last executing test programs:

2.717181249s ago: executing program 1 (id=1032):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x74, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x80d1}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58)
r3 = accept4$rose(r0, 0x0, &(0x7f0000000000), 0x80000)
syz_emit_ethernet(0x82, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESDEC=r3], 0x0)

2.58715864s ago: executing program 1 (id=1035):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xa5c, 0x4)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000300)={0x42, {{0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {{0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}}}, 0x108)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xe0, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xcc, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4811}, 0x0)

2.584776638s ago: executing program 1 (id=1036):
r0 = socket$kcm(0x10, 0xc, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000120012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @null, 0x4, 0x2, [@bcast, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r1) (async)
socket(0x1f, 0x4, 0x21a1)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8200, 0x5, 0x10001}, &(0x7f00000000c0)=0x10)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001280)={&(0x7f0000000180)="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", &(0x7f0000000040)=""/176, &(0x7f0000001180)="772b82671e0a3d053660084b3ec7549f18e7a80dadfa40593284ed15a4b008d7c33f57bbd691aee8816cf9f5bff546f3dc71dcf7608eb7ccc843e457d3c5b26b4d83f5fc8950f6ff75ffcd29b7f18cb7489564a88824d3d3b16adad32142b82f45400e1c1c86d361b357224e022f965959bb9cf9ac6414250f467471ab80570b6d7b7ee5adec0db114d5c0c186455db21a9eb860d44aabca0ef4354a8e4a3726ba20eb3c87b8682a4cb964a0c134b5a25267c9ab960a75baac3536ea86ddaf3dbbb5cd372d43da6fcf0ff676080751d5762aa3a7a45759a80661a180dcca17", &(0x7f0000001b80)="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", 0x6, r3, 0x4}, 0x38)

2.509167912s ago: executing program 1 (id=1038):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000104050000000000000000000a00000005000100d0"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0200"], 0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={<r5=>r3, 0xfffffffffffffffc, 0x1, 0x101})
ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000280)=0x1)

2.506551651s ago: executing program 1 (id=1040):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
splice(r2, 0x0, r3, 0x0, 0x10d00, 0xf)
write$cgroup_freezer_state(r2, &(0x7f0000000180)='THAWED\x00', 0x7)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000000a0017"], 0x14}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x1ca, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x27c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x4, 0x0, 0x0, 0x11}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x101}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1fc054c026eb723f2c54c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x2ac}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x490, 0x4)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x3f, 0x0, &(0x7f0000000040)=0x60)
r8 = socket$igmp6(0xa, 0x3, 0x2)
writev(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)="bb02567671ac44fc30905bcb0b139bd8bf242b1116bb5e1c0bbbcf7f9d8fe1088bd58875c84ed8fa1e2c10d229edcf36f011516c27e048652ed969af9b0850103d9701e19cb67330ebe1e28c97cd1e88e46e", 0x52}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000007000000000000000000000095"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x61780, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

2.228365782s ago: executing program 1 (id=1046):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001600010028bd7000fcdbdf250a0160fd", @ANYRES32=r3, @ANYBLOB="14000200fe88000000000000000000feffffff61"], 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x8010)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100), 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x84, &(0x7f0000000000), 0x90)
sendmsg$inet(r5, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000012c0)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x1034, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000020bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e024334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd617545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d36c309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x8, &(0x7f0000001880)="a67b41f72343a99f322f0fb564e171f0c42be53969913926180b2a1991b4e25747ff23212ddf3193d13e", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x24)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x4, @empty}}, 0x0, 0x0, 0x31, 0x0, "c3da20ec5639f8e90dbde958a5fbc4680a2e6b3780e3eff5349c6f3fa97d2fe87dda601fcd2d6335ebe599c5b28e5f9d933982070c167a0a3cde4aa29011bf804d512e3bd653489eab732bf8dc69b499"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r11, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r12, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)

2.028948519s ago: executing program 0 (id=1047):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async)
unshare(0x6a040000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000ffffff7f000000007c0000040042800c00018006000600800a00000c0002ffb71ae63151dd31707260d48d52"], 0x30}, 0x1, 0x0, 0x0, 0x2400c011}, 0xc000) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x6, 0x0, 0x8100, 0x0, {0x2}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000001140)=[{0x0}, {&(0x7f0000002200)=""/157, 0x9d}], 0x2}, 0x4}], 0x1, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x2, 0x3, 0xff)
connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)="7ca96e1548a71479959840a77cbef04000000037", 0x14}], 0x1}}], 0x1, 0x24004810)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000f40000000030900020073797a31000000000900010073797a3000000000080005400000002108030000000a03000000000000000000020000010800024000000002d700060075afda6e8429763a64f8bec5e6b175f7206d0675d6eddb125d11d232de7bf518f505e91ff4aec050dc0fa5f5ddaac55b8c59cef61314b58c0a6e4f35dec39406db8beac7adf1efee1555b1d6c72fea2592021a6051feb695cf8f38d4b789cd582dda450f0154f33074deac4b7beaf28be49e464e4585ea4e7ef87c35048d726794af6c6f025798955797c00be260d3f580b80598d5591b884930e4f7cb05fdf089760c8d1698a83511cff4eb4292f84d794a8c4a457d0104ea1f1467f15608791b1b0bfe89c9c4d174dfb73ca62eb9e40da273000c00044000000000000000050c00044000000000000000010900010073797a310000000069000600247ea7f32baca86292ab02f958d9534f0925d3e497c12d1b96626c49534ef22b649442704af3d628a6214a5c7a79fa1eff2cf8d645296b8b660b1e99ed0cbc21b358e5f036ce664f3b97ec22c2bd16b2d2dc19261b9f896411205e90723d293199d0c3ebc3000000e6000600b9fd7ca622e9912b1ae07a26a138bb0b63286d5f24f10f0bd2bce08bbe3b28eb33297053448021993776de5561453b1a03693a1d0e96f4feec3162e60e76d42fe5a1c93f949a7c2167b9fd69406d8373046e4202dd9619780b2f9c70064f05357e0bf4112c9e43bcba3e424aa9a50964dacc824721dac0a389ce2b920e6ecc8b917f92f11a0647f3aea0e1fec759dcbe3365ef4916aaecf2732744879cfbf6c6c80a06c61dfad1b77759a0aced0577c31675e54e2ceeb67aa988314cb7428ac4b14b5a95777188a1c4042f434a8898a20bc3ad50748bb4ba9e196a503422c36020a7000008000240000000018b0006006fe3e88af87c16fdac6c73a35f06221897b6c246fe50bc0fe9f9bd5004af2703f17c0fc5a4892bb2ad041d2ed40168118c53d2b260e7e161d668690084778cf767675935ada4a6c5133425da42f58f5301ca0085e21341e239ae3d61f9c2e7bb2990935011f1f6f2d121c93adca0dfb45204328a4aece9dce7ecf14190191c514357b188923ab20008000240000000011400000010"], 0x38c}}, 0x8001) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r5, 0x4000, r5}, 0x18) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000480)=r5, 0x4) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x44805) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000240)={'wg1\x00'})

1.979435101s ago: executing program 0 (id=1049):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002c80)={0x2c, 0xd, 0xa, 0xe01, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @connlimit={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS]}}}]}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "0f932c79038dcb5f9d528839ffb89386cd27634e5666703257860f7faa9f94b47ea3963c8c8e3ae6e03ea3a61b8de8bdba382b2d3c845c201810bdeec7cd86f49a8f59ec262042328c7b91ad9970ec15761c4405243899bc96eff29039b9119b2235c0997e4b60ba7c0b26bc4ba55c744f457604ddfb9d7bcefbf196e5e2df8916e8d39a3ab8a9a9af788f49a8aebdb7282da155e7105ca916e44deddc3d077427c93da9b8c712d9d2ab40c644c40a47ff7841ecd4da934511c64edc4d29ec6af985dd877208"}, @NFTA_DATA_VALUE={0x0, 0x1, "6344bb5644e53eb46a0d4e8b790f28d52cfd323d983a244ed1570837632bae8e9aea65fa8d487672cd8f979933c5c8c3b8c57fce4389cfcea92773d8b52e5bb08619eadcdbfe70b16247725b163a297819ae64b28af8ced2ab0c9895c815e9053226d03fcb3713a6d82fd7"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "5a23056fa730c5c3b7986455a43edca6060273c11e2eb2461fc364529a45b1a59918063457f1f3e4f3a0c5bb1fcd9b5c03182de0c1c77068bd85ee4b08773ff15ef35ba0ceb338d8cbdaa8399992b6e3e3c7f44fc713ad7ee3caabec61d7f0f9d09e23b65e4d6b386e41df771d08d8ff8077452806531c0514f7f7b0da252e9f1b9f521eff969913a5803b7fed0a9f7adbeddb79ce04a8b913eeeb63d62a83baed0fbfd791bdfbe873feb858f734bf9e870ea3f2952d5b027891387ff0d3caf479d7eb977bb029b209404c1ca4f848"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x4}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "a6c19ab54fefe848bf41d9f16f2ff9a1e5fb7f30867fda83c3195b838e0ff762b6a212b412385b3e677700cca8f034fee7779776f8d0cf5a8b9ca5db9ab19dd2647a6eb3236b59f582a1b49115f6f184ee582227f23a0db2eb619b115b9c9d5772516c2f7bc8e8812ff12be3a12e1a4a30145e495a960fc6b494ac2b62464427eeb0a570599fb037de905e91a1311bf5fe0deba2af1bafd64a52e989032a7959ba4989ecce4cb18fd7e6517f0f6a8f5b90717fa4c531dc6d5ad2da12aecceb0f04c25ad548a8bcfe3b5c680365bb"}, @NFTA_DATA_VALUE={0x0, 0x1, "5fa93d979c474e9373338925bce1aec3650b9fdcf54ca38a8a27532bc43152ee461152bf0c0b2d7ba769ad2c4406074d18daec8a3be0b00d6e0607abb8c73014a90b06119428877e66f5c4d4bd0b287ec7ebb1bb81dc87082463eeee5179c5abee19cbfa7f5944f4918a66a1f1bea852150e776d22a878c3643a6065299d830ec1fba58bced60bc56451e7c233ba2f69961830fcdba1f3b096d8a65b543d6261c9156bfdc134e798d18d7c65c2e35eb285e1724f924bea4cf76d8eb4eda941d55e7eaaff45d614fa83b1e1f472dfc5bceb9bf977a81289e3a5bf37ea1e319aef20cd9a213d33b415a428b63fbdb3d14d198c603f05e021b6a8"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @masq={{}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @dup={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @fib={{}, @void}}]}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x0, 0x1, "1182c0262c89292d969696ca569667db15aa46f46c50281512ca3dace1e2c242a5a1b32a4925bed392a08b79a116df6a3c9bd32c3bb3e4095ba81cb66471b656d21a7b5d857b1470ce6c99af891d58547a6372a717f0cd0c270922be928757edcfc1b1256bf5dac1622ec5a111950adb01f7ac72bfe9f5b6067c9d7be532dfbc444cfde55a0052f5b84737bfc284a85755f251f97b7189"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "5cb0c6cb8f07c868bc1adf44709a4845fded1e6034e7110d8fde1cc1ddf03ca3b753deb59cfa77df8221261c4674194f441d7dc4541f4573734b0b03b6d433b99f8816ef432a5490cd72c484b762adfbf4c1f914c09dc2627b21791a0244e3a3f3900172c4001daa7a32fe0dbdc0e49b5b5e83748dd990a382b89ede5791e5418f2d5a5b1e5014efdc84e8"}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @target={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @hash}, {0x0, 0x1, 0x0, 0x1, @socket={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @byteorder={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @xfrm={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @tunnel={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY, @NFTA_TUNNEL_MODE={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x0, 0x2, 0x1, 0x0, 0xa}]}}}, {0x0, 0x1, 0x0, 0x1, @dynset={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd)
close(r2)

