.486083][ T7383] 8021q: adding VLAN 0 to HW filter on device bond10
[   84.488550][ T7383] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.495024][ T7383] bond10: (slave vxcan3): Error -95 calling set_mac_address
[   84.544896][ T7391] veth9: entered promiscuous mode
[   84.600123][ T7397] pim6reg1: entered promiscuous mode
[   84.604579][ T7397] pim6reg1: entered allmulticast mode
[   84.609483][ T7383] netlink: 'syz.0.435': attribute type 11 has an invalid length.
[   84.652847][ T5852] bond8: (slave erspan0): link status definitely down, disabling slave
[   84.657359][ T5852] ip6gretap1: entered promiscuous mode
[   84.735549][ T7397] 8021q: adding VLAN 0 to HW filter on device bond7
[   84.738596][ T7397] team0: Port device bond7 added
[   85.042407][ T7429] bond11: entered promiscuous mode
[   85.044020][ T7429] bond11: entered allmulticast mode
[   85.045798][ T7429] 8021q: adding VLAN 0 to HW filter on device bond11
[   85.115770][ T7437] rdma_rxe: rxe_newlink: failed to add macvlan1
[   85.311038][   T29] wlan1: Trigger new scan to find an IBSS to join
[   85.369951][ T7444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.376952][ T7444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.477818][ T7444] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.480447][ T7444] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.485720][ T7444] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.488219][ T7444] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.912211][ T7476] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   86.058093][ T7487] lo speed is unknown, defaulting to 1000
[   86.272312][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.354970][ T7499] pim6reg1: entered promiscuous mode
[   86.356610][ T7499] pim6reg1: entered allmulticast mode
[   86.481576][ T7499] 8021q: adding VLAN 0 to HW filter on device bond8
[   86.484402][ T7499] team0: Port device bond8 added
[   86.570278][ T7503] __nla_validate_parse: 29 callbacks suppressed
[   86.570291][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'.
[   86.647656][ T7503] netlink: 44 bytes leftover after parsing attributes in process `syz.2.464'.
[   86.686662][ T7506] lo speed is unknown, defaulting to 1000
[   86.804574][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'.
[   86.821019][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.466'.
[   86.824070][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'.
[   86.826668][ T7509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.466'.
[   87.077266][ T7529] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   87.486350][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'.
[   87.647610][ T7544] netlink: 156 bytes leftover after parsing attributes in process `syz.2.474'.
[   88.027391][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'.
[   88.076978][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'.
[   88.496297][ T7580] lo speed is unknown, defaulting to 1000
[   88.795863][ T7610] validate_nla: 5 callbacks suppressed
[   88.795877][ T7610] netlink: 'syz.2.492': attribute type 13 has an invalid length.
[   88.800344][ T7610] netlink: 'syz.2.492': attribute type 17 has an invalid length.
[   88.846212][ T7610] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.855669][ T7610] 8021q: adding VLAN 0 to HW filter on device team0
[   88.866548][ T7610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.872764][ T5874] lo speed is unknown, defaulting to 1000
[   88.874460][ T5874] syz1: Port: 1 Link ACTIVE
[   89.006626][ T7626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.040280][ T7633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.048596][ T7633] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   89.060298][ T7635] syzkaller0: entered promiscuous mode
[   89.063158][ T7635] syzkaller0: entered allmulticast mode
[   89.065896][ T7633] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   89.085633][ T7633] tipc: Resetting bearer <eth:syzkaller0>
[   89.095820][ T7633] tipc: Disabling bearer <eth:syzkaller0>
[   89.189378][ T7642] netlink: 'syz.0.504': attribute type 4 has an invalid length.
[   89.220535][ T7643] pim6reg1: entered promiscuous mode
[   89.222779][ T7643] pim6reg1: entered allmulticast mode
[   89.695346][ T7685] batadv_slave_1: entered promiscuous mode
[   89.708856][ T7685] batadv_slave_1: left promiscuous mode
[   89.873952][ T7702] sctp: [Deprecated]: syz.0.522 (pid 7702) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.873952][ T7702] Use struct sctp_sack_info instead
[   90.079001][ T7715] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[   90.259411][ T7727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.355734][ T7731] lo speed is unknown, defaulting to 1000
[   90.765382][ T7752] xt_CT: You must specify a L4 protocol and not use inversions on it
[   90.777239][ T7752] bond0: (slave wlan1): Releasing backup interface
[   91.288619][ T7784] IPv6: Can't replace route, no match found
[   91.438199][ T7796] netlink: 'syz.0.552': attribute type 1 has an invalid length.
[   91.455514][ T7796] 8021q: adding VLAN 0 to HW filter on device bond13
[   91.528409][ T7802] lo speed is unknown, defaulting to 1000
[   91.595637][ T7802] netlink: 'syz.0.554': attribute type 21 has an invalid length.
[   91.601430][ T7802] netlink: 'syz.0.554': attribute type 6 has an invalid length.
[   91.605080][ T7802] __nla_validate_parse: 28 callbacks suppressed
[   91.605089][ T7802] netlink: 64 bytes leftover after parsing attributes in process `syz.0.554'.
[   91.610415][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[   91.615070][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[   91.620486][ T7811] netlink: 68 bytes leftover after parsing attributes in process `syz.2.556'.
[   91.626656][ T7813] vlan2: entered promiscuous mode
[   91.628770][ T7813] bridge0: entered promiscuous mode
[   91.630410][ T7813] vlan2: entered allmulticast mode
[   91.632128][   T53] Bluetooth: hci2: command tx timeout
[   91.635002][ T7813] bridge0: entered allmulticast mode
[   91.645892][ T7811] unknown channel width for channel at 909000KHz?
[   91.659085][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[   91.667077][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[   91.670238][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'.
[   91.778497][ T7828] netlink: 92 bytes leftover after parsing attributes in process `syz.0.561'.
[   91.846639][ T7836] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   91.872263][ T7839] netlink: 248 bytes leftover after parsing attributes in process `syz.1.564'.
[   91.942799][ T7841] xt_CT: No such helper "snmp"
[   92.245440][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'.
[   92.308521][ T7884] netlink: 'syz.1.574': attribute type 1 has an invalid length.
[   92.333594][ T7884] 8021q: adding VLAN 0 to HW filter on device bond8
[   92.436942][ T7903] netlink: 'syz.1.576': attribute type 64 has an invalid length.
[   93.299280][ T7936] netem: unknown loss type 13
[   93.307904][ T7936] netem: change failed
[   93.417053][ T7951] netlink: 'syz.0.589': attribute type 1 has an invalid length.
