last executing test programs:

45.105439545s ago: executing program 3 (id=2779):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x14, r1, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2c048880}, 0x4000090)

45.054851711s ago: executing program 3 (id=2781):
r0 = socket$netlink(0x10, 0x3, 0xa)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8000}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5f585994}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xec5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x140, 0x10, 0xff05, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4a00, 0x0, 0xc82}, [@IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x697ac27e, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x7d6}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @local}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4fcf, 0x21b, 0x5}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x9, 0xfab, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7fff, 0xf, 0x40}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x5d3, 0xff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xa4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffc, 0x18}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0xc0f}}, @IFLA_VF_VLAN={0x10, 0x2, {0x36, 0x261, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x91, 0x8}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1, 0x8, 0x8}}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x458c1}, 0x0)
socket$netlink(0x10, 0x3, 0xa) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8000}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5f585994}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xec5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x140, 0x10, 0xff05, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4a00, 0x0, 0xc82}, [@IFLA_VFINFO_LIST={0x120, 0x16, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x697ac27e, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x7d6}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @local}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4fcf, 0x21b, 0x5}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x9, 0xfab, 0x5}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7fff, 0xf, 0x40}}, @IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x5d3, 0xff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0xa4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffc, 0x18}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0xc0f}}, @IFLA_VF_VLAN={0x10, 0x2, {0x36, 0x261, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x91, 0x8}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1, 0x8, 0x8}}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x458c1}, 0x0) (async)

44.918709413s ago: executing program 3 (id=2783):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = socket$inet(0x2, 0xa, 0x7)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x4}}, 0x10)
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='hsr0\x00')
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={<r5=>r1, 0x5, 0x8000, 0x3fff8})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5)
setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000200), 0x4)
sendmsg$tipc(r3, &(0x7f0000000440)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x2, {{0x43, 0xfff}, 0x2}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="8efdabda24c3815cfc70802ea935cd9e6a1b43cb060a4f68e8bd22adb8a8300e6d7a94ae7ef6e262f822b1031c82567653387214130ce652c1a5185950683f11cdf5d09cd5870d9c810a7ce028180b360a5c51bb612f90ee23627576e7702e0a57f5e3297976b39335cc9024ac", 0x6d}, {&(0x7f0000000300)="80763fd6b79573f4f5628452048fff29e3bd536cb0ef9e6351577558e561482e5f768d6ea2224da1071ce144fa6d06f23192c2fc0dba82d531169daa92f3872fee276bed10f6ef1a94e73477af8e823b1b7028ba8bb1b727b8a86e0deefb0c5e074e7f6de1c3aa885338f0bb34bd8c8a1addd5baaad48b3359262d085a81c0609b8f", 0x82}, {&(0x7f00000003c0)="56c2c06cd1d4c18aee07ab95681781b4fa67e9f47a63e137", 0x18}], 0x3, 0x0, 0x0, 0x84}, 0x8010)
syz_genetlink_get_family_id$team(&(0x7f0000000480), r5)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x12}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x6f99894743cbfd7c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000005c0)={<r6=>0x0, 0xa}, &(0x7f0000000600)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000640)={0x4, 0x97a, 0x4, 0xf9cf, 0x10001, 0xf612, 0x8, 0x1, r6}, 0x20)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0x6c01})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x80, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x80}, 0x1, 0x0, 0x0, 0xc804}, 0x810)
r7 = openat$cgroup_ro(r5, &(0x7f0000000800)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f0000000840)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000880)=0x2c)
ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000980)={{r0}, 0x0, 0x6, @inherit={0x90, &(0x7f00000008c0)={0x0, 0x9, 0x9, 0xffffffffffffffd2, {0x0, 0xf429, 0x5807, 0x6, 0xfffffffffffffd72}, [0x3ff, 0x1, 0x9, 0xd, 0x2, 0x1, 0x3, 0x89f, 0x9]}}, @devid})
bind$unix(r5, &(0x7f0000001980)=@file={0x1, './file0\x00'}, 0x6e)
pselect6(0x40, &(0x7f0000001a00)={0x1, 0x70c91054, 0xffffffffffff8358, 0x0, 0x7d7, 0x3, 0x6, 0x3}, &(0x7f0000001a40)={0xfffffffffffffffe, 0x3, 0x8, 0x8, 0xb95a, 0x4, 0xfffffffffffffffb, 0x2}, &(0x7f0000001a80)={0x6, 0x9, 0x1, 0x3, 0x1, 0xfffffffffffffff2, 0x9, 0xbff}, &(0x7f0000001ac0)={0x0, 0x989680}, &(0x7f0000001b40)={&(0x7f0000001b00)={[0x6]}, 0x8})
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000001b80), 0x1)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4)
sendmsg$nl_route_sched(r5, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c80)=@deltaction={0x1cc, 0x31, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xca}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x782f}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x247b}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x69e}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0)
ioctl$NS_GET_NSTYPE(r8, 0xb703, 0x0)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001f40), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x50, r9, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x46}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000)