758.420271ms ago: executing program 0 (id=1057):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64)
socket$kcm(0xa, 0x922000000003, 0x11) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) (async)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="2e00000010008188e6b62aa73772cc9f1ba1f8487b56b09125109544000000000e000a0010fa000002900000121f", 0x2e}], 0x1}, 0xeb117a2335a02233) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (rerun: 32)

757.970042ms ago: executing program 2 (id=1058):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x7c, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07022cbd70000000000001000000040008802c0004800500030001000000050003000000000001000300010000000500030000000000050003000200000008000100030000000800020001"], 0x54}}, 0x880) (async)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r9=>0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xe9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048800}, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket(0x10, 0x80002, 0x2)
bind$netlink(r11, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r11, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
sendto(r11, &(0x7f00000000c0)='\x00', 0x1, 0x0, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r12=>0xffffffffffffffff}) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000240), 0x4)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
close(r13) (async, rerun: 64)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000001c0)=ANY=[@ANYRES32=r13, @ANYRES32=r13, @ANYBLOB="07000000728c2fbcaaf74bb803f21d8ec207cbaf9cac4fa1afb6d6bac17dd3cba637e0fd597ba4f158c5bb888a788271c7977c80d405f6e1d80612c86a2fc6c59bc53ef94c", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async, rerun: 64)
r14 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000005800000121f", 0x2e}], 0x1}, 0x404c080)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r15=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x90, r10, 0x181, 0x70bd25, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x90}}, 0x0)

626.764276ms ago: executing program 0 (id=1059):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffef2000000005002000000000000c001f00706879305635ad23"], 0x28}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010800}, 0x8054)

449.7015ms ago: executing program 2 (id=1060):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
poll(&(0x7f00000001c0)=[{r0, 0x700}], 0x1, 0xe)
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="6fb794593ccb97a081b4910f4b8b3c1055d018a4515ee8e2bd398c602434cc9e5c5cc08c283173126f63297443da489b58008ecc3c20d569c959178c1f393748a5fc89cf47537b30", 0x48}], 0x1, 0x0, 0x110}}], 0x1, 0x931766f6319eed40)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000240))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000480)='veth1_to_batadv\x00', 0x10)
r4 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000000)={'a', ' *:* ', 'wm\x00'}, 0x9)

377.136657ms ago: executing program 0 (id=1061):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000200000000000000080006000100000004000b"], 0x24}}, 0x4004094)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x40}}, 0x4012)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$inet(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363f49fcfec3197381b13892559f334d436138406b699de69db13fd42d5737428808940bcd0840dc930c81a8bd8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be60c4fe6987e7a0dc395ab72756496f2e0616a18998c294c8e674758ffa13b00bab2df9ca37a0bd8f0bb843fe86124390c62f05d76038a6e1610780f0310692de128832c32940a6e848b17d1b5a0c20f7ff5a7a2e353f9363a037d054cf0409c89cd80165cf27bf7904a0d47cfd06acc1e4606bb5a8d26ace7578e8f5d151eb60e63969461a96e66f9cf4203d5bb7af3f62bc02693a1d5af09c6d1f5c7d27e991ce5c388b925aacf29f77ff12a5589aa7174c130ba477e86188d1ce5168925ebc3e4f071c368fe7e71b209acca43bdc42a1fe0171c4096fe8ddf08e081554bac2dc0d3a4f80cd57aae7305aec6c9d8853e8f80be85b921c951a9fff4a9ff33a348926af5d91fd19bb2d930eeb546444189e76b0cd05a72f52bc74d285d6b6d84680770f88f82474b6c3fc5b641822516eb35fe2ecd17d378b283c2ea4c2295f2d42beebad7b75da375764520e9fc68683118adf1ce73e1c7635161df1cfa4f73fd4ed9811c1c2366472122d7900d073f75e6e5a3104d6a258772b840dcf0a16246ee6ef516a66a0c70283875bdfb0cb3b8fd5f76e8b481193d1ca7310b74f6b2fe4e03b3d67e560784a28a508e302634ada79a9d543a4b6ac9dab6f335cd207d7c4d46ef6922bde6c66b85817d1d9cf191a7573773fc9125b1c9282acae0cc3f381b36a009592d16df4d74de496b1a38a857671eec326ba6d6762d21066de663280c72836297", 0x26d}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed2", 0x6f}], 0x2}, 0x8000)
recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0)
close(r5)
r7 = socket$inet(0x2, 0x3, 0x8)
r8 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r7)
write(r4, &(0x7f0000000000), 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r10)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000fbdbdf252b0000000c0005000000000000000a0001007770616e31000000a22e3a861da572dc916320ee4eefdee2b531ec5c2b834d8a312300becf47cbdeb5185cd5c220cb838953563c403dc0f289b69ac12d2ea358c55ec6ef5aac2154f6ef58fad80e15a106c3d00abca9a5e44832baea1560dc576882a30278d594573f3a1432f13456d4fb6aceab783a36dc7597d569e810366fca9264f8cb85d6f0e23df1f474c905e23e8a8362664440f841f0e820595af281d21d7283"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000054)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r12, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01030000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0x60}, 0x1, 0x0, 0x0, 0x800c}, 0x20000000)

376.519865ms ago: executing program 2 (id=1062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x8002, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000800095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a030000000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002108000340000000c408000f400000000a0c000b"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r3, 0x325}, 0x14}}, 0x0)

309.433105ms ago: executing program 2 (id=1063):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50)
poll(&(0x7f00000001c0)=[{r0, 0x700}], 0x1, 0xe)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="6fb794593ccb97a081b4910f4b8b3c1055d018a4515ee8e2bd398c602434cc9e5c5cc08c283173126f63297443da489b58008ecc3c20d569c959178c1f393748a5fc89cf47537b30", 0x48}], 0x1, 0x0, 0x110}}], 0x1, 0x931766f6319eed40)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000240))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000480)='veth1_to_batadv\x00', 0x10)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="ac0c0000", @ANYRES64=r3, @ANYBLOB="050027bd7000bddbdf25010000001400020077673000000000000000000000000000840c088050000080200004000a004e2200000000000000000000000000000000000000010500000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b060005"], 0xcac}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0)
r6 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580))
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
write$cgroup_devices(r6, &(0x7f0000000000)={'a', ' *:* ', 'wm\x00'}, 0x9)

138.727268ms ago: executing program 2 (id=1064):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x3, 0x0, 0x800}, {0x6}]}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x20, 0x70bd2c, 0x1ffffffd, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0x4}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x9, 0x8, 0xfa, 0xa}]})
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)
sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10)

138.175297ms ago: executing program 0 (id=1065):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f4, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x19c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x170, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797ef"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x5, 0x6, "ebe6c48aa9"}}}, @TCF_EM_CONTAINER={0x80, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147bab4e8cc66b89a2f2ddd8d0b788aa8b69311701d1c85ab32acb6397660ea603b182034545dd0bd1327d2665d5a78a956ac2ec9921388b37854565074bc2cf7610bacd71b29b6291a2dbc80bf91fea392ac67adb245b0a25f26f1ee3e931815552be72cdd91a079b7c6ea14bf"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xe, 0x9, 0xd4c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x94}, @TCA_ROUTE4_TO={0x8, 0x2, 0xb6}, @TCA_ROUTE4_TO={0x8, 0x2, 0x73}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
write$cgroup_pid(r1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ffe}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x46}]}], {0x14, 0x10}}, 0x6c}}, 0x0)
getsockname$packet(r10, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