[   93.445712][ T7954] vxcan2: entered promiscuous mode
[   93.984640][ T7996] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   94.052693][ T8005] validate_nla: 3 callbacks suppressed
[   94.052706][ T8005] netlink: 'syz.1.605': attribute type 10 has an invalid length.
[   94.089514][ T8005] team0: Port device geneve0 added
[   94.099060][ T8005] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   94.332144][ T8023] netlink: 'syz.2.611': attribute type 1 has an invalid length.
[   94.506002][ T8038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.139551][ T8092] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[   95.145890][ T8092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.263620][ T8106] bridge0: port 1(veth0_to_bridge) entered blocking state
[   95.267996][ T8106] bridge0: port 1(veth0_to_bridge) entered disabled state
[   95.270289][ T8106] veth0_to_bridge: entered allmulticast mode
[   95.274370][ T8106] veth0_to_bridge: entered promiscuous mode
[   95.288785][ T8097] lo speed is unknown, defaulting to 1000
[   95.329003][ T8107] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.532892][ T8130] netlink: 'syz.0.638': attribute type 1 has an invalid length.
[   95.535958][ T8130] netlink: 'syz.0.638': attribute type 2 has an invalid length.
[   95.538303][ T8130] netlink: 'syz.0.638': attribute type 1 has an invalid length.
[   95.561910][ T8131] pim6reg1: entered promiscuous mode
[   95.563667][ T8131] pim6reg1: entered allmulticast mode
[   95.568548][ T8133] netlink: 'syz.1.639': attribute type 4 has an invalid length.
[   95.684367][ T8141] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   95.695415][ T8134] 8021q: adding VLAN 0 to HW filter on device bond9
[   95.698740][ T8134] team0: Port device bond9 added
[   95.704979][ T8141] netlink: 'syz.0.642': attribute type 3 has an invalid length.
[   95.828413][ T8156] lo speed is unknown, defaulting to 1000
[   95.912425][ T8165] netlink: 'syz.2.647': attribute type 10 has an invalid length.
[   95.918827][ T8165] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   95.927080][ T8168] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   96.259763][ T8177] : entered promiscuous mode
[   96.285175][ T8191] netlink: 'syz.2.655': attribute type 28 has an invalid length.
[   96.525390][ T8202] netlink: 'syz.2.659': attribute type 1 has an invalid length.
[   96.629941][ T8205] !: renamed from dummy0 (while UP)
[   96.712300][ T8209] lo speed is unknown, defaulting to 1000
[   96.845015][ T8219] lo speed is unknown, defaulting to 1000
[   97.285032][ T8260] __nla_validate_parse: 46 callbacks suppressed
[   97.285045][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'.
[   97.313184][ T8260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.423690][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'.
[   97.427638][ T8272] veth1_macvtap: left promiscuous mode
[   97.722996][ T8316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.976409][ T8328] lo speed is unknown, defaulting to 1000
[   97.980407][ T8328] lo speed is unknown, defaulting to 1000
[   97.984803][ T8328] lo speed is unknown, defaulting to 1000
[   97.993896][   T55] block nbd0: Receive control failed (result -104)
[   98.076334][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'.
[   98.103001][ T8328] infiniband syz0: set active
[   98.105570][   T10] lo speed is unknown, defaulting to 1000
[   98.107460][ T8328] infiniband syz0: added lo
[   98.131371][ T8328] RDS/IB: syz0: added
[   98.134289][ T8328] smc: adding ib device syz0 with port count 1
[   98.136339][ T8328] smc:    ib device syz0 port 1 has pnetid 
[   98.140069][   T10] lo speed is unknown, defaulting to 1000
[   98.145968][ T8328] lo speed is unknown, defaulting to 1000
[   98.253490][ T8328] lo speed is unknown, defaulting to 1000
[   98.353990][ T8328] lo speed is unknown, defaulting to 1000
[   98.455850][ T8328] lo speed is unknown, defaulting to 1000
[   98.720777][ T8328] syz.2.672 (8328) used greatest stack depth: 19296 bytes left
[   98.757098][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[   98.775181][ T8340] netlink: 20 bytes leftover after parsing attributes in process `syz.0.678'.
[   98.778402][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[   98.858765][ T8343] netlink: 36 bytes leftover after parsing attributes in process `syz.2.679'.
[   99.035419][ T8348] erspan0: left allmulticast mode
[   99.047192][ T8348] 8021q: adding VLAN 0 to HW filter on device team0
[   99.062491][ T8348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.319896][ T8373] validate_nla: 3 callbacks suppressed
[   99.319910][ T8373] netlink: 'syz.0.687': attribute type 1 has an invalid length.
[   99.340305][ T8373] netlink: 44 bytes leftover after parsing attributes in process `syz.0.687'.
[   99.554034][ T8393] ieee802154 phy1 wpan1: encryption failed: -90
[   99.649504][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.693'.
[   99.726853][ T8401] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.730175][ T8401] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.733255][ T8401] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.735954][ T8401] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   99.743449][   T10] lo speed is unknown, defaulting to 1000
[   99.745151][   T10] syz0: Port: 1 Link DOWN
[   99.758654][   T10] lo speed is unknown, defaulting to 1000
[   99.799437][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'.
[   99.862206][ T8412] ipip0: entered allmulticast mode
[  100.085091][ T8410] bond0: (slave netdevsim0): Releasing backup interface
[  100.122178][ T8430] netlink: 'syz.0.700': attribute type 13 has an invalid length.
[  100.128322][ T8430] netlink: 'syz.0.700': attribute type 17 has an invalid length.
[  100.130284][ T8432] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[  100.134040][ T8432] netlink: 'syz.1.701': attribute type 1 has an invalid length.
[  100.140660][ T8430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.176045][ T8430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.234219][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.288534][ T8430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.294321][ T8444] netlink: 'syz.2.704': attribute type 13 has an invalid length.
[  100.296754][ T8444] netlink: 'syz.2.704': attribute type 17 has an invalid length.
[  100.316472][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.319386][ T8444] 8021q: adding VLAN 0 to HW filter on device team0
[  100.329603][ T8444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.336032][   T10] lo speed is unknown, defaulting to 1000
[  100.337785][   T10] syz0: Port: 1 Link ACTIVE
[  100.339251][   T10] lo speed is unknown, defaulting to 1000
[  100.369504][ T8440] lo speed is unknown, defaulting to 1000
[  100.373338][ T8440] lo speed is unknown, defaulting to 1000
[  100.843710][ T8472] netlink: 'syz.0.709': attribute type 1 has an invalid length.