44.739988s ago: executing program 3 (id=2787):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=<r1=>0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="08001b"], 0x30}}, 0x4000085) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', <r4=>0x0}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440e5}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffe96)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r7 = getpid() (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500006c61104b0000000200000004d63fb97adb9f9e66cabba206308f91c8c3b414f0d3d50ee5e2a76b133530fddf871a23546aec85769760"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002700018f2831552a50c97f00"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x20004830) (async)
syz_open_procfs$namespace(r7, 0xfffffffffffffffe) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async)
r9 = socket$kcm(0x2, 0x3, 0x2)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r10], 0x20}}, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async)
sendmsg$TIPC_NL_MON_GET(r10, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r11, 0x11c, 0x2, &(0x7f0000000040)=""/167, &(0x7f0000000100)=0xa7)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYRES64, @ANYRESHEX=r1, @ANYRES64=r9, @ANYRES32=r6, @ANYBLOB="f8056ec743975d96c14d3e7fdfba6790a92adf4dc44e4674db759cc83f7842d418d7ca28ff1adfa7ddf9cac16cfaa87457e36072893d0b28fbee06b0d3fae9d2e0bef488eafd850cf60e390a35b16dcb49c67f63b71adc8049d774601cba10d670c8a43912b11d4c00000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x24008000}, 0x24040084)

44.727097639s ago: executing program 3 (id=2788):
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1={0xff, 0x0}, @loopback={0x0, 0xffff888101827518}}})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000100)) (async)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) (async)
splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x71, '\x00', r0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x25, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x85}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @map_fd={0x18, 0xb}, @ldst={0x1, 0x3, 0x0, 0x0, 0x9, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xd1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x80, 0x4d, &(0x7f00000001c0)=""/77, 0x41100, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x1, 0x1, r5], &(0x7f0000000500)=[{0x4, 0x1, 0x4, 0x2}, {0x3, 0x1, 0xa}, {0x0, 0x3, 0x7, 0x7}, {0x2, 0x2, 0x0, 0x3}], 0x10, 0x400}, 0x94)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})

44.389382677s ago: executing program 3 (id=2793):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) (async)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000004200)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="c52d8baf02", 0x5}, {&(0x7f0000000080)="59819e738eea5e1a825cd2a7cbd3c0e0987d33385933f2506cfe3637c79644da84f7e2fa4fd5", 0x26}, {&(0x7f00000000c0)="27f21a84a8585f0506cac8e5f0b78611d196e918e7", 0x15}], 0x3, 0x0, 0x0, 0x88042}], 0x1, 0x40010)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r5=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5, 0x7}, 0x10)

43.912718315s ago: executing program 32 (id=2793):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) (async)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000004200)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="c52d8baf02", 0x5}, {&(0x7f0000000080)="59819e738eea5e1a825cd2a7cbd3c0e0987d33385933f2506cfe3637c79644da84f7e2fa4fd5", 0x26}, {&(0x7f00000000c0)="27f21a84a8585f0506cac8e5f0b78611d196e918e7", 0x15}], 0x3, 0x0, 0x0, 0x88042}], 0x1, 0x40010)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r5=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5, 0x7}, 0x10)