0s ago: executing program 2 (id=1066):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0}) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x9020}, [@IFLA_ALT_IFNAME={0xfffffe49, 0x35, 'nicvf0\x00'}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14105' (ED25519) to the list of known hosts.
syzkaller login: [   49.151479][ T5818] cgroup: Unknown subsys name 'net'
[   49.297666][ T5818] cgroup: Unknown subsys name 'cpuset'
[   49.302117][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.714789][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.350690][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.364164][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.366858][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.369883][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.372484][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.389008][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.391789][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.395403][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.398502][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.401186][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.433414][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.438772][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.441456][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.444670][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.447296][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.621885][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   54.665718][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   54.757387][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.759832][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.762419][ T5830] bridge_slave_0: entered allmulticast mode
[   54.766045][ T5830] bridge_slave_0: entered promiscuous mode
[   54.791842][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.794568][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.797441][ T5830] bridge_slave_1: entered allmulticast mode
[   54.800492][ T5830] bridge_slave_1: entered promiscuous mode
[   54.840742][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.845157][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.847500][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.849945][ T5826] bridge_slave_0: entered allmulticast mode
[   54.852686][ T5826] bridge_slave_0: entered promiscuous mode
[   54.857090][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.860285][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   54.879983][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.882365][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.885335][ T5826] bridge_slave_1: entered allmulticast mode
[   54.888521][ T5826] bridge_slave_1: entered promiscuous mode
[   54.935321][ T5830] team0: Port device team_slave_0 added
[   54.948682][ T5830] team0: Port device team_slave_1 added
[   54.952320][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.984047][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.994745][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.997062][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.006474][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.025054][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.027482][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.029987][ T5834] bridge_slave_0: entered allmulticast mode
[   55.033279][ T5834] bridge_slave_0: entered promiscuous mode
[   55.036903][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.039192][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.050721][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.064015][ T5826] team0: Port device team_slave_0 added
[   55.067486][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.069860][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.072278][ T5834] bridge_slave_1: entered allmulticast mode
[   55.075830][ T5834] bridge_slave_1: entered promiscuous mode
[   55.088540][ T5826] team0: Port device team_slave_1 added
[   55.108143][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.127512][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.130668][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.132930][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.141541][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.161789][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.164930][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.177322][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.186347][ T5830] hsr_slave_0: entered promiscuous mode
[   55.188709][ T5830] hsr_slave_1: entered promiscuous mode
[   55.206864][ T5834] team0: Port device team_slave_0 added
[   55.219323][ T5834] team0: Port device team_slave_1 added
[   55.274965][ T5826] hsr_slave_0: entered promiscuous mode
[   55.278157][ T5826] hsr_slave_1: entered promiscuous mode
[   55.281033][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.284985][ T5826] Cannot create hsr debugfs directory
[   55.295799][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.298183][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.308145][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.330996][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.333370][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.342052][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.419941][ T5834] hsr_slave_0: entered promiscuous mode
[   55.422218][ T5834] hsr_slave_1: entered promiscuous mode
[   55.424748][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.427155][ T5834] Cannot create hsr debugfs directory
[   55.517789][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.529802][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.541973][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.558290][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.615054][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.623306][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.642918][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.648925][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.682224][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.688150][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.692442][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.699631][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.741099][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.771041][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   55.793121][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.796512][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.812896][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.815433][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.830909][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.844280][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.876180][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   55.886054][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   55.891411][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.894049][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.903576][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.906486][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.918280][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.921129][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.935661][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.938743][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.082751][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.133233][ T5830] veth0_vlan: entered promiscuous mode
[   56.142188][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.146937][ T5830] veth1_vlan: entered promiscuous mode
[   56.151951][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.189279][ T5830] veth0_macvtap: entered promiscuous mode
[   56.205802][ T5830] veth1_macvtap: entered promiscuous mode
[   56.223834][ T5826] veth0_vlan: entered promiscuous mode
[   56.228834][ T5834] veth0_vlan: entered promiscuous mode
[   56.243215][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.247208][ T5826] veth1_vlan: entered promiscuous mode
[   56.258132][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.261922][ T5834] veth1_vlan: entered promiscuous mode
[   56.273916][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.277543][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.281146][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.286309][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.323200][ T5826] veth0_macvtap: entered promiscuous mode
[   56.338705][ T5826] veth1_macvtap: entered promiscuous mode
[   56.350236][ T5834] veth0_macvtap: entered promiscuous mode
[   56.365477][ T5834] veth1_macvtap: entered promiscuous mode
[   56.375768][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.395018][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.417686][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.421304][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.427533][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.431109][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.436362][ T5829] Bluetooth: hci0: command tx timeout
[   56.438918][   T54] Bluetooth: hci1: command tx timeout
[   56.449652][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.453075][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.463870][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.487180][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.514740][  T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.515429][   T54] Bluetooth: hci2: command tx timeout
[   56.517686][  T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.528713][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.531812][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.534958][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.538577][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.602148][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.605273][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.631786][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.632590][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.635872][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.679083][  T352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.682165][  T352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.762909][  T352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.773877][  T352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.871176][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.876538][ T5903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'.
[   56.953405][ T5912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'.
[   57.001678][ T5915] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.336734][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'.
[   57.365383][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   57.373168][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   57.381430][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'.
[   57.437995][ T5951] netlink: 'syz.2.20': attribute type 7 has an invalid length.
[   57.441847][ T5951] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   57.452488][ T5951] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.20'.
[   57.470559][ T5951] netlink: 'syz.2.20': attribute type 1 has an invalid length.
[   57.475618][ T5951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'.
[   57.566399][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'.
[   57.650394][ T5968] IPv6: sit1: Disabled Multicast RS
[   58.106473][ T5986] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET)
[   58.513806][ T5829] Bluetooth: hci0: command tx timeout
[   58.515693][   T54] Bluetooth: hci1: command tx timeout
[   58.595993][   T54] Bluetooth: hci2: command tx timeout
[   58.846943][ T6007] Zero length message leads to an empty skb
[   59.169426][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.292522][ T6063] netlink: 'syz.0.49': attribute type 1 has an invalid length.
[   59.296384][ T6063] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.300319][ T6063] x_tables: duplicate underflow at hook 1
[   59.305343][ T6063] vlan0: entered promiscuous mode
[   59.309475][ T6063] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   59.345793][ T6067] syzkaller1: entered promiscuous mode
[   59.347759][ T6067] syzkaller1: entered allmulticast mode
[   59.400877][ T6070] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   59.619756][ T6076] Unknown options in mask 700
[   59.720963][ T6083] xt_CT: No such helper "pptp"
[   59.725315][ T6083] --map-set only usable from mangle table
[   59.803107][ T6088] trusted_key: syz.2.56 sent an empty control message without MSG_MORE.
[   59.992154][ T6104] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   60.261008][ T6112] batman_adv: batadv0: Adding interface: ip6gretap1
[   60.264014][ T6112] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.272801][ T6112] batman_adv: batadv0: Interface activated: ip6gretap1
[   60.593737][   T54] Bluetooth: hci1: command tx timeout
[   60.594193][ T5829] Bluetooth: hci0: command tx timeout
[   60.635519][ T6136] bridge0: port 3(syz_tun) entered blocking state
[   60.637762][ T6136] bridge0: port 3(syz_tun) entered disabled state
[   60.642593][ T6136] syz_tun: entered allmulticast mode
[   60.645711][ T6136] syz_tun: entered promiscuous mode
[   60.648155][ T6136] bridge0: port 3(syz_tun) entered blocking state
[   60.650431][ T6136] bridge0: port 3(syz_tun) entered forwarding state
[   60.683675][ T5829] Bluetooth: hci2: command tx timeout
[   60.951726][ T6160] netlink: zone id is out of range
[   60.956146][ T6160] netlink: zone id is out of range
[   60.957842][ T6160] netlink: zone id is out of range
[   60.959828][ T6160] netlink: zone id is out of range
[   60.961915][ T6160] netlink: zone id is out of range
[   60.964675][ T6160] netlink: zone id is out of range
[   60.966378][ T6160] netlink: zone id is out of range
[   60.968374][ T6160] netlink: zone id is out of range
[   61.131140][ T6179] syzkaller1: entered promiscuous mode
[   61.132901][ T6179] syzkaller1: entered allmulticast mode