[  100.867095][ T8472] xt_CT: No such helper "snmp"
[  100.873740][ T8472] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  100.877697][ T8472] tipc: Enabled bearer <udp:syz1>, priority 10
[  101.804956][ T8497] netlink: 'syz.0.717': attribute type 21 has an invalid length.
[  101.807514][ T8497] netlink: 'syz.0.717': attribute type 5 has an invalid length.
[  101.933906][ T8506] "syz.0.719" (8506) uses obsolete ecb(arc4) skcipher
[  101.959165][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.372752][ T8540] __nla_validate_parse: 20 callbacks suppressed
[  102.372766][ T8540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.723'.
[  102.393689][ T8540] lo speed is unknown, defaulting to 1000
[  102.396937][ T8540] lo speed is unknown, defaulting to 1000
[  102.438656][ T8541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.723'.
[  102.755699][ T8547] netlink: 17 bytes leftover after parsing attributes in process `syz.0.724'.
[  103.097628][ T8562] pim6reg1: entered promiscuous mode
[  103.099449][ T8562] pim6reg1: entered allmulticast mode
[  103.214000][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.0.728'.
[  103.304397][ T8562] 8021q: adding VLAN 0 to HW filter on device bond15
[  103.314763][ T8562] team0: Port device bond15 added
[  103.335002][ T8567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.337517][ T8567] syzkaller0: entered promiscuous mode
[  103.339239][ T8567] syzkaller0: entered allmulticast mode
[  103.343125][ T8567] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  103.355400][ T8566] tipc: Resetting bearer <eth:syzkaller0>
[  103.372403][ T8566] tipc: Disabling bearer <eth:syzkaller0>
[  103.416483][ T8572] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  103.429738][ T8572] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  103.432407][ T8572] tipc: Invalid UDP bearer configuration
[  103.432435][ T8572] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  103.490508][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'.
[  103.645477][ T8591] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  103.653893][ T8591] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  103.715581][ T8593] pim6reg1: entered promiscuous mode
[  103.717333][ T8593] pim6reg1: entered allmulticast mode
[  103.804378][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'.
[  103.834942][ T8593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.737'.
[  103.859099][ T8593] 8021q: adding VLAN 0 to HW filter on device bond16
[  103.863945][ T8593] team0: Port device bond16 added
[  103.880648][ T8602] 8021q: adding VLAN 0 to HW filter on device bond9
[  103.888249][ T8602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.740'.
[  104.190499][ T8639] pim6reg1: entered promiscuous mode
[  104.192901][ T8639] pim6reg1: entered allmulticast mode
[  104.299832][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.750'.
[  104.326760][ T8646] 8021q: adding VLAN 0 to HW filter on device bond17
[  104.332234][ T8646] team0: Port device bond17 added
[  104.452018][ T8652] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  104.493120][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'.
[  104.717719][ T8675] pim6reg1: entered promiscuous mode
[  104.719440][ T8675] pim6reg1: entered allmulticast mode
[  104.845869][ T8692] validate_nla: 11 callbacks suppressed
[  104.845881][ T8692] netlink: 'syz.0.763': attribute type 7 has an invalid length.
[  104.856486][ T8692] netlink: 'syz.0.763': attribute type 8 has an invalid length.
[  104.863177][ T8693] 8021q: adding VLAN 0 to HW filter on device bond10
[  104.868627][ T8693] team0: Port device bond10 added
[  104.921481][ T8699] netlink: 'syz.0.765': attribute type 5 has an invalid length.
[  104.952524][ T8702] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  104.956699][ T8702] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  105.109341][ T8713] netlink: 'syz.1.769': attribute type 10 has an invalid length.
[  105.112809][ T8713] dummy0: entered promiscuous mode
[  105.114755][ T8713] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  105.405978][ T8731] netlink: 'syz.1.773': attribute type 1 has an invalid length.
[  105.496611][ T8736] netlink: 'syz.0.777': attribute type 1 has an invalid length.
[  105.515403][ T8736] 8021q: adding VLAN 0 to HW filter on device bond18
[  105.617554][ T8747] netlink: 'syz.0.779': attribute type 6 has an invalid length.
[  105.737365][ T8754] openvswitch: netlink: Missing valid actions attribute.
[  105.739495][ T8754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.744978][ T8755] netlink: 'syz.0.780': attribute type 1 has an invalid length.
[  105.768291][ T8755] bond19: (slave gretap2): making interface the new active one
[  105.773151][ T8755] bond19: (slave gretap2): Enslaving as an active interface with an up link
[  105.777276][ T8754] IPVS: Scheduler module ip_vs_sip not found
[  105.858406][ T8762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  105.889630][ T8762] netlink: 'syz.0.782': attribute type 2 has an invalid length.
[  105.898700][ T8762] k*]: entered promiscuous mode
[  105.905612][ T8762] veth0_to_team: entered promiscuous mode
[  105.907621][ T8762] veth0_to_team: entered allmulticast mode
[  106.265666][ T8772] netlink: 'syz.1.785': attribute type 10 has an invalid length.
[  106.268269][ T8772] dummy0: entered allmulticast mode
[  106.273331][ T8772] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  106.410258][ T8775] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  106.887481][ T8797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.890254][ T8797] syzkaller0: entered promiscuous mode
[  106.892710][ T8797] syzkaller0: entered allmulticast mode
[  106.907951][ T8797] tipc: Resetting bearer <eth:syzkaller0>
[  106.913478][ T8796] tipc: Resetting bearer <eth:syzkaller0>
[  106.923901][ T8796] tipc: Disabling bearer <eth:syzkaller0>
[  107.087958][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  107.343818][ T8808] pim6reg1: entered promiscuous mode
[  107.345623][ T8808] pim6reg1: entered allmulticast mode
[  107.505707][ T8810] __nla_validate_parse: 17 callbacks suppressed
[  107.505721][ T8810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.796'.
[  107.527764][ T8810] 8021q: adding VLAN 0 to HW filter on device bond20
[  107.532476][ T8810] team0: Port device bond20 added
[  107.568919][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'.
[  107.578230][ T8814] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.582163][ T8814] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.585512][ T8814] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.588800][ T8814] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.593919][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'.
[  107.862163][   T51] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  107.873264][ T8798] delete_channel: no stack
[  107.928102][ T8817] pim6reg1: entered promiscuous mode
[  107.930337][ T8817] pim6reg1: entered allmulticast mode
[  107.988744][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.801'.