13.693468288s ago: executing program 0 (id=3021):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@allocspi={0x204, 0x16, 0x1, 0x70bd28, 0x25ffdbfb, {{{@in6=@local, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x29}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x1960}, {0x9, 0x6, 0xfffff800}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x2b}, 0x2, @in=@loopback, 0x3506, 0x3, 0x0, 0x3, 0x4, 0x9, 0xfff}, {{@in=@multicast1, 0x4d2, 0x33}, 0x2, @in=@loopback, 0x3502, 0x0, 0x1, 0x2, 0x5, 0x0, 0x10000}, {{@in6=@remote, 0x4d4, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x3506, 0x3, 0x0, 0x8, 0x9, 0x7, 0x34d}, {{@in=@local, 0x4d5, 0x32}, 0x0, @in6=@private2, 0x3503, 0x4, 0x2, 0x5, 0x8, 0xfffffffc, 0x1}]}, @proto={0x5}]}, 0x204}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@allocspi={0x204, 0x16, 0x1, 0x70bd28, 0x25ffdbfb, {{{@in6=@local, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x29}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x1960}, {0x9, 0x6, 0xfffff800}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x2b}, 0x2, @in=@loopback, 0x3506, 0x3, 0x0, 0x3, 0x4, 0x9, 0xfff}, {{@in=@multicast1, 0x4d2, 0x33}, 0x2, @in=@loopback, 0x3502, 0x0, 0x1, 0x2, 0x5, 0x0, 0x10000}, {{@in6=@remote, 0x4d4, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x3506, 0x3, 0x0, 0x8, 0x9, 0x7, 0x34d}, {{@in=@local, 0x4d5, 0x32}, 0x0, @in6=@private2, 0x3503, 0x4, 0x2, 0x5, 0x8, 0xfffffffc, 0x1}]}, @proto={0x5}]}, 0x204}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014)
r1 = epoll_create1(0x0)
epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8)
close(r1) (async)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000002000631138000402000000850000000500000085000000b500fb009500a505000000006bcf73e94e7161755936a79260621f4b25"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x6}, 0x94)

13.692945074s ago: executing program 0 (id=3022):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000000c0)='\a', 0x1}, {0x0}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x30}, 0x4)

13.675414362s ago: executing program 0 (id=3025):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000300)=""/234, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x4000040)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010405000000000000000000070000000a0002000000848086"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
close(r1)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r6=>0x0})
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000540)={0x14, 0x6, {0x80, @usage=0x3ff, 0x0, 0x0, 0x5, 0xe, 0xb7, 0xae91, 0x410, @struct={0xaa6, 0xfffffffa}, 0xffff, 0x2, [0x1ff, 0x5, 0x9, 0x8000000000000000, 0x3, 0x3]}, {0x7, @usage=0x6, <r9=>0x0, 0x7, 0xfffffffffffffff8, 0x3, 0x7, 0x9, 0x20, @struct={0xf1f, 0x4}, 0x800, 0x8, [0x7, 0x6, 0x5, 0x4, 0x80000001, 0x8]}, {0x60000, @struct={0x10, 0x10a}, 0x0, 0x6, 0x5205, 0x8, 0x2, 0x200, 0x410, @struct={0x800, 0x5}, 0xa, 0xc, [0x0, 0x401, 0x2, 0x1, 0x38a, 0x24]}, {0x80000001, 0x0, 0x8}})
ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000000100)={{r3}, {@val={r9}, @actul_num={@void, 0x35b2, 0x65}}})
ioctl$PPPIOCATTCHAN(r7, 0x40047438, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00')
unshare(0x22020600)
socket$rds(0x15, 0x5, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32=r10, @ANYBLOB], 0x24}}, 0x0)

13.67461663s ago: executing program 0 (id=3027):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000003280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x10000}}], 0x1, 0x0)
close(r1)

4.580276424s ago: executing program 2 (id=3087):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x5, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0x8) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132})
write$cgroup_subtree(r1, &(0x7f0000000000), 0xfe3a)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xd}], 0x9, 0x4022, 0x0)

4.335851016s ago: executing program 2 (id=3092):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r3, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f00000002c0)=0x48, 0x800)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000019c0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000140)=""/28, 0x1c}], 0x7}, 0x100)