[   61.319812][ T6197] sctp: [Deprecated]: syz.2.85 (pid 6197) Use of int in max_burst socket option.
[   61.319812][ T6197] Use struct sctp_assoc_value instead
[   62.351787][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.356663][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.529642][ T6247] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.569500][ T6248] netlink: 'syz.1.102': attribute type 1 has an invalid length.
[   62.572129][ T6248] __nla_validate_parse: 11 callbacks suppressed
[   62.572139][ T6248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.102'.
[   62.588523][ T6247] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.645363][ T6247] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.673910][ T5829] Bluetooth: hci1: command tx timeout
[   62.673961][   T54] Bluetooth: hci0: command tx timeout
[   62.753900][   T54] Bluetooth: hci2: command tx timeout
[   62.768408][ T6247] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.776564][ T6247] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.786293][ T6247] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.794218][ T6247] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.947147][ T6256] xt_hashlimit: size too large, truncated to 1048576
[   63.101850][ T6274] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   63.315144][ T6284] syzkaller0: create flow: hash 2138144099 index 1
[   63.315805][ T5856] syzkaller0: tun_net_xmit 76
[   63.320631][ T5856] syzkaller0: tun_net_xmit 48
[   63.324368][ T6284] syzkaller0: tun_chr_ioctl cmd 35108
[   63.345892][ T5877] syzkaller0: tun_net_xmit 76
[   63.362956][ T6283] syzkaller0: delete flow: hash 2138144099 index 1
[   63.536641][ T6302] netlink: 'syz.0.113': attribute type 16 has an invalid length.
[   63.539176][ T6302] netlink: 'syz.0.113': attribute type 17 has an invalid length.
[   64.405025][ T6302] net_ratelimit: 4056 callbacks suppressed
[   64.405030][ T6302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.606601][ T6326] geneve2: entered promiscuous mode
[   64.642448][ T6324] tipc: Started in network mode
[   64.650993][ T6324] tipc: Node identity ac14140f, cluster identity 4711
[   64.655178][ T6324] tipc: New replicast peer: 255.255.255.255
[   64.661441][ T6324] tipc: Enabled bearer <udp:syz2>, priority 10
[   64.671666][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.126'.
[   65.399086][ T6330] netlink: 44 bytes leftover after parsing attributes in process `syz.2.128'.
[   65.499464][ T6339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.133'.
[   65.502365][ T6339] netlink: 'syz.0.133': attribute type 5 has an invalid length.
[   65.666577][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'.
[   65.671392][ T6353] ip6gre0: Master is either lo or non-ether device
[   65.726502][ T6358] openvswitch: netlink: IP tunnel TTL not specified.
[   65.784198][  T790] tipc: Node number set to 2886997007
[   65.878772][ T6369] syzkaller0: mtu less than device minimum
[   65.881291][ T6369] syzkaller0: entered allmulticast mode
[   66.086208][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   66.089078][ T6383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.148'.
[   66.092737][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   66.100161][ T6383] netlink: 88 bytes leftover after parsing attributes in process `syz.2.148'.
[   66.296936][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'.
[   66.307897][ T6391] geneve3: entered promiscuous mode
[   66.310048][ T6391] geneve3: entered allmulticast mode
[   66.682114][ T6421] syzkaller1: entered promiscuous mode
[   66.687162][ T6421] syzkaller1: entered allmulticast mode
[   66.811832][ T6425] netlink: 'syz.2.163': attribute type 5 has an invalid length.
[   66.857938][ T6433] netlink: 'syz.2.165': attribute type 29 has an invalid length.
[   66.861659][ T6431] netlink: 'syz.2.165': attribute type 29 has an invalid length.
[   66.871521][ T6431] unsupported nla_type 58
[   67.081472][ T6441] IPv6: sit1: Disabled Multicast RS
[   67.194349][ T6458] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   67.247658][ T6460] netlink: 'syz.2.172': attribute type 39 has an invalid length.
[   67.525086][ T6468] ip6gretap0: entered promiscuous mode
[   67.526948][ T6468] ip6gretap0: entered allmulticast mode
[   67.612794][ T6476] __nla_validate_parse: 5 callbacks suppressed
[   67.612808][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'.
[   67.799825][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   67.832158][ T6488] netlink: 'syz.1.183': attribute type 1 has an invalid length.
[   67.855275][ T6488] bond1: entered promiscuous mode
[   67.857510][ T6488] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.873912][ T6488] bond1: (slave bridge2): making interface the new active one
[   67.876403][ T6488] bridge2: entered promiscuous mode
[   67.879093][ T6488] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   68.080956][ T6519] netlink: 300 bytes leftover after parsing attributes in process `syz.2.188'.
[   68.086333][ T6506] sctp: [Deprecated]: syz.1.186 (pid 6506) Use of int in max_burst socket option.
[   68.086333][ T6506] Use struct sctp_assoc_value instead
[   68.125307][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.189'.
[   68.131538][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[   68.180276][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'.
[   68.322681][   T33] audit: type=1800 audit(1752589730.020:2): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.194" name="memory.events" dev="tmpfs" ino=482 res=0 errno=0
[   68.345531][ T6543] vlan0: entered allmulticast mode
[   68.530322][ T6548] netlink: 'syz.2.196': attribute type 12 has an invalid length.
[   68.533340][ T6548] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.196'.
[   68.877405][ T6567] bridge_slave_0: left promiscuous mode
[   68.880325][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.897019][ T6567] bridge_slave_1: left allmulticast mode
[   68.898975][ T6567] bridge_slave_1: left promiscuous mode
[   68.900982][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.921773][ T6567] bond0: (slave bond_slave_0): Releasing backup interface
[   68.931442][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'.
[   68.936251][ T6567] bond0: (slave bond_slave_1): Releasing backup interface
[   68.936940][ T6571] openvswitch: netlink: Missing key (keys=40, expected=100)
[   68.958085][ T6567] team0: Port device team_slave_0 removed
[   68.966960][ T6567] team0: Port device team_slave_1 removed
[   68.969650][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.972166][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.976754][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.979263][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.002728][ T6571] netlink: 108 bytes leftover after parsing attributes in process `syz.0.203'.
[   69.009746][ T6571] netlink: 108 bytes leftover after parsing attributes in process `syz.0.203'.
[   69.062357][ T6575] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   69.070077][ T6579] netlink: 'syz.2.206': attribute type 7 has an invalid length.
[   69.078614][ T6579] xt_hashlimit: size too large, truncated to 1048576
[   69.168565][ T6588] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   69.172859][ T6587] IPVS: stopping master sync thread 6588 ...
[   69.339893][ T6599] Bluetooth: MGMT ver 1.23
[   69.409014][ T6599] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.439392][ T6599] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.462447][ T6608] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[   70.840820][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.979339][ T6599] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.444955][ T6618] netlink: 'syz.2.218': attribute type 3 has an invalid length.
[   72.492456][ T6599] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.510133][ T6625] syzkaller0: entered promiscuous mode
[   72.512073][ T6625] syzkaller0: entered allmulticast mode
[   72.520966][ T6625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.524763][ T6628] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   72.532184][ T6626] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   72.537252][ T6622] tipc: Resetting bearer <eth:syzkaller0>
[   72.546430][ T6622] tipc: Disabling bearer <eth:syzkaller0>
[   72.585395][ T6599] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.607480][ T6599] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.640435][ T6599] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.647118][ T6638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.666897][ T6599] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.669803][ T6638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.781696][ T6649] tipc: Enabled bearer <udp:syz0>, priority 10
[   72.810872][ T6654] netlink: 'syz.2.227': attribute type 5 has an invalid length.
[   72.818596][ T6654] __nla_validate_parse: 9 callbacks suppressed
[   72.818604][ T6654] netlink: 444 bytes leftover after parsing attributes in process `syz.2.227'.
[   72.838363][ T6654] netlink: 'syz.2.227': attribute type 4 has an invalid length.
[   72.843238][ T6654] netlink: 'syz.2.227': attribute type 4 has an invalid length.
[   72.959893][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'.
[   73.021920][ T6678] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   73.063392][ T6668] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.074387][ T6668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.232'.
[   73.078285][ T6674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.233'.
[   73.174930][ T6689] Set syz0 is full, maxelem 0 reached
[   73.289900][ T6693] gtp0: entered promiscuous mode
[   73.291676][ T6693] gtp0: entered allmulticast mode
[   73.333088][ T6696] tipc: Can't bind to reserved service type 1
[   73.591053][ T6710] netlink: 'syz.0.244': attribute type 10 has an invalid length.
[   73.599059][ T6710] batman_adv: batadv0: Adding interface: team0
[   73.601155][ T6710] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.614423][ T6710] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   73.618361][ T6710] netlink: 'syz.0.244': attribute type 10 has an invalid length.
[   73.620935][ T6710] netlink: 2 bytes leftover after parsing attributes in process `syz.0.244'.
[   73.625494][ T6710] team0: entered promiscuous mode
[   73.627189][ T6710] team_slave_0: entered promiscuous mode
[   73.630068][ T6710] team_slave_1: entered promiscuous mode
[   73.632993][ T6710] 8021q: adding VLAN 0 to HW filter on device team0
[   73.636008][ T6710] batman_adv: batadv0: Interface activated: team0
[   73.638251][ T6710] batman_adv: batadv0: Interface deactivated: team0
[   73.640468][ T6710] batman_adv: batadv0: Removing interface: team0
[   73.643114][ T6710] bridge0: port 3(team0) entered blocking state
[   73.645946][ T6710] bridge0: port 3(team0) entered disabled state
[   73.648646][ T6710] team0: entered allmulticast mode
[   73.650613][ T6710] team_slave_0: entered allmulticast mode
[   73.652543][ T6710] team_slave_1: entered allmulticast mode
[   73.656283][ T6710] bridge0: port 3(team0) entered blocking state
[   73.658486][ T6710] bridge0: port 3(team0) entered forwarding state
[   73.697816][ T6712] syzkaller1: entered promiscuous mode
[   73.700075][ T6712] syzkaller1: entered allmulticast mode
[   73.704963][ T6712] syzkaller1: left promiscuous mode
[   73.706838][ T6712] syzkaller1: left allmulticast mode
[   73.917688][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[   73.922473][ T6723] openvswitch: netlink: nsh attr 2560 is out of range max 3
[   73.926801][ T6723] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.933259][ T6725] IPVS: length: 8 != 446622349272
[   73.946268][ T6725] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   73.957503][ T6728] xt_hashlimit: size too large, truncated to 1048576
[   73.999489][ T6730] netlink: 'syz.0.251': attribute type 5 has an invalid length.
[   74.037109][ T6730] ip6erspan0: entered promiscuous mode
[   74.233465][ T6748] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   74.448447][ T6762] netlink: 292 bytes leftover after parsing attributes in process `syz.2.259'.
[   74.582110][ T6773] netlink: 'syz.2.264': attribute type 1 has an invalid length.
[   74.601299][ T6773] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.617745][ T6774] veth3: entered promiscuous mode
[   74.622519][ T6774] bond1: (slave veth3): Enslaving as an active interface with a down link
[   74.627293][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.264'.
[   74.812509][ T6787] pim6reg: entered allmulticast mode
[   74.945344][ T6800] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[   74.978672][ T6801] bond2: (slave bridge3): making interface the new active one
[   74.984581][ T6801] bond2: (slave bridge3): Enslaving as an active interface with an up link
[   74.997283][ T6800] bond2: (slave bridge4): Enslaving as an active interface with a down link
[   75.092568][ T6809] syz.0.274 (6809) used greatest stack depth: 18168 bytes left
[   75.115160][ T6817] netlink: 'syz.2.276': attribute type 3 has an invalid length.
[   75.119652][ T6817] netlink: 'syz.2.276': attribute type 2 has an invalid length.
[   75.171729][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[   75.177334][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'.
[   75.359842][ T6821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.417521][ T6821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.038729][ T6831] syzkaller1: entered promiscuous mode
[   76.040852][ T6831] syzkaller1: entered allmulticast mode
[   76.213132][ T6842] warning: `syz.0.283' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.587068][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.608249][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.686582][ T6866] netlink: 'syz.0.290': attribute type 10 has an invalid length.
[   76.690326][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.692995][ T6866] bridge_slave_1: left allmulticast mode
[   76.696484][ T6866] bridge_slave_1: left promiscuous mode