[  108.028293][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'.
[  108.047334][ T8832] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  108.060165][ T8826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.798'.
[  108.098265][ T8826] 8021q: adding VLAN 0 to HW filter on device bond11
[  108.104083][ T8826] team0: Port device bond11 added
[  108.223189][ T5874] hid-generic 0005:10CF:0009.0002: item fetching failed at offset 0/2
[  108.229999][ T8838] nbd: must specify a device to reconfigure
[  108.238274][ T5874] hid-generic 0005:10CF:0009.0002: probe with driver hid-generic failed with error -22
[  108.246157][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'.
[  108.255270][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'.
[  108.305119][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'.
[  108.385082][ T8855] netlink: 128 bytes leftover after parsing attributes in process `syz.0.809'.
[  108.438341][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.444876][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.458278][ T8855] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  108.461235][ T8855] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  108.818672][ T8890] lo speed is unknown, defaulting to 1000
[  108.821815][ T8890] lo speed is unknown, defaulting to 1000
[  108.826222][ T8893] lo speed is unknown, defaulting to 1000
[  108.920073][ T8893] lo speed is unknown, defaulting to 1000
[  109.458755][ T8910] syzkaller0: entered promiscuous mode
[  109.463591][ T8910] syzkaller0: entered allmulticast mode
[  110.602646][ T8937] bond0: (slave bond_slave_0): Releasing backup interface
[  110.607565][ T8937] bond0: (slave bond_slave_1): Releasing backup interface
[  110.655660][ T8937] team0: Port device team_slave_0 removed
[  110.674451][ T8937] team0: Port device team_slave_1 removed
[  110.676827][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.681681][ T8937] team0: Port device bond1 removed
[  110.688297][ T8937] team0: Port device bond2 removed
[  110.693389][ T8937] team0: Port device bond4 removed
[  110.696094][ T8937] team0: Port device bond5 removed
[  110.698742][ T8937] team0: Port device bond7 removed
[  110.705009][ T8937] team0: Port device bond8 removed
[  110.707691][ T8937] team0: Port device bond9 removed
[  110.715782][ T8937] team0: Port device bond10 removed
[  110.721546][ T8937] team0: Port device bond11 removed
[  110.769006][ T8954] validate_nla: 3 callbacks suppressed
[  110.769019][ T8954] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[  110.786333][ T8956] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.792000][ T8956] bond0: (slave rose0): Enslaving as an active interface with an up link
[  110.898844][ T8969] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  110.923332][ T8966] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  111.089701][ T8983] batadv0: entered promiscuous mode
[  111.322421][ T8982] batadv0: left promiscuous mode
[  111.409851][ T9013] lo speed is unknown, defaulting to 1000
[  111.416690][ T9013] lo speed is unknown, defaulting to 1000
[  111.545042][ T9019] lo speed is unknown, defaulting to 1000
[  111.547722][ T9019] lo speed is unknown, defaulting to 1000
[  111.776698][ T9031] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  111.875509][ T9037] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  112.007607][ T9045] netlink: 'syz.2.859': attribute type 2 has an invalid length.
[  112.010071][ T9045] netlink: 'syz.2.859': attribute type 1 has an invalid length.
[  112.124260][ T9053] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.132898][ T9054] sctp: [Deprecated]: syz.1.861 (pid 9054) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.132898][ T9054] Use struct sctp_sack_info instead
[  112.149656][ T9053] syzkaller0: entered promiscuous mode
[  112.151911][ T9053] syzkaller0: entered allmulticast mode
[  112.154058][ T9053] tipc: Resetting bearer <eth:syzkaller0>
[  112.158136][ T9053] netlink: 'syz.2.862': attribute type 3 has an invalid length.
[  112.162833][ T9052] tipc: Resetting bearer <eth:syzkaller0>
[  113.318710][ T9052] tipc: Disabling bearer <eth:syzkaller0>
[  113.713934][ T9092] sctp: [Deprecated]: syz.1.869 (pid 9092) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.713934][ T9092] Use struct sctp_sack_info instead
[  113.843579][ T9099] pim6reg1: entered promiscuous mode
[  113.845369][ T9099] pim6reg1: entered allmulticast mode
[  113.908864][ T9100] __nla_validate_parse: 26 callbacks suppressed
[  113.908878][ T9100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.872'.
[  113.938601][ T9100] 8021q: adding VLAN 0 to HW filter on device bond10
[  113.943906][ T9100] team0: Port device bond10 added
[  113.945711][ T9103] netlink: 104 bytes leftover after parsing attributes in process `syz.0.873'.
[  114.007316][ T9106] netlink: 172 bytes leftover after parsing attributes in process `syz.0.875'.
[  114.119707][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'.
[  114.182571][ T9114] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  114.380859][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'.
[  114.383982][ T9117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.390428][ T9117] netlink: 128 bytes leftover after parsing attributes in process `syz.2.877'.
[  114.395239][ T9117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'.
[  114.889292][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'.
[  114.901053][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'.
[  114.904285][ T9125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.938148][ T9131] syzkaller1: entered promiscuous mode
[  114.940221][ T9131] syzkaller1: entered allmulticast mode
[  114.964002][ T9133] IPVS: set_ctl: invalid protocol: 58 172.30.0.2:20002
[  114.966213][ T9134] IPVS: set_ctl: invalid protocol: 58 172.30.0.2:20002
[  114.970908][ T9133] netlink: 84 bytes leftover after parsing attributes in process `syz.1.882'.
[  115.134358][ T9152] netlink: 'syz.0.890': attribute type 13 has an invalid length.
[  115.139206][ T9152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.219089][ T9160] netlink: 'syz.1.892': attribute type 13 has an invalid length.
[  115.222328][ T9160] netlink: 'syz.1.892': attribute type 17 has an invalid length.
[  115.239553][ T9160] erspan0: left allmulticast mode
[  115.258377][ T9160] dummy0: left promiscuous mode
[  115.260055][ T9160] dummy0: left allmulticast mode
[  115.263229][ T9160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.340209][ T9157] lo speed is unknown, defaulting to 1000
[  115.346148][ T9157] lo speed is unknown, defaulting to 1000
[  115.479156][ T6074] IPVS: starting estimator thread 0...
[  115.490233][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.497284][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.571712][ T9177] IPVS: using max 62 ests per chain, 148800 per kthread
[  115.784731][ T9189] netlink: 'syz.0.900': attribute type 1 has an invalid length.