[   76.700088][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.707297][ T6868] xt_CT: No such helper "snmp_trap"
[   76.710899][ T6866] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   76.809506][ T6882] nbd: illegal input index 65508
[   76.814276][ T6882] nbd: illegal input index 65508
[   76.854914][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   76.857764][   T10] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   76.878456][   T10] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   76.908907][ T6722] delete_channel: no stack
[   77.206761][ T6914] syzkaller1: entered promiscuous mode
[   77.208754][ T6914] syzkaller1: entered allmulticast mode
[   77.937273][ T6952] __nla_validate_parse: 9 callbacks suppressed
[   77.937287][ T6952] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.311'.
[   77.983746][   T33] audit: type=1800 audit(1752589739.680:3): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="blkio.bfq.time_recursive" dev="tmpfs" ino=378 res=0 errno=0
[   77.995166][   T33] audit: type=1800 audit(1752589739.700:4): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name="blkio.bfq.time_recursive" dev="tmpfs" ino=378 res=0 errno=0
[   78.085988][ T6956] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.097058][ T6956] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   78.225572][ T6968] syzkaller1: entered promiscuous mode
[   78.227974][ T6968] syzkaller1: entered allmulticast mode
[   78.283182][ T6976] netlink: 60 bytes leftover after parsing attributes in process `syz.2.319'.
[   78.293052][ T6976] netlink: 56 bytes leftover after parsing attributes in process `syz.2.319'.
[   78.326052][ T6976] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   78.330091][ T6976] gretap1: entered promiscuous mode
[   78.331913][ T6976] gretap1: entered allmulticast mode
[   78.358089][ T6986] ipt_REJECT: ECHOREPLY no longer supported.
[   78.365107][ T6986] vlan2: entered promiscuous mode
[   78.366793][ T6986] bond0: entered promiscuous mode
[   78.368460][ T6986] bond_slave_0: entered promiscuous mode
[   78.370377][ T6986] bond_slave_1: entered promiscuous mode
[   78.372303][ T6986] vlan2: entered allmulticast mode
[   78.375762][ T6986] bond0: entered allmulticast mode
[   78.377423][ T6986] bond_slave_0: entered allmulticast mode
[   78.379269][ T6986] bond_slave_1: entered allmulticast mode
[   78.465657][ T6995] validate_nla: 2 callbacks suppressed
[   78.465671][ T6995] netlink: 'syz.2.325': attribute type 21 has an invalid length.
[   78.468338][ T6996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   78.471225][ T6995] IPv6: NLM_F_CREATE should be specified when creating new route
[   78.523305][ T7001] netlink: 'syz.2.328': attribute type 1 has an invalid length.
[   78.599586][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'.
[   78.602520][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'.
[   78.605159][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'.
[   78.606145][ T7009] netlink: 'syz.0.329': attribute type 5 has an invalid length.
[   78.611329][ T7009] netlink: 'syz.0.329': attribute type 6 has an invalid length.
[   78.639741][ T7016] netlink: 'syz.2.331': attribute type 10 has an invalid length.
[   78.649560][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'.
[   78.651804][ T7016] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   78.728406][ T7026] syzkaller1: entered promiscuous mode
[   78.730298][ T7026] syzkaller1: entered allmulticast mode
[   78.846638][ T7031] bond0: entered promiscuous mode
[   78.848838][ T7031] bridge_slave_1: entered promiscuous mode
[   78.852404][ T7031] batadv0: entered promiscuous mode
[   78.857488][ T7031] batadv0: left promiscuous mode
[   78.859843][ T7031] bond0: left promiscuous mode
[   78.861946][ T7031] bridge_slave_1: left promiscuous mode
[   79.121818][ T7042] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.341'.
[   79.126962][ T7041] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.341'.
[   79.132865][ T7041] IPVS: set_ctl: invalid protocol: 8345 172.30.1.3:20003
[   79.138577][ T7041] Cannot find add_set index 3 as target
[   79.149470][ T7041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.337456][ T7044] syzkaller1: entered promiscuous mode
[   79.339796][ T7044] syzkaller1: entered allmulticast mode
[   79.572020][ T7054] xt_l2tp: v2 sid > 0xffff: 4294901760
[   79.720789][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'.
[   79.731636][ T7064] syzkaller1: entered promiscuous mode
[   79.739876][ T7064] syzkaller1: entered allmulticast mode
[   79.828105][ T7079] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   79.879324][ T7082] netem: incorrect gi model size
[   79.883255][ T7082] netem: change failed
[   79.966523][ T7097] syzkaller1: entered promiscuous mode
[   79.968391][ T7097] syzkaller1: entered allmulticast mode
[   80.130764][ T7124] netlink: 'syz.2.369': attribute type 10 has an invalid length.
[   80.142097][ T7124] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.146269][ T7124] team0: Port device bond0 added
[   80.967655][ T7150] netlink: 'syz.0.376': attribute type 12 has an invalid length.
[   81.007701][ T7154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.018936][ T7154] syzkaller0: entered promiscuous mode
[   81.020947][ T7154] syzkaller0: entered allmulticast mode
[   81.031946][ T7154] tipc: Resetting bearer <eth:syzkaller0>
[   81.044252][ T7152] tipc: Resetting bearer <eth:syzkaller0>
[   81.051738][ T7152] tipc: Disabling bearer <eth:syzkaller0>
[   81.078925][  T973] cfg80211: failed to load regulatory.db
[   81.144635][ T7170] netlink: 'syz.0.382': attribute type 15 has an invalid length.
[   81.205225][ T7181] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[   81.208534][ T7181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.656396][ T7213] netlink: 'syz.2.395': attribute type 3 has an invalid length.
[   82.129731][ T7243] bridge0: entered promiscuous mode
[   82.132053][ T7245] syzkaller1: entered promiscuous mode
[   82.136844][ T7245] syzkaller1: entered allmulticast mode
[   82.246160][ T7259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.298423][ T7267] xt_hashlimit: max too large, truncated to 1048576
[   82.300849][ T7267] No such timeout policy "syz1"
[   82.329724][ T7272] batadv_slave_1: entered promiscuous mode
[   82.373386][ T7272] batadv_slave_1: left promiscuous mode
[   82.481341][ T7289] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   82.484872][  T790] IPVS: starting estimator thread 0...
[   82.574023][ T7290] IPVS: using max 79 ests per chain, 189600 per kthread
[   82.575640][ T7301] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   82.579703][ T7298] ip6tnl0: entered promiscuous mode
[   82.583280][ T7297] ip6tnl0: left promiscuous mode
[   82.607551][ T7301] team0: Port device bond0 removed
[   82.627167][ T7301] bond0: (slave bridge_slave_1): Releasing backup interface
[   82.648747][ T7311] netlink: 'syz.2.423': attribute type 10 has an invalid length.
[   82.659218][ T7301] bond1: (slave veth3): Releasing active interface
[   82.685787][ T7311] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   82.704632][ T7311] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   82.814696][ T7319] bond0: entered promiscuous mode
[   82.816339][ T7319] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   82.829790][ T7319] batadv0: entered promiscuous mode
[   82.845002][ T7319] batadv0: left promiscuous mode
[   82.847266][ T7319] bond0: left promiscuous mode
[   82.848787][ T7319] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[   82.851175][ T7324] No such timeout policy "syz0"
[   82.994836][ T7335] sctp: [Deprecated]: syz.0.433 (pid 7335) Use of struct sctp_assoc_value in delayed_ack socket option.
[   82.994836][ T7335] Use struct sctp_sack_info instead
[   83.075519][ T7354] __nla_validate_parse: 23 callbacks suppressed
[   83.075532][ T7354] netlink: 108 bytes leftover after parsing attributes in process `syz.0.438'.
[   83.102938][ T7358] pim6reg: entered allmulticast mode
[   83.104537][ T7354] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004
[   83.105078][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'.
[   83.112968][ T7361] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.116041][ T7361] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.119060][ T7361] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.121723][ T7361] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.127646][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'.
[   83.262793][ T7380] netlink: 68 bytes leftover after parsing attributes in process `syz.1.447'.
[   83.317031][ T7382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.325280][ T7382] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.328805][ T7382] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.378359][ T7382] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.381833][ T7382] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.436976][ T7382] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.440499][ T7382] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.490500][ T7382] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   83.495403][ T7382] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.506308][ T7393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'.
[   83.571177][ T7382] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.575016][ T7382] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.588098][ T7382] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.591605][ T7382] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.600089][ T7382] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.603175][ T7382] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.610980][ T7382] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.613847][ T7382] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.175310][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'.
[   84.190528][ T7403] netlink: zone id is out of range
[   84.192362][ T7403] netlink: zone id is out of range
[   84.195274][ T7403] netlink: zone id is out of range
[   84.198687][ T7403] netlink: zone id is out of range
[   84.201237][ T7403] netlink: zone id is out of range
[   84.203377][ T7403] netlink: zone id is out of range
[   84.536067][ T7428] netlink: 288 bytes leftover after parsing attributes in process `syz.1.460'.
[   84.686608][ T7444] validate_nla: 5 callbacks suppressed
[   84.686620][ T7444] netlink: 'syz.1.464': attribute type 3 has an invalid length.
[   84.690937][ T7444] netlink: 224 bytes leftover after parsing attributes in process `syz.1.464'.
[   84.699340][ T7445] lo: entered allmulticast mode
[   84.735361][ T7451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.971061][ T7460] netlink: 'syz.1.469': attribute type 5 has an invalid length.
[   85.049754][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[   85.272549][ T7480] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   85.326089][ T7487] netlink: 169872 bytes leftover after parsing attributes in process `syz.1.475'.
[   85.350247][ T7489] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[   85.354592][ T7489] net_ratelimit: 5 callbacks suppressed
[   85.354601][ T7489] openvswitch: netlink: IP tunnel dst address not specified
[   85.359569][ T7489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.394031][ T7493] ieee802154 phy0 wpan0: encryption failed: -22
[   85.737903][ T7526] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[   85.737926][ T7527] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[   85.745033][ T7526] netlink: 'syz.0.491': attribute type 1 has an invalid length.
[   85.838525][ T7535] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   85.907987][ T7540] vxcan2: entered promiscuous mode
[   86.061631][ T7549] netlink: 'syz.2.497': attribute type 1 has an invalid length.
[   86.076614][ T7549] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.566357][ T7526] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   86.601686][ T7567] vlan2: entered promiscuous mode
[   86.606005][ T7567] bond0: entered promiscuous mode
[   86.607830][ T7567] bond_slave_0: entered promiscuous mode
[   86.610371][ T7567] bond_slave_1: entered promiscuous mode
[   86.612932][ T7567] bridge_slave_1: entered promiscuous mode
[   86.615924][ T7567] vlan2: entered allmulticast mode
[   86.618399][ T7567] bond0: entered allmulticast mode
[   86.620602][ T7567] bond_slave_0: entered allmulticast mode
[   86.622783][ T7567] bond_slave_1: entered allmulticast mode
[   86.626818][ T7567] bridge_slave_1: entered allmulticast mode
[   87.027589][ T7591] netlink: 'syz.2.512': attribute type 18 has an invalid length.
[   87.700720][ T7634] netlink: 'syz.2.525': attribute type 2 has an invalid length.
[   87.873680][ T5829] Bluetooth: hci1: command 0x0401 tx timeout
[   87.932051][ T7647] netlink: 'syz.0.530': attribute type 21 has an invalid length.
[   87.992874][ T7651] x_tables: duplicate underflow at hook 1
[   88.137683][ T7661] __nla_validate_parse: 17 callbacks suppressed
[   88.137694][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   88.145377][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   88.148599][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   88.151748][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   88.155398][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   88.158598][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   88.162904][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   88.361764][ T7670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.366431][ T7670] bond_slave_0: left promiscuous mode
[   88.368839][ T7670] bond_slave_0: left allmulticast mode
[   88.373830][ T7670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.380210][ T7670] bond_slave_1: left promiscuous mode
[   88.382583][ T7670] bond_slave_1: left allmulticast mode
[   88.390242][ T7670] bond0 (unregistering): Released all slaves
[   88.439624][ T7679] netlink: 'syz.2.538': attribute type 21 has an invalid length.
[   88.553369][ T7687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'.
[   88.596812][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'.
[   88.670902][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'.
[   88.993773][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[   89.141535][ T7738] xt_CT: No such helper "syz0"
[   89.614863][ T7773] GUP no longer grows the stack in syz.1.565 (7773): 200000006000-20000000a000 (200000005000)
[   89.618953][ T7773] CPU: 1 UID: 0 PID: 7773 Comm: syz.1.565 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   89.618967][ T7773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.618971][ T7773] Call Trace:
[   89.618975][ T7773]  <TASK>
[   89.618979][ T7773]  dump_stack_lvl+0x189/0x250
[   89.618994][ T7773]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.619004][ T7773]  ? __pfx__printk+0x10/0x10
[   89.619014][ T7773]  ? find_vma+0xe7/0x160
[   89.619030][ T7773]  __get_user_pages+0x2a60/0x30b0
[   89.619053][ T7773]  ? __pfx___get_user_pages+0x10/0x10
[   89.619063][ T7773]  ? __gup_longterm_locked+0xbf7/0x15b0
[   89.619073][ T7773]  ? down_read_killable+0x1d1/0x350
[   89.619081][ T7773]  ? try_get_folio+0x633/0x660
[   89.619091][ T7773]  __gup_longterm_locked+0xd66/0x15b0
[   89.619101][ T7773]  ? try_grab_folio_fast+0x1be/0x4f0
[   89.619113][ T7773]  ? gup_fast_fallback+0x1afc/0x2260
[   89.619122][ T7773]  gup_fast_fallback+0x1cd4/0x2260
[   89.619144][ T7773]  ? __pfx_gup_fast_fallback+0x10/0x10
[   89.619150][ T7773]  ? trace_contention_end+0x39/0x120
[   89.619161][ T7773]  ? __mutex_lock+0x330/0xe80
[   89.619196][ T7773]  ? futex_unqueue+0x22/0x240
[   89.619207][ T7773]  ? futex_unqueue+0x22/0x240
[   89.619217][ T7773]  ? futex_unqueue+0x22/0x240
[   89.619226][ T7773]  ? is_valid_gup_args+0x11f/0x200
[   89.619236][ T7773]  ? get_user_pages_fast+0x4d/0xb0
[   89.619247][ T7773]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   89.619260][ T7773]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   89.619271][ T7773]  ? get_futex_key+0x880/0x1640
[   89.619280][ T7773]  ? wait_for_space+0x24d/0x2d0
[   89.619291][ T7773]  iov_iter_get_pages2+0x5e/0xa0
[   89.619300][ T7773]  __se_sys_vmsplice+0x548/0x10d0
[   89.619324][ T7773]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   89.619334][ T7773]  ? __pfx_futex_wait+0x10/0x10
[   89.619345][ T7773]  ? __lock_acquire+0xab9/0xd20
[   89.619367][ T7773]  ? do_pipe2+0xf7/0x170
[   89.619378][ T7773]  ? rcu_is_watching+0x15/0xb0
[   89.619393][ T7773]  ? do_syscall_64+0xbe/0x3b0
[   89.619402][ T7773]  do_syscall_64+0xfa/0x3b0
[   89.619409][ T7773]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.619420][ T7773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.619428][ T7773]  ? exc_page_fault+0x9f/0xf0
[   89.619440][ T7773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.619447][ T7773] RIP: 0033:0x7fbfb5d8e929
[   89.619454][ T7773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   89.619460][ T7773] RSP: 002b:00007fbfb6cdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   89.619469][ T7773] RAX: ffffffffffffffda RBX: 00007fbfb5fb5fa0 RCX: 00007fbfb5d8e929
[   89.619474][ T7773] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000010
[   89.619479][ T7773] RBP: 00007fbfb5e10b39 R08: 0000000000000000 R09: 0000000000000000
[   89.619483][ T7773] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   89.619487][ T7773] R13: 0000000000000000 R14: 00007fbfb5fb5fa0 R15: 00007ffd2bf33ff8
[   89.619498][ T7773]  </TASK>
[   89.919575][ T7795] validate_nla: 5 callbacks suppressed
[   89.919586][ T7795] netlink: 'syz.0.573': attribute type 3 has an invalid length.
[   90.134256][ T7805] netlink: 'syz.0.576': attribute type 1 has an invalid length.
[   90.276150][ T7791] syzkaller1: entered promiscuous mode
[   90.282717][ T7791] syzkaller1: entered allmulticast mode
[   90.545311][ T7828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   90.905634][ T7841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.934423][ T7841] openvswitch: netlink: Flow actions attr not present in new flow.
[   91.073679][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[   91.126529][ T7848] Bluetooth: MGMT ver 1.23
[   91.152606][ T7854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.264545][ T7873] netlink: 'syz.1.596': attribute type 12 has an invalid length.
[   91.498321][ T7894] ipt_REJECT: TCP_RESET invalid for non-tcp
[   91.503935][ T7896] x_tables: duplicate underflow at hook 2
[   92.218937][ T7921] netlink: 'syz.2.610': attribute type 5 has an invalid length.
[   92.410921][ T7932] netlink: 'syz.2.613': attribute type 2 has an invalid length.
[   92.430233][ T7932] bond0: (slave wlan1): Releasing backup interface
[   92.582328][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.830203][ T7983] netlink: 'syz.0.628': attribute type 13 has an invalid length.
[   92.833864][ T7989] netlink: 'syz.0.628': attribute type 13 has an invalid length.
[   92.833885][ T7983] netlink: 'syz.0.628': attribute type 17 has an invalid length.
[   92.836541][ T7989] netlink: 'syz.0.628': attribute type 17 has an invalid length.
[   92.867749][ T7983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.877114][ T7989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.288279][ T8011] xt_CT: No such helper "syz0"
[   93.669213][ T8050] Set syz0 is full, maxelem 0 reached
[   93.697955][ T8054] __nla_validate_parse: 19 callbacks suppressed
[   93.697969][ T8054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.646'.
[   93.863382][ T8066] ieee802154 phy0 wpan0: encryption failed: -90
[   93.866791][ T8066] batadv_slave_1: entered promiscuous mode
[   93.869667][ T8066] batadv_slave_1: left promiscuous mode
[   93.875610][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   94.589409][ T8103] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   94.763938][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.661'.
[   94.775865][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'.
[   94.925586][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'.
[   95.046228][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'.
[   95.049719][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.667'.
[   95.157679][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'.
[   95.197308][ T8141] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   95.227010][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'.
[   95.268761][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'.
[   95.271968][ T8147] netem: change failed
[   95.386483][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'.
[   95.631851][ T8201] netlink: 'syz.1.693': attribute type 1 has an invalid length.
[   95.651215][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.671230][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.674036][ T8201] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   95.678094][ T8201] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   95.714326][ T8204] xt_CT: No such helper "syz0"
[   95.722005][ T8212] veth3: entered promiscuous mode
[   95.727534][ T8212] bond0: (slave veth3): Enslaving as an active interface with a down link
[   95.757769][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.908135][ T8227] unsupported nlmsg_type 40
[   96.013139][ T8237] bridge_slave_0: entered promiscuous mode
[   96.305696][ T8278] netlink: 'syz.1.722': attribute type 1 has an invalid length.
[   96.865738][ T8317] netlink: 'syz.0.733': attribute type 11 has an invalid length.
[   96.892266][ T8317] netlink: 'syz.0.733': attribute type 11 has an invalid length.
[   97.534481][ T8395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.585791][ T8401] 8021q: adding VLAN 0 to HW filter on device bond2
[   97.588420][ T8401] bridge0: port 4(bond2) entered blocking state
[   97.590586][ T8401] bridge0: port 4(bond2) entered disabled state
[   97.592660][ T8401] bond2: entered allmulticast mode
[   97.595864][ T8401] bond2: entered promiscuous mode
[   97.598098][ T8401] bridge0: port 4(bond2) entered blocking state
[   97.600305][ T8401] bridge0: port 4(bond2) entered forwarding state
[   97.701490][ T8406] bond_slave_1: entered allmulticast mode
[   97.818212][   T26] bridge0: port 4(bond2) entered disabled state
[   97.973424][ T8413] netlink: 'syz.1.759': attribute type 1 has an invalid length.
[   98.342284][ T8435] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.345443][ T8435] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.388570][ T8435] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.392228][ T8435] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.438485][ T8435] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.442245][ T8435] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.499774][ T8435] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   98.506794][ T8444] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   98.508436][ T8435] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.570469][ T8444] bond3: entered promiscuous mode
[   98.576114][ T8444] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.653895][ T8435] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.664652][ T8435] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.686729][ T8435] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   98.689452][ T8435] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.708747][ T8455] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   98.712191][ T8455] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   98.731026][ T8435] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   98.745583][ T8435] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.768321][ T8435] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   98.774536][ T8435] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.839142][ T8458] __nla_validate_parse: 19 callbacks suppressed
[   98.839187][ T8458] netlink: 84 bytes leftover after parsing attributes in process `syz.0.770'.
[   98.845882][ T8458] netem: invalid attributes len -16
[   98.848210][ T8458] netem: change failed
[   98.855455][ T8458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.770'.
[   98.859310][ T8458] netlink: 56 bytes leftover after parsing attributes in process `syz.0.770'.
[   98.868253][ T8458] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   98.872867][ T8458] gretap1: entered promiscuous mode
[   98.877650][ T8458] gretap1: entered allmulticast mode
[   99.076614][ T8475] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.773'.
[   99.099454][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'.
[   99.103357][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.775'.
[   99.168615][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'.
[   99.257190][ T8492] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   99.512647][ T8521] netlink: 'syz.2.786': attribute type 2 has an invalid length.
[   99.515118][ T8521] netlink: 'syz.2.786': attribute type 8 has an invalid length.
[   99.517647][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.786'.
[   99.523210][ T8521] netlink: 'syz.2.786': attribute type 2 has an invalid length.
[   99.526116][ T8521] netlink: 'syz.2.786': attribute type 8 has an invalid length.
[   99.529020][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.786'.
[   99.532211][ T8521] netlink: 'syz.2.786': attribute type 2 has an invalid length.
[   99.536098][ T8521] netlink: 'syz.2.786': attribute type 8 has an invalid length.
[   99.538838][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.786'.
[   99.541994][ T8521] netlink: 'syz.2.786': attribute type 2 has an invalid length.
[   99.731440][ T8531] ipvlan0: entered promiscuous mode
[   99.734813][ T8531] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   99.922526][ T5855] IPVS: starting estimator thread 0...
[  100.014069][ T8539] IPVS: using max 42 ests per chain, 100800 per kthread
[  100.315870][ T8542] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  100.329581][ T8544] sctp: [Deprecated]: syz.0.792 (pid 8544) Use of int in maxseg socket option.
[  100.329581][ T8544] Use struct sctp_assoc_value instead
[  100.377967][ T8541] infiniband syz0: set down
[  100.379612][ T8541] infiniband syz0: added ipvlan1
[  100.403094][ T8541] RDS/IB: syz0: added
[  100.404921][ T8541] smc: adding ib device syz0 with port count 1
[  100.407491][ T8541] smc:    ib device syz0 port 1 has pnetid 
[  100.434878][ T8552] xfrm1: entered promiscuous mode
[  100.438564][ T8552] xfrm1: entered allmulticast mode
[  100.631474][ T8560] netlink: 'syz.0.797': attribute type 11 has an invalid length.
[  100.901586][ T8572] validate_nla: 123 callbacks suppressed
[  100.901659][ T8572] netlink: 'syz.1.801': attribute type 1 has an invalid length.
[  100.943190][ T8572] bond4: (slave bridge5): making interface the new active one
[  100.948031][ T8572] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  102.030757][ T8625] syzkaller1: entered promiscuous mode
[  102.032994][ T8625] syzkaller1: entered allmulticast mode
[  102.161968][ T8632] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  103.122220][ T8746] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  103.151327][ T8748] netlink: 'syz.0.831': attribute type 2 has an invalid length.
[  103.437055][ T8773] netlink: 'syz.0.838': attribute type 1 has an invalid length.
[  103.894774][ T8822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.900321][ T8822] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  103.902699][ T8822] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  103.913027][ T8822] tipc: Resetting bearer <eth:syzkaller0>
[  103.976872][ T8831] __nla_validate_parse: 75 callbacks suppressed
[  103.976882][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.851'.
[  103.982050][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.851'.
[  104.090868][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'.
[  104.120727][ T8851] syzkaller1: entered promiscuous mode
[  104.122882][ T8851] syzkaller1: entered allmulticast mode
[  104.155506][ T8856] netlink: 'syz.0.859': attribute type 49 has an invalid length.
[  104.242641][ T8866] netlink: 'syz.2.862': attribute type 11 has an invalid length.
[  104.353298][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.864'.
[  104.357773][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'.