[  115.883216][ T9197] IPVS: set_ctl: invalid protocol: 27 100.1.1.0:20001
[  116.096418][ T9224] IPv6: sit1: Disabled Multicast RS
[  116.098584][ T9224] sit1: entered allmulticast mode
[  116.181133][ T9233] netlink: 'syz.2.911': attribute type 10 has an invalid length.
[  116.197141][ T9233] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.200533][ T9233] team0: Port device bond0 added
[  116.234123][ T9238] netlink: 'syz.1.917': attribute type 1 has an invalid length.
[  116.257154][ T9238] 8021q: adding VLAN 0 to HW filter on device bond11
[  116.267822][ T9238] bond11: (slave gretap3): making interface the new active one
[  116.273699][ T9238] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  116.290258][ T9238] syz.1.917 (9238) used greatest stack depth: 18696 bytes left
[  116.317430][ T9245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.422928][   T53] Bluetooth: hci2: link tx timeout
[  116.426705][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  116.434540][ T9253] netlink: 'syz.1.921': attribute type 13 has an invalid length.
[  116.437047][ T9253] netlink: 'syz.1.921': attribute type 17 has an invalid length.
[  116.443884][ T9253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.468712][ T9253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.524830][ T9253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.533991][   T53] Bluetooth: hci2: link tx timeout
[  116.535994][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  117.208024][ T9266] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  117.215810][ T9270] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  117.285750][ T9278] netlink: 'syz.0.925': attribute type 3 has an invalid length.
[  117.292399][ T9279] netlink: 'syz.0.925': attribute type 3 has an invalid length.
[  117.818664][ T9292] vxcan2: entered promiscuous mode
[  118.105605][ T9316] netlink: 'syz.1.935': attribute type 1 has an invalid length.
[  118.108149][ T9317] netlink: 'syz.1.935': attribute type 1 has an invalid length.
[  118.138794][ T9317] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  118.148307][ T9317] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  118.365279][ T9343] ipt_ECN: cannot use operation on non-tcp rule
[  118.392528][ T9343] syzkaller0: entered allmulticast mode
[  118.406845][ T9343] syzkaller0 (unregistering): left allmulticast mode
[  118.512855][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  118.570503][ T9358] netlink: 'syz.2.949': attribute type 4 has an invalid length.
[  118.580837][ T9360] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  118.686909][ T9365] lo speed is unknown, defaulting to 1000
[  118.700658][ T9369] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  118.718582][ T9371] syzkaller0: entered promiscuous mode
[  118.720331][ T9371] syzkaller0: entered allmulticast mode
[  118.743363][ T9365] lo speed is unknown, defaulting to 1000
[  118.927356][ T9379] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  119.980391][ T9380] veth0_to_bridge: left allmulticast mode
[  119.982924][ T9380] veth0_to_bridge: left promiscuous mode
[  119.984830][ T9380] bridge0: port 1(veth0_to_bridge) entered disabled state
[  120.003381][ T9380] team0: Port device geneve0 removed
[  120.010138][ T9380] team0: Port device bond5 removed
[  120.022921][ T9380] team0: Port device bond6 removed
[  120.026407][ T9380] team0: Port device bond7 removed
[  120.032896][ T9380] team0: Port device bond10 removed
[  120.041098][ T9380] bond11: (slave gretap3): Releasing active interface
[  120.085555][ T9387] __nla_validate_parse: 31 callbacks suppressed
[  120.085569][ T9387] netlink: 104 bytes leftover after parsing attributes in process `syz.1.959'.
[  120.113779][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'.
[  120.159088][ T9394] trusted_key: syz.1.961 sent an empty control message without MSG_MORE.
[  120.162988][ T9392] bond0: Error: Cannot enslave bond to itself.
[  120.206184][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'.
[  120.209014][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.963'.
[  120.244956][ T9400] pim6reg1: entered promiscuous mode
[  120.246615][ T9400] pim6reg1: entered allmulticast mode
[  120.349207][ T9400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.964'.
[  120.371870][ T9400] 8021q: adding VLAN 0 to HW filter on device bond13
[  120.374942][ T9400] team0: Port device bond13 added
[  120.386726][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.965'.
[  120.583029][ T9417] lo speed is unknown, defaulting to 1000
[  120.585725][ T9417] lo speed is unknown, defaulting to 1000
[  120.913997][ T9424] validate_nla: 3 callbacks suppressed
[  120.914017][ T9424] netlink: 'syz.1.970': attribute type 13 has an invalid length.
[  120.928581][ T9424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.970'.
[  120.938695][ T9424] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  120.946063][ T9424] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  120.965527][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.970'.
[  121.107450][ T9440] netlink: 104 bytes leftover after parsing attributes in process `syz.2.974'.
[  121.192575][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'.
[  121.195568][ T9449] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  121.197958][ T9449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.255717][ T9451] lo speed is unknown, defaulting to 1000
[  121.258371][ T9451] lo speed is unknown, defaulting to 1000
[  121.527159][ T9465] pimreg: left allmulticast mode
[  121.592099][ T9476] rdma_rxe: rxe_newlink: failed to add lo
[  121.622613][ T9476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  121.797103][ T9485] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  121.800096][ T9485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.903452][ T9493] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  121.975866][ T9498] bond8: (slave erspan0): Releasing active interface
[  121.989640][ T9498] team0: Port device team_slave_0 removed
[  121.998644][ T9498] team0: Port device team_slave_1 removed
[  122.003065][ T9498] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.006762][ T9498] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.015046][ T9498] bond1: (slave bond2): Releasing backup interface
[  122.017341][ T9498] bond1: (slave bond2): the permanent HWaddr of slave - 96:d6:be:c0:8c:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  122.025439][ T9498] bond1: (slave gretap1): making interface the new active one
[  122.035214][ T9498] bond1: (slave gretap1): Releasing backup interface
[  122.039145][ T9498] team0: Port device bond3 removed
[  122.044548][ T9498] team0: Port device bond5 removed
[  122.047331][ T9498] team0: Port device bond6 removed
[  122.049655][ T9498] bond7: (slave geneve2): Releasing active interface
[  122.052763][ T9498] geneve2: left promiscuous mode
[  122.056073][ T9498] team0: Port device bond0 removed
[  122.059041][ T9498] bond8: (slave ip6gretap1): Releasing active interface
[  122.062180][ T9498] bond8: (slave ip6gretap1): the permanent HWaddr of slave - f2:85:19:9c:96:30 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  122.067078][ T9498] ip6gretap1: left promiscuous mode
[  122.069997][ T9498] bond8: (slave veth7): Releasing active interface
[  122.076026][ T9498] team0: Port device bond9 removed
[  122.082336][ T9498] team0: Port device bond15 removed
[  122.087093][ T9498] team0: Port device bond16 removed
[  122.090474][ T9498] team0: Port device bond17 removed
[  122.094209][ T9498] bond19: (slave gretap2): Releasing active interface
[  122.103656][ T9498] team0: Port device bond20 removed
[  122.116813][ T9495] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.147006][ T9495] syzkaller0: entered promiscuous mode
[  122.148750][ T9495] syzkaller0: entered allmulticast mode
[  123.237843][ T9513] netlink: 'syz.0.997': attribute type 1 has an invalid length.