[  104.376925][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.860'.
[  104.620957][ T8897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.870'.
[  104.624756][ T8897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.870'.
[  104.948716][ T8907] xt_hashlimit: size too large, truncated to 1048576
[  104.986333][ T8934] sit2: entered promiscuous mode
[  105.036503][ T8937] netlink: 'syz.0.885': attribute type 1 has an invalid length.
[  105.038930][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'.
[  105.055334][ T8939] netlink: 'syz.1.886': attribute type 11 has an invalid length.
[  105.059231][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'.
[  105.549720][ T8943] netlink: 'syz.1.888': attribute type 14 has an invalid length.
[  105.595237][ T8943] netlink: 'syz.1.888': attribute type 14 has an invalid length.
[  105.667902][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.752199][ T8975] syzkaller1: entered promiscuous mode
[  105.757361][ T8975] syzkaller1: entered allmulticast mode
[  106.648748][ T8993] netlink: 'syz.1.904': attribute type 4 has an invalid length.
[  106.844232][ T9011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  107.022872][ T9027] lo: left allmulticast mode
[  107.071373][ T9033] netlink: 'syz.1.917': attribute type 2 has an invalid length.
[  107.075207][ T9033] netlink: 'syz.1.917': attribute type 1 has an invalid length.
[  107.131917][ T9040] netlink: 'syz.1.919': attribute type 8 has an invalid length.
[  107.179079][ T9038] netlink: 'syz.0.918': attribute type 4 has an invalid length.
[  107.189643][ T9038] netlink: 'syz.0.918': attribute type 4 has an invalid length.
[  107.656885][ T9065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.663973][ T9065] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  107.671213][ T9065] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  107.675718][ T9065] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  107.733308][ T9072] syzkaller1: entered promiscuous mode
[  107.735229][ T9072] syzkaller1: entered allmulticast mode
[  107.841530][ T9083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.942431][ T9089] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  108.125846][ T9109] netlink: 'syz.2.942': attribute type 10 has an invalid length.
[  108.130620][ T9109] bridge0: port 1(dummy0) entered blocking state
[  108.133430][ T9109] bridge0: port 1(dummy0) entered disabled state
[  108.136572][ T9109] dummy0: entered allmulticast mode
[  108.140427][ T9109] dummy0: entered promiscuous mode
[  108.148085][ T9109] bridge0: port 1(dummy0) entered blocking state
[  108.150863][ T9109] bridge0: port 1(dummy0) entered forwarding state
[  108.847964][ T9160] bridge0: port 3(team0) entered disabled state
[  108.929951][ T9160] team0 (unregistering): left allmulticast mode
[  108.932067][ T9160] team_slave_0: left allmulticast mode
[  108.934300][ T9160] team_slave_1: left allmulticast mode
[  108.936148][ T9160] team0 (unregistering): left promiscuous mode
[  108.938163][ T9160] team_slave_0: left promiscuous mode
[  108.942425][ T9160] team_slave_1: left promiscuous mode
[  108.946958][ T9160] bridge0: port 3(team0) entered disabled state
[  108.981709][ T9160] team0 (unregistering): Port device team_slave_0 removed
[  108.999626][ T9160] team0 (unregistering): Port device team_slave_1 removed
[  109.064927][ T9175] __nla_validate_parse: 13 callbacks suppressed
[  109.064936][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.961'.
[  109.108079][ T9179] syzkaller1: entered promiscuous mode
[  109.109988][ T9179] syzkaller1: entered allmulticast mode
[  109.115101][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'.
[  109.267170][ T9187] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  109.278282][ T9187] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  109.288192][ T9192] netlink: 'syz.0.967': attribute type 12 has an invalid length.
[  109.292523][ T9192] netlink: 32 bytes leftover after parsing attributes in process `syz.0.967'.
[  109.410841][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'.
[  109.509644][ T9211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.512899][ T9211] IPv6: NLM_F_CREATE should be set when creating new route
[  109.535257][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'.
[  109.544739][ T9211] lo: entered allmulticast mode
[  109.547230][ T9211] tunl0: entered allmulticast mode
[  109.565607][ T9211] gre0: entered allmulticast mode
[  109.584368][ T9211] gretap0: entered allmulticast mode
[  109.599442][ T9211] erspan0: entered allmulticast mode
[  109.611870][ T9211] ip_vti0: entered allmulticast mode
[  109.619106][ T9211] ip6_vti0: entered allmulticast mode
[  109.627585][ T9211] sit0: entered allmulticast mode
[  109.637875][ T9211] ip6tnl0: entered allmulticast mode
[  109.646329][ T9211] ip6gre0: entered allmulticast mode
[  109.652734][ T9211] ip6gretap0: left promiscuous mode
[  109.658884][ T9211] bridge0: port 1(dummy0) entered disabled state
[  109.662542][ T9211] bridge0: left promiscuous mode
[  109.665055][ T9211] bridge0: entered allmulticast mode
[  109.673121][ T9211] bond0: entered allmulticast mode
[  109.676175][ T9211] team0: entered allmulticast mode
[  109.688194][ T9211] nlmon0: entered allmulticast mode
[  109.690702][ T9211] caif0: entered allmulticast mode
[  109.694407][ T9211] batadv0: entered allmulticast mode
[  109.699786][ T9211] vxcan0: entered allmulticast mode
[  109.703875][ T9211] vxcan1: entered allmulticast mode
[  109.708613][ T9211] veth0: entered allmulticast mode
[  109.714720][ T9211] veth1: entered allmulticast mode
[  109.721552][ T9211] wg1: entered allmulticast mode
[  109.735699][ T9211] wg2: entered allmulticast mode
[  109.742822][ T9211] veth0_to_bridge: entered allmulticast mode
[  109.756248][ T9211] bridge_slave_0: left promiscuous mode
[  109.766553][ T9211] veth1_to_bridge: entered allmulticast mode
[  109.774171][ T9211] bridge_slave_1: entered allmulticast mode
[  109.778761][ T9211] veth0_to_bond: entered allmulticast mode
[  109.789213][ T9211] bond_slave_0: entered allmulticast mode
[  109.796588][ T9211] veth1_to_bond: entered allmulticast mode
[  109.803054][ T9211] bond_slave_1: entered allmulticast mode
[  109.812882][ T9211] veth0_to_team: entered allmulticast mode
[  109.820338][ T9211] team_slave_0: entered allmulticast mode
[  109.824502][ T9211] veth1_to_team: entered allmulticast mode
[  109.832988][ T9211] team_slave_1: entered allmulticast mode
[  109.836724][ T9211] veth0_to_batadv: entered allmulticast mode
[  109.841793][ T9211] batadv_slave_0: entered allmulticast mode
[  109.855672][ T9211] veth1_to_batadv: entered allmulticast mode
[  109.865789][ T9211] batadv_slave_1: entered allmulticast mode
[  109.869502][ T9211] xfrm0: entered allmulticast mode
[  109.877091][ T9211] veth0_to_hsr: entered allmulticast mode
[  109.882099][ T9211] hsr_slave_0: entered allmulticast mode
[  109.891505][ T9211] veth1_to_hsr: entered allmulticast mode
[  109.896810][ T9211] hsr_slave_1: entered allmulticast mode
[  109.902022][ T9211] hsr0: entered allmulticast mode
[  109.908276][ T9211] veth1_virt_wifi: entered allmulticast mode
[  109.911922][ T9211] veth0_virt_wifi: entered allmulticast mode
[  109.920617][ T9211] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  109.923997][ T9211] veth1_macvtap: entered allmulticast mode
[  109.929474][ T9211] veth0_macvtap: entered allmulticast mode
[  109.935450][ T9211] macvtap0: entered allmulticast mode
[  109.941803][ T9211] macsec0: entered allmulticast mode
[  109.949618][ T9211] geneve0: entered allmulticast mode
[  109.958075][ T9211] geneve1: entered allmulticast mode
[  109.962572][ T9211] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  109.966392][ T9211] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  109.970117][ T9211] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  109.977522][ T9211] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  109.990945][ T9211] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  110.007336][ T9211] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  110.010647][ T9211] ip6gretap1: entered allmulticast mode
[  110.014272][ T9211] geneve2: left promiscuous mode
[  110.016030][ T9211] geneve2: entered allmulticast mode
[  110.019574][ T9211] ieee802154 phy1 wpan1: entered allmulticast mode
[  110.022499][ T9211] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.025758][ T9211] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.028833][ T9211] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.031688][ T9211] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.035270][ T9211] geneve3: left promiscuous mode
[  110.041317][ T9211] bridge1: entered allmulticast mode
[  110.044033][ T9211] macsec1: entered allmulticast mode
[  110.046291][ T9211] bridge2: entered allmulticast mode
[  110.048462][ T9211] mac80211_hwsim hwsim9 wlan2: entered allmulticast mode
[  110.051636][ T9211] @: entered allmulticast mode
[  110.055430][ T9211] bond1: entered allmulticast mode
[  110.059260][ T9211] veth2: entered allmulticast mode
[  110.061520][ T9211] veth3: left promiscuous mode
[  110.064502][ T9211] veth3: entered allmulticast mode
[  110.067522][ T9211] bridge3: entered allmulticast mode
[  110.073463][ T9211] xfrm1: entered allmulticast mode
[  110.075887][ T9211] gretap1: left promiscuous mode
[  110.077523][ T9211] bond_slave_1.2: entered allmulticast mode
[  110.079879][ T9211] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  110.084313][ T9211] geneve0.1: entered allmulticast mode
[  110.086711][ T9211] bond2: entered allmulticast mode
[  110.090492][ T9211] bridge4: entered allmulticast mode
[  110.094987][ T9211] bridge5: entered allmulticast mode
[  110.096983][ T9211] veth4: entered allmulticast mode
[  110.098806][ T9211] veth5: entered allmulticast mode
[  110.100473][ T9211] vlan0: entered allmulticast mode
[  110.105856][ T9211] ip6gretap2: entered allmulticast mode
[  110.111900][ T9211] bridge6: entered allmulticast mode
[  110.117094][ T9211] ipvlan0: left promiscuous mode
[  110.119219][ T9211] ipvlan0: entered allmulticast mode
[  110.123208][ T9211] ip6tnl1: entered allmulticast mode
[  110.125648][ T9211] mac80211_hwsim hwsim6 veth1_to_bod: entered allmulticast mode
[  110.128905][ T9211] ieee802154 phy1 wpan0: entered allmulticast mode
[  110.131622][ T9211] bond3: entered allmulticast mode
[  110.133981][ T9211] bond4: entered allmulticast mode
[  110.319647][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.979'.
[  110.322881][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'.
[  110.390883][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'.
[  110.400340][ T9249] netlink: 52 bytes leftover after parsing attributes in process `syz.1.981'.
[  110.423091][ T9250] netlink: 36 bytes leftover after parsing attributes in process `syz.2.982'.
[  110.452351][ T9249] syzkaller1: entered promiscuous mode
[  110.459775][ T9249] syzkaller1: entered allmulticast mode
[  110.531290][ T9263] netlink: 'syz.0.984': attribute type 2 has an invalid length.
[  110.619305][ T9268] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  110.673812][ T9277] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  110.831879][ T9297] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  111.055355][ T9320] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  111.082086][ T9320] netlink: 'syz.0.997': attribute type 2 has an invalid length.
[  111.728550][ T9383] Unknown options in mask 700
[  111.732839][ T9383] netlink: 'syz.0.1007': attribute type 4 has an invalid length.
[  111.862363][ T9397] raw_sendmsg: syz.0.1008 forgot to set AF_INET. Fix it!
[  112.330769][ T9440] syzkaller1: entered promiscuous mode
[  112.332672][ T9440] syzkaller1: entered allmulticast mode
[  113.392700][ T9523] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  113.405903][ T9524] netlink: 'syz.2.1033': attribute type 20 has an invalid length.
[  113.409309][ T9523] netlink: 'syz.2.1033': attribute type 20 has an invalid length.
[  113.412983][ T9524] netlink: 'syz.2.1033': attribute type 20 has an invalid length.
[  113.417214][ T9523] netlink: 'syz.2.1033': attribute type 20 has an invalid length.
[  113.474316][ T9531] delete_channel: no stack
[  113.644746][ T5826] bridge0: port 3(syz_tun) entered disabled state
[  113.657240][ T5826] syz_tun (unregistering): left allmulticast mode
[  113.659907][ T5826] syz_tun (unregistering): left promiscuous mode
[  113.662595][ T5826] bridge0: port 3(syz_tun) entered disabled state
[  113.696247][ T9551] syzkaller1: entered promiscuous mode
[  113.698204][ T9551] syzkaller1: entered allmulticast mode
[  113.818818][ T9556] netlink: 'syz.0.1045': attribute type 1 has an invalid length.
[  113.836778][ T9556] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  113.842749][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.861422][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.926016][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.937238][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.985259][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  113.989244][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.085160][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  114.089019][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.121807][ T9578] __nla_validate_parse: 25 callbacks suppressed
[  114.121817][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1049'.
[  114.267749][   T13] bond2: left allmulticast mode
[  114.269489][   T13] bond2: left promiscuous mode
[  114.271986][   T13] bridge0: port 4(bond2) entered disabled state
[  114.281642][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  114.285942][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  114.288864][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  114.291657][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  114.294639][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  114.298043][   T13] bridge_slave_1: left allmulticast mode
[  114.300185][   T13] bridge_slave_1: left promiscuous mode
[  114.303249][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.308374][   T13] bridge_slave_0: left allmulticast mode
[  114.310370][   T13] bridge_slave_0: left promiscuous mode
[  114.312268][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.324259][   T13] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  114.382920][   T13] batman_adv: batadv0: Removing interface: ip6gretap1
[  114.592870][   T13] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  114.596385][   T13] bridge2 (unregistering): left promiscuous mode
[  114.762178][   T13] bond4 (unregistering): (slave bridge5): Releasing active interface
[  114.915493][   T13] bond1 (unregistering): Released all slaves
[  114.977812][   T13] bond0 (unregistering): (slave veth3): Releasing active interface
[  114.985454][   T13] bond0 (unregistering): Released all slaves
[  115.051819][   T13] bond2 (unregistering): Released all slaves
[  115.120501][   T13] bond3 (unregistering): Released all slaves
[  115.128686][   T13] bond4 (unregistering): Released all slaves
[  115.147192][   T13] bond5 (unregistering): Released all slaves
[  115.157587][   T13] bond6 (unregistering): Released all slaves
[  115.167996][   T13] bond7 (unregistering): Released all slaves
[  115.301587][ T9607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1057'.
[  115.384620][ T9611] netlink: 'syz.2.1058': attribute type 5 has an invalid length.
[  115.412247][ T9611] ip6erspan0: entered promiscuous mode
[  115.422289][ T9610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1058'.
[  115.513152][ T9610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  115.746558][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  115.825842][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'.
[  115.907225][   T13] hsr_slave_0: left promiscuous mode
[  115.916715][   T13] hsr_slave_1: left promiscuous mode
[  115.930069][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.933378][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.948098][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.951252][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.961555][   T13] veth1_vlan: left promiscuous mode
[  116.014066][ T9653] netlink: 'syz.0.1065': attribute type 1 has an invalid length.
[  116.041203][ T9655] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1066'.
[  116.077373][   T26] smc: removing ib device syz0
[  116.285268][   T13] team0 (unregistering): Port device team_slave_1 removed
[  116.314509][   T13] team0 (unregistering): Port device team_slave_0 removed
[  116.367191][ T5829] Bluetooth: hci0: command tx timeout
[  116.603098][ T5877] ==================================================================
[  116.606404][ T5877] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190
[  116.609879][ T5877] Read of size 8 at addr ffff88802ce922e8 by task kworker/1:4/5877
[  116.614037][ T5877] 
[  116.615015][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/1:4 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  116.615031][ T5877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.615040][ T5877] Workqueue: events smc_ib_port_event_work
[  116.615063][ T5877] Call Trace:
[  116.615070][ T5877]  <TASK>
[  116.615075][ T5877]  dump_stack_lvl+0x189/0x250
[  116.615096][ T5877]  ? __virt_addr_valid+0x1c8/0x5c0
[  116.615134][ T5877]  ? rcu_is_watching+0x15/0xb0
[  116.615147][ T5877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.615157][ T5877]  ? rcu_is_watching+0x15/0xb0
[  116.615167][ T5877]  ? lock_release+0x4b/0x3e0
[  116.615179][ T5877]  ? __virt_addr_valid+0x1c8/0x5c0
[  116.615191][ T5877]  ? __virt_addr_valid+0x4a5/0x5c0
[  116.615203][ T5877]  print_report+0xd2/0x2b0
[  116.615213][ T5877]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  116.615227][ T5877]  kasan_report+0x118/0x150
[  116.615240][ T5877]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  116.615254][ T5877]  __ethtool_get_link_ksettings+0x6e/0x190
[  116.615268][ T5877]  ib_get_eth_speed+0x15e/0x7b0
[  116.615282][ T5877]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  116.615296][ T5877]  ? do_raw_spin_unlock+0x4d/0x240
[  116.615311][ T5877]  rxe_query_port+0x93/0x3b0
[  116.615323][ T5877]  ib_query_port+0x170/0x830
[  116.615340][ T5877]  smc_ib_port_event_work+0x15a/0x940
[  116.615354][ T5877]  ? _raw_spin_unlock_irq+0x23/0x50
[  116.615369][ T5877]  ? process_scheduled_works+0x9ef/0x17b0
[  116.615380][ T5877]  ? process_scheduled_works+0x9ef/0x17b0
[  116.615392][ T5877]  process_scheduled_works+0xae1/0x17b0
[  116.615409][ T5877]  ? __pfx_process_scheduled_works+0x10/0x10
[  116.615424][ T5877]  worker_thread+0x8a0/0xda0
[  116.615433][ T5877]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.615444][ T5877]  ? __kthread_parkme+0x7b/0x200
[  116.615456][ T5877]  kthread+0x711/0x8a0
[  116.615466][ T5877]  ? __pfx_worker_thread+0x10/0x10
[  116.615474][ T5877]  ? __pfx_kthread+0x10/0x10
[  116.615483][ T5877]  ? _raw_spin_unlock_irq+0x23/0x50
[  116.615493][ T5877]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.615504][ T5877]  ? __pfx_kthread+0x10/0x10
[  116.615513][ T5877]  ret_from_fork+0x3fc/0x770
[  116.615522][ T5877]  ? __pfx_ret_from_fork+0x10/0x10
[  116.615530][ T5877]  ? __switch_to_asm+0x39/0x70
[  116.615539][ T5877]  ? __switch_to_asm+0x33/0x70
[  116.615547][ T5877]  ? __pfx_kthread+0x10/0x10
[  116.615556][ T5877]  ret_from_fork_asm+0x1a/0x30
[  116.615568][ T5877]  </TASK>
[  116.615570][ T5877] 
[  116.699694][ T5877] Allocated by task 5826:
[  116.701516][ T5877]  kasan_save_track+0x3e/0x80
[  116.703085][ T5877]  __kasan_kmalloc+0x93/0xb0
[  116.704578][ T5877]  __kvmalloc_node_noprof+0x30d/0x5f0
[  116.706419][ T5877]  alloc_netdev_mqs+0xa6/0x11e0
[  116.708066][ T5877]  rtnl_create_link+0x31f/0xd10
[  116.709737][ T5877]  rtnl_newlink_create+0x25c/0xb00
[  116.711416][ T5877]  rtnl_newlink+0x16d6/0x1c70
[  116.713316][ T5877]  rtnetlink_rcv_msg+0x7cf/0xb70
[  116.715264][ T5877]  netlink_rcv_skb+0x208/0x470
[  116.717043][ T5877]  netlink_unicast+0x75c/0x8e0
[  116.718837][ T5877]  netlink_sendmsg+0x805/0xb30
[  116.720534][ T5877]  __sock_sendmsg+0x21c/0x270
[  116.722238][ T5877]  __sys_sendto+0x3bd/0x520
[  116.723877][ T5877]  __x64_sys_sendto+0xde/0x100
[  116.725470][ T5877]  do_syscall_64+0xfa/0x3b0
[  116.727260][ T5877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.729461][ T5877] 
[  116.730459][ T5877] Freed by task 13:
[  116.732017][ T5877]  kasan_save_track+0x3e/0x80
[  116.733722][ T5877]  kasan_save_free_info+0x46/0x50
[  116.735367][ T5877]  __kasan_slab_free+0x62/0x70
[  116.736857][ T5877]  kfree+0x18e/0x440
[  116.738136][ T5877]  device_release+0x9c/0x1c0
[  116.739650][ T5877]  kobject_put+0x22b/0x480
[  116.741147][ T5877]  netdev_run_todo+0xd2e/0xea0
[  116.742823][ T5877]  default_device_exit_batch+0x81e/0x890
[  116.744712][ T5877]  ops_undo_list+0x525/0x990
[  116.746435][ T5877]  cleanup_net+0x4c5/0x800
[  116.748057][ T5877]  process_scheduled_works+0xae1/0x17b0
[  116.750000][ T5877]  worker_thread+0x8a0/0xda0
[  116.751602][ T5877]  kthread+0x711/0x8a0
[  116.752977][ T5877]  ret_from_fork+0x3fc/0x770
[  116.754496][ T5877]  ret_from_fork_asm+0x1a/0x30
[  116.756076][ T5877] 
[  116.756895][ T5877] The buggy address belongs to the object at ffff88802ce92000
[  116.756895][ T5877]  which belongs to the cache kmalloc-cg-4k of size 4096
[  116.761486][ T5877] The buggy address is located 744 bytes inside of
[  116.761486][ T5877]  freed 4096-byte region [ffff88802ce92000, ffff88802ce93000)
[  116.766198][ T5877] 
[  116.767194][ T5877] The buggy address belongs to the physical page:
[  116.769687][ T5877] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802ce90000 pfn:0x2ce90
[  116.773678][ T5877] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  116.776990][ T5877] memcg:ffff888022e92381
[  116.778691][ T5877] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  116.781573][ T5877] page_type: f5(slab)
[  116.783158][ T5877] raw: 00fff00000000240 ffff88801a44b500 ffffea0000b46010 ffffea0000c8fe10
[  116.786536][ T5877] raw: ffff88802ce90000 0000000000040003 00000000f5000000 ffff888022e92381
[  116.789728][ T5877] head: 00fff00000000240 ffff88801a44b500 ffffea0000b46010 ffffea0000c8fe10
[  116.792924][ T5877] head: ffff88802ce90000 0000000000040003 00000000f5000000 ffff888022e92381
[  116.795894][ T5877] head: 00fff00000000003 ffffea0000b3a401 00000000ffffffff 00000000ffffffff
[  116.799181][ T5877] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  116.802579][ T5877] page dumped because: kasan: bad access detected
[  116.804784][ T5877] page_owner tracks the page as allocated
[  116.806699][ T5877] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 55368601036, free_ts 0
[  116.813598][ T5877]  post_alloc_hook+0x240/0x2a0
[  116.815454][ T5877]  get_page_from_freelist+0x21e4/0x22c0
[  116.817377][ T5877]  __alloc_frozen_pages_noprof+0x181/0x370
[  116.819394][ T5877]  alloc_pages_mpol+0x232/0x4a0
[  116.821282][ T5877]  allocate_slab+0x8a/0x3b0
[  116.822980][ T5877]  ___slab_alloc+0xbfc/0x1480
[  116.824743][ T5877]  __kmalloc_noprof+0x305/0x4f0
[  116.826565][ T5877]  __register_sysctl_table+0x72/0x1340
[  116.828651][ T5877]  __addrconf_sysctl_register+0x398/0x530
[  116.830763][ T5877]  addrconf_sysctl_register+0x168/0x1c0
[  116.832760][ T5877]  ipv6_add_dev+0xd46/0x1370
[  116.834493][ T5877]  addrconf_notify+0x794/0x1010
[  116.836388][ T5877]  notifier_call_chain+0x1b6/0x3e0
[  116.838175][ T5877]  register_netdevice+0x1608/0x1ae0
[  116.840074][ T5877]  veth_newlink+0x5cc/0xa50
[  116.841860][ T5877]  rtnl_newlink_create+0x310/0xb00
[  116.843630][ T5877] page_owner free stack trace missing
[  116.845360][ T5877] 
[  116.846340][ T5877] Memory state around the buggy address:
[  116.848294][ T5877]  ffff88802ce92180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.851194][ T5877]  ffff88802ce92200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.854011][ T5877] >ffff88802ce92280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.856563][ T5877]                                                           ^
[  116.858880][ T5877]  ffff88802ce92300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.862063][ T5877]  ffff88802ce92380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  116.865261][ T5877] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  116.877652][ T5877] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  116.880316][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/1:4 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  116.884449][ T5877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.887695][ T5877] Workqueue: events smc_ib_port_event_work
[  116.889630][ T5877] Call Trace:
[  116.890996][ T5877]  <TASK>
[  116.892257][ T5877]  dump_stack_lvl+0x99/0x250
[  116.894170][ T5877]  ? __asan_memcpy+0x40/0x70
[  116.896071][ T5877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.898149][ T5877]  ? __pfx__printk+0x10/0x10
[  116.899683][ T5877]  panic+0x2db/0x790
[  116.901015][ T5877]  ? __pfx_panic+0x10/0x10
[  116.902454][ T5877]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  116.904473][ T5877]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.906506][ T5877]  ? print_memory_metadata+0x314/0x400
[  116.908317][ T5877]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  116.910509][ T5877]  check_panic_on_warn+0x89/0xb0
[  116.912577][ T5877]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  116.915008][ T5877]  end_report+0x78/0x160
[  116.916773][ T5877]  kasan_report+0x129/0x150
[  116.918695][ T5877]  ? __ethtool_get_link_ksettings+0x6e/0x190
[  116.920704][ T5877]  __ethtool_get_link_ksettings+0x6e/0x190
[  116.922549][ T5877]  ib_get_eth_speed+0x15e/0x7b0
[  116.924127][ T5877]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  116.925880][ T5877]  ? do_raw_spin_unlock+0x4d/0x240
[  116.927576][ T5877]  rxe_query_port+0x93/0x3b0
[  116.929103][ T5877]  ib_query_port+0x170/0x830
[  116.931021][ T5877]  smc_ib_port_event_work+0x15a/0x940
[  116.933267][ T5877]  ? _raw_spin_unlock_irq+0x23/0x50
[  116.935433][ T5877]  ? process_scheduled_works+0x9ef/0x17b0
[  116.937724][ T5877]  ? process_scheduled_works+0x9ef/0x17b0
[  116.940045][ T5877]  process_scheduled_works+0xae1/0x17b0
[  116.942371][ T5877]  ? __pfx_process_scheduled_works+0x10/0x10
[  116.944637][ T5877]  worker_thread+0x8a0/0xda0
[  116.946163][ T5877]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.948188][ T5877]  ? __kthread_parkme+0x7b/0x200
[  116.949872][ T5877]  kthread+0x711/0x8a0
[  116.951547][ T5877]  ? __pfx_worker_thread+0x10/0x10
[  116.953639][ T5877]  ? __pfx_kthread+0x10/0x10
[  116.955265][ T5877]  ? _raw_spin_unlock_irq+0x23/0x50
[  116.956944][ T5877]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.958678][ T5877]  ? __pfx_kthread+0x10/0x10
[  116.960288][ T5877]  ret_from_fork+0x3fc/0x770
[  116.961855][ T5877]  ? __pfx_ret_from_fork+0x10/0x10
[  116.963526][ T5877]  ? __switch_to_asm+0x39/0x70
[  116.965055][ T5877]  ? __switch_to_asm+0x33/0x70
[  116.966593][ T5877]  ? __pfx_kthread+0x10/0x10
[  116.968292][ T5877]  ret_from_fork_asm+0x1a/0x30
[  116.970088][ T5877]  </TASK>
[  116.972171][ T5877] Kernel Offset: disabled
[  116.973903][ T5877] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:29:38  Registers:
info registers vcpu 0

CPU#0
RAX=b301554f6e3cbc00 RBX=ffffffff81976c78 RCX=b301554f6e3cbc00 RDX=0000000000000001
RSI=ffffffff8d998b14 RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055f46b6260c8 CR3=0000000110e18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000ff00ff00 XMM05=0000000000000041 000000312f616973
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=2f74656e2f34316d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000391f090
R8 =ffff888020870237 R9 =1ffff1100410e046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98d2 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000108ff6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc9bc785478 00007fc9bc785450 XMM03=00007fc9bc785488 00007fc9bc785480
XMM04=00007fc9bd2ed100 00007fc9bc785440 XMM05=00007fc9bc785458 00007fc9bc7854a0
XMM06=00007fc9bc785498 00007fc9bc785490 XMM07=00007fc9bc785488 00007fc9bc785480
XMM08=4750d91efab8562a a57ff8487bcd07a8 XMM09=0000000000000000 00007fc9bc611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