[  123.242674][ T9495] tipc: Resetting bearer <eth:syzkaller0>
[  123.259633][ T9494] tipc: Resetting bearer <eth:syzkaller0>
[  123.271562][ T9494] tipc: Disabling bearer <eth:syzkaller0>
[  123.435680][ T9541] netlink: 'syz.0.1000': attribute type 1 has an invalid length.
[  123.439445][ T9541] netlink: 'syz.0.1000': attribute type 2 has an invalid length.
[  123.642387][ T9559] team0: Port device sit2 added
[  123.668497][ T9561] ipt_ECN: cannot use operation on non-tcp rule
[  123.762717][ T9571] ipt_ECN: cannot use operation on non-tcp rule
[  123.826216][ T9577] syzkaller0: entered allmulticast mode
[  123.959628][ T9570] syzkaller0: left allmulticast mode
[  124.008726][ T9586] pim6reg1: entered promiscuous mode
[  124.011397][ T9586] pim6reg1: entered allmulticast mode
[  124.175015][ T9586] 8021q: adding VLAN 0 to HW filter on device bond12
[  124.190106][ T9586] team0: Port device bond12 added
[  124.198776][ T9601] sctp: [Deprecated]: syz.1.1019 (pid 9601) Use of struct sctp_assoc_value in delayed_ack socket option.
[  124.198776][ T9601] Use struct sctp_sack_info instead
[  124.254844][ T9605] lo speed is unknown, defaulting to 1000
[  124.257714][ T9605] lo speed is unknown, defaulting to 1000
[  124.333193][ T9611] syz_tun: entered allmulticast mode
[  124.361423][ T9609] syz_tun: left allmulticast mode
[  124.561856][ T9624] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002
[  125.252805][ T9629] __nla_validate_parse: 24 callbacks suppressed
[  125.252817][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'.
[  125.328949][ T9634] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1031'.
[  125.336660][ T9631] pim6reg1: entered promiscuous mode
[  125.338334][ T9631] pim6reg1: entered allmulticast mode
[  125.352315][ T9635] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1030'.
[  125.396766][ T9631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1029'.
[  125.438515][ T9631] team0: Device bond22 is of different type
[  125.446179][ T9631] bond22 (unregistering): Released all slaves
[  125.456572][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'.
[  125.460492][ T9644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.547772][ T9646] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1033'.
[  125.685959][ T9652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1036'.
[  125.713386][ T9653] netlink: 'syz.0.1034': attribute type 1 has an invalid length.
[  125.715964][ T9653] netlink: 'syz.0.1034': attribute type 1 has an invalid length.
[  125.856525][ T9661] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1040'.
[  126.322219][ T9668] netlink: 'syz.1.1042': attribute type 13 has an invalid length.
[  126.324551][ T9668] netlink: 'syz.1.1042': attribute type 17 has an invalid length.
[  126.337386][ T9668] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.495411][ T9677] netlink: 'syz.0.1045': attribute type 11 has an invalid length.
[  126.498350][ T9677] netlink: 'syz.0.1045': attribute type 4 has an invalid length.
[  126.502161][ T9677] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1045'.
[  126.577688][ T9686] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'.
[  126.968783][ T9723] netlink: 'syz.1.1057': attribute type 1 has an invalid length.
[  126.977765][ T9723] netlink: 'syz.1.1057': attribute type 1 has an invalid length.
[  127.464797][ T9693] ==================================================================
[  127.467324][ T9693] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  127.469698][ T9693] Read of size 1 at addr ffff88810dcbd832 by task syz.0.1049/9693
[  127.472870][ T9693] 
[  127.473637][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.0.1049 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  127.473650][ T9693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.473657][ T9693] Call Trace:
[  127.473663][ T9693]  <TASK>
[  127.473679][ T9693]  dump_stack_lvl+0x189/0x250
[  127.473695][ T9693]  ? __virt_addr_valid+0x1c8/0x5c0
[  127.473709][ T9693]  ? rcu_is_watching+0x15/0xb0
[  127.473721][ T9693]  ? __kasan_check_byte+0x12/0x40
[  127.473734][ T9693]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.473743][ T9693]  ? rcu_is_watching+0x15/0xb0
[  127.473751][ T9693]  ? lock_release+0x4b/0x3e0
[  127.473760][ T9693]  ? __virt_addr_valid+0x1c8/0x5c0
[  127.473770][ T9693]  ? __virt_addr_valid+0x4a5/0x5c0
[  127.473780][ T9693]  print_report+0xca/0x230
[  127.473788][ T9693]  ? rose_transmit_link+0x5c3/0x740
[  127.473796][ T9693]  kasan_report+0x118/0x150
[  127.473806][ T9693]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  127.473819][ T9693]  ? rose_transmit_link+0x5c3/0x740
[  127.473849][ T9693]  rose_transmit_link+0x5c3/0x740
[  127.473858][ T9693]  ? skb_put+0x11b/0x210
[  127.473874][ T9693]  rose_write_internal+0x11dc/0x1ac0
[  127.473888][ T9693]  ? __pfx_rose_write_internal+0x10/0x10
[  127.473899][ T9693]  ? __timer_delete+0x5d/0x390
[  127.473913][ T9693]  rose_release+0x24e/0x520
[  127.473927][ T9693]  sock_close+0xc3/0x240
[  127.473937][ T9693]  ? __pfx_sock_close+0x10/0x10
[  127.473945][ T9693]  __fput+0x44c/0xa70
[  127.473956][ T9693]  task_work_run+0x1d4/0x260
[  127.473969][ T9693]  ? __pfx_task_work_run+0x10/0x10
[  127.473980][ T9693]  ? task_work_add+0x377/0x420
[  127.473991][ T9693]  ? __pfx_task_work_add+0x10/0x10
[  127.474003][ T9693]  get_signal+0x11ed/0x1340
[  127.474016][ T9693]  arch_do_signal_or_restart+0x9a/0x750
[  127.474030][ T9693]  ? __pfx___sys_connect+0x10/0x10
[  127.474040][ T9693]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  127.474055][ T9693]  ? exit_to_user_mode_loop+0x40/0x110
[  127.474064][ T9693]  exit_to_user_mode_loop+0x75/0x110
[  127.474072][ T9693]  do_syscall_64+0x2bd/0x3b0
[  127.474082][ T9693]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.474090][ T9693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.474098][ T9693]  ? exc_page_fault+0x9f/0xf0
[  127.474106][ T9693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.474114][ T9693] RIP: 0033:0x7f4ffa18e9a9
[  127.474124][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.474133][ T9693] RSP: 002b:00007f4ffaf9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  127.474143][ T9693] RAX: fffffffffffffe00 RBX: 00007f4ffa3b5fa0 RCX: 00007f4ffa18e9a9
[  127.474149][ T9693] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000c
[  127.474156][ T9693] RBP: 00007f4ffa210d69 R08: 0000000000000000 R09: 0000000000000000
[  127.474162][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.474168][ T9693] R13: 0000000000000000 R14: 00007f4ffa3b5fa0 R15: 00007ffd1c1b06b8
[  127.474178][ T9693]  </TASK>
[  127.474181][ T9693] 
[  127.568226][ T9693] Allocated by task 9693:
[  127.569553][ T9693]  kasan_save_track+0x3e/0x80
[  127.570994][ T9693]  __kasan_kmalloc+0x93/0xb0
[  127.572520][ T9693]  __kmalloc_cache_noprof+0x230/0x3d0
[  127.574269][ T9693]  rose_add_node+0x23a/0xde0
[  127.575724][ T9693]  rose_rt_ioctl+0xa48/0xfb0
[  127.577183][ T9693]  rose_ioctl+0x3ce/0x8b0
[  127.578576][ T9693]  sock_do_ioctl+0xdc/0x300
[  127.580039][ T9693]  sock_ioctl+0x576/0x790
[  127.581421][ T9693]  __se_sys_ioctl+0xfc/0x170
[  127.582924][ T9693]  do_syscall_64+0xfa/0x3b0
[  127.584369][ T9693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.586293][ T9693] 
[  127.587108][ T9693] Freed by task 9709:
[  127.588408][ T9693]  kasan_save_track+0x3e/0x80
[  127.589903][ T9693]  kasan_save_free_info+0x46/0x50
[  127.591494][ T9693]  __kasan_slab_free+0x62/0x70
[  127.593025][ T9693]  kfree+0x18e/0x440
[  127.594325][ T9693]  rose_rt_device_down+0x473/0x4c0
[  127.596007][ T9693]  rose_device_event+0x603/0x6a0
[  127.597626][ T9693]  notifier_call_chain+0x1b6/0x3e0
[  127.599301][ T9693]  __dev_notify_flags+0x18d/0x2e0
[  127.600957][ T9693]  netif_change_flags+0xe8/0x1a0
[  127.602578][ T9693]  dev_change_flags+0x130/0x260
[  127.604196][ T9693]  dev_ioctl+0x7b4/0x1150
[  127.605609][ T9693]  sock_do_ioctl+0x22c/0x300
[  127.607131][ T9693]  sock_ioctl+0x576/0x790
[  127.608560][ T9693]  __se_sys_ioctl+0xfc/0x170
[  127.610091][ T9693]  do_syscall_64+0xfa/0x3b0
[  127.611587][ T9693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.613527][ T9693] 
[  127.614328][ T9693] The buggy address belongs to the object at ffff88810dcbd800
[  127.614328][ T9693]  which belongs to the cache kmalloc-512 of size 512
[  127.618792][ T9693] The buggy address is located 50 bytes inside of
[  127.618792][ T9693]  freed 512-byte region [ffff88810dcbd800, ffff88810dcbda00)
[  127.623048][ T9693] 
[  127.623857][ T9693] The buggy address belongs to the physical page:
[  127.625904][ T9693] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dcbc
[  127.628716][ T9693] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  127.631444][ T9693] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  127.634063][ T9693] page_type: f5(slab)
[  127.635387][ T9693] raw: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  127.638170][ T9693] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  127.640875][ T9693] head: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  127.643640][ T9693] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  127.646425][ T9693] head: 057ff00000000002 ffffea0004372f01 00000000ffffffff 00000000ffffffff
[  127.649092][ T9693] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  127.651798][ T9693] page dumped because: kasan: bad access detected
[  127.653781][ T9693] page_owner tracks the page as allocated
[  127.655614][ T9693] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 54486150729, free_ts 54476382645
[  127.662214][ T9693]  post_alloc_hook+0x240/0x2a0
[  127.663687][ T9693]  get_page_from_freelist+0x21e4/0x22c0
[  127.665487][ T9693]  __alloc_frozen_pages_noprof+0x181/0x370
[  127.667406][ T9693]  alloc_pages_mpol+0x232/0x4a0
[  127.668890][ T9693]  allocate_slab+0x8a/0x3b0
[  127.670397][ T9693]  ___slab_alloc+0xbfc/0x1480
[  127.671941][ T9693]  __kmalloc_cache_noprof+0x296/0x3d0
[  127.673705][ T9693]  __ipv6_dev_mc_inc+0x420/0xaf0
[  127.675442][ T9693]  addrconf_dad_work+0x3d0/0x14b0
[  127.677008][ T9693]  process_scheduled_works+0xae1/0x17b0
[  127.678733][ T9693]  worker_thread+0x8a0/0xda0
[  127.680188][ T9693]  kthread+0x711/0x8a0
[  127.681481][ T9693]  ret_from_fork+0x3fc/0x770
[  127.682942][ T9693]  ret_from_fork_asm+0x1a/0x30
[  127.684443][ T9693] page last free pid 36 tgid 36 stack trace:
[  127.686296][ T9693]  __free_frozen_pages+0xc71/0xe70
[  127.687910][ T9693]  stack_depot_save_flags+0x445/0x900
[  127.689536][ T9693]  kasan_save_track+0x4f/0x80
[  127.691030][ T9693]  __kasan_kmalloc+0x93/0xb0
[  127.692454][ T9693]  __kmalloc_noprof+0x27a/0x4f0
[  127.693911][ T9693]  switchdev_deferred_enqueue+0x2d/0x240
[  127.695635][ T9693]  br_set_state+0x356/0x710
[  127.697056][ T9693]  br_stp_enable_port+0x9a/0x250
[  127.698558][ T9693]  br_port_carrier_check+0x301/0x3f0
[  127.700188][ T9693]  br_device_event+0x5fa/0x910
[  127.701690][ T9693]  notifier_call_chain+0x1b6/0x3e0
[  127.703272][ T9693]  netif_state_change+0x284/0x3a0
[  127.704777][ T9693]  linkwatch_do_dev+0x117/0x170
[  127.706256][ T9693]  __linkwatch_run_queue+0x56d/0x7e0
[  127.707864][ T9693]  linkwatch_event+0x4c/0x60
[  127.709258][ T9693]  process_scheduled_works+0xae1/0x17b0
[  127.710892][ T9693] 
[  127.711617][ T9693] Memory state around the buggy address:
[  127.713339][ T9693]  ffff88810dcbd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  127.715816][ T9693]  ffff88810dcbd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  127.718268][ T9693] >ffff88810dcbd800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.720648][ T9693]                                      ^
[  127.722327][ T9693]  ffff88810dcbd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.724734][ T9693]  ffff88810dcbd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.727210][ T9693] ==================================================================
[  127.746630][ T9693] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  127.748942][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.0.1049 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  127.752652][ T9693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.755674][ T9693] Call Trace:
[  127.756717][ T9693]  <TASK>
[  127.757635][ T9693]  dump_stack_lvl+0x99/0x250
[  127.759021][ T9693]  ? __asan_memcpy+0x40/0x70
[  127.760446][ T9693]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.762081][ T9693]  ? __pfx__printk+0x10/0x10
[  127.763475][ T9693]  panic+0x2db/0x790
[  127.764648][ T9693]  ? __pfx_preempt_schedule+0x10/0x10
[  127.766279][ T9693]  ? __pfx_panic+0x10/0x10
[  127.767665][ T9693]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  127.769462][ T9693]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.771380][ T9693]  ? rose_transmit_link+0x5c3/0x740
[  127.772945][ T9693]  check_panic_on_warn+0x89/0xb0
[  127.774431][ T9693]  ? rose_transmit_link+0x5c3/0x740
[  127.776017][ T9693]  end_report+0x78/0x160
[  127.777369][ T9693]  kasan_report+0x129/0x150
[  127.778772][ T9693]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  127.780776][ T9693]  ? rose_transmit_link+0x5c3/0x740
[  127.782462][ T9693]  rose_transmit_link+0x5c3/0x740
[  127.784033][ T9693]  ? skb_put+0x11b/0x210
[  127.785435][ T9693]  rose_write_internal+0x11dc/0x1ac0
[  127.787177][ T9693]  ? __pfx_rose_write_internal+0x10/0x10
[  127.789017][ T9693]  ? __timer_delete+0x5d/0x390
[  127.790576][ T9693]  rose_release+0x24e/0x520
[  127.792072][ T9693]  sock_close+0xc3/0x240
[  127.793414][ T9693]  ? __pfx_sock_close+0x10/0x10
[  127.794934][ T9693]  __fput+0x44c/0xa70
[  127.796185][ T9693]  task_work_run+0x1d4/0x260
[  127.797640][ T9693]  ? __pfx_task_work_run+0x10/0x10
[  127.799288][ T9693]  ? task_work_add+0x377/0x420
[  127.800787][ T9693]  ? __pfx_task_work_add+0x10/0x10
[  127.802402][ T9693]  get_signal+0x11ed/0x1340
[  127.803863][ T9693]  arch_do_signal_or_restart+0x9a/0x750
[  127.805610][ T9693]  ? __pfx___sys_connect+0x10/0x10
[  127.807213][ T9693]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  127.809155][ T9693]  ? exit_to_user_mode_loop+0x40/0x110
[  127.810886][ T9693]  exit_to_user_mode_loop+0x75/0x110
[  127.812540][ T9693]  do_syscall_64+0x2bd/0x3b0
[  127.813995][ T9693]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.815624][ T9693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.817572][ T9693]  ? exc_page_fault+0x9f/0xf0
[  127.819094][ T9693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.820949][ T9693] RIP: 0033:0x7f4ffa18e9a9
[  127.822356][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.828457][ T9693] RSP: 002b:00007f4ffaf9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  127.830994][ T9693] RAX: fffffffffffffe00 RBX: 00007f4ffa3b5fa0 RCX: 00007f4ffa18e9a9
[  127.833370][ T9693] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000c
[  127.835736][ T9693] RBP: 00007f4ffa210d69 R08: 0000000000000000 R09: 0000000000000000
[  127.838147][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.840546][ T9693] R13: 0000000000000000 R14: 00007f4ffa3b5fa0 R15: 00007ffd1c1b06b8
[  127.842949][ T9693]  </TASK>
[  127.844439][ T9693] Kernel Offset: disabled
[  127.845750][ T9693] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:08:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001450 RDI=0000000000001451 RBP=00000000000003f8 RSP=ffffc900017af210
R8 =ffff888021230237 R9 =1ffff11004246046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18c0 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4ffaf9e6c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcc7ff74a00 CR3=000000002a704000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcc80186478 00007fcc80186450 XMM03=00007fcc80186488 00007fcc80186480
XMM04=00007fcc80ced100 00007fcc80186440 XMM05=00007fcc80186458 00007fcc801864a0
XMM06=00007fcc80186498 00007fcc80186490 XMM07=00007fcc80186488 00007fcc80186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fcc80011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33643cc RBX=dffffc0000000000 RCX=ffff888022489cc0 RDX=0000000000000000
RSI=000000000000508e RDI=0000000000000000 RBP=ffff888102192c54 RSP=ffffc9000b117270
R8 =ffff888102192c17 R9 =1ffff11020432582 R10=dffffc0000000000 R11=ffffed1020432583
R12=000000000012508e R13=0000000000002628 R14=0000000000000000 R15=000000000012508e
RIP=ffffffff822b901b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcc7ddd56c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fe5ffff CR3=000000002fcac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcc80186478 00007fcc80186450 XMM03=00007fcc80186488 00007fcc80186480
XMM04=00007fcc80ced100 00007fcc80186440 XMM05=00007fcc80186458 00007fcc801864a0
XMM06=00007fcc80186498 00007fcc80186490 XMM07=00007fcc80186488 00007fcc80186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fcc80011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