2.784136509s ago: executing program 4 (id=3101):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000300)=<r4=>0x0)
syz_open_procfs$namespace(r4, &(0x7f0000000080)='ns/net\x00')
unshare(0x6a040000)
r5 = socket$inet(0x2, 0x3, 0x2)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRESDEC=r6], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000000)={0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @loopback}, {0x1, @multicast}, 0x4, {0x2, 0x4e23, @rand_addr=0x64010100}, 'veth1_vlan\x00'})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="95d71c80", @ANYRES16=r10, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d, 0x40c00}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1d}]}, 0x58}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x16c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x200}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x3, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x42}, 0x4c000)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
sendto$inet(r5, 0x0, 0x0, 0x4000, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10)

2.130292745s ago: executing program 1 (id=3105):
syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@noop, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010101, 0x7}]}, @cipso={0x86, 0x20, 0x3, [{0x2, 0x5, "84924d"}, {0x6, 0x2}, {0x2, 0xf, "d109567cb50ec760777fb80755"}, {0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0x2, 0x4}, {0xc, 0x2}, {0x0, 0x2}, {0x5, 0x4}]}]}, {0x0, [0x30, 0x67, 0x6c, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000f00)=""/4096, 0x60, 0x1000, 0x0, 0x9}, 0x28)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x111000, 0x0)
ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f00000001c0)={'ip6gretap0\x00', 0x400})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x3, 0x11, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x69}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbf}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = epoll_create1(0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r5, 0xec776000)
epoll_wait(r5, &(0x7f0000002a80)=[{}], 0x1, 0xffff0001)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000000))
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r7 = epoll_create(0x6)
setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000100)={@broadcast, @empty, @rand_addr=0x64010100}, 0xc)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000140)={0x40000000})
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r5, 0x0)
sendfile(r5, r6, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x9d32f4b2e0c65377})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r4, 0x26}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r8, r4, 0x5}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

2.076430067s ago: executing program 0 (id=3029):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x3, 0x1, 0x4, 0x9, 0x10, 0xffb, 0x9, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0xfffffff8, 0x1000, 0x9, 0x5, 0x6, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0x1000b, 0x40, 0xbed4, 0x8, 0x3, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x4, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4008, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x9, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x1, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x40000002, 0xfffffffe, 0x84, 0x100, 0x5, 0xffff, 0x81, 0xb, 0x5, 0x20006, 0x9, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x7, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
unshare(0x400)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000020756c250000000000202020611af8ff00000000bfa100000000000007010000f8ffffffb70a000008000000b70300000500001b85000000b800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000080), 0x1003, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffffc, 0x6, r4}, 0x38)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r6)
sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001a80)=ANY=[@ANYBLOB="b4020000", @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf251300000008000100", @ANYRES32, @ANYBLOB="c4001380", @ANYRES32], 0x2b4}, 0x1, 0x0, 0x0, 0x4000}, 0x8c4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r8 = socket$netlink(0x10, 0x3, 0x15)
bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000300)={"54b08d06a3e8366c4f8af97784793f17", r5, 0x0, {0x1, 0xd}, {0x2, 0xc484}, 0x6, [0x1, 0x400, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x7fff, 0x3a, 0x5, 0x1, 0x4, 0xffff, 0x2, 0xb, 0x10001]})
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x9, &(0x7f0000000240)=[{0x3, 0x9, 0x6, 0x5}, {0x2, 0x5, 0x89, 0x6}, {0x400, 0x7, 0xf, 0x7fff}, {0x1, 0x1, 0x0, 0xc0f5}, {0x7ff, 0xfc, 0x5, 0x6}, {0xc97b, 0x2, 0x6, 0xb7}, {0x100, 0x5, 0x7, 0x8}, {0x8, 0x29, 0x5, 0xb2b}, {0xda, 0xfe, 0x0, 0x9}]})
unshare(0x260a0380)
r9 = socket(0x2d, 0x2, 0x0)
connect$vsock_stream(r9, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000600)={0x4, {{0xa, 0x4e22, 0x7, @local, 0xe826}}}, 0x88)

1.964331179s ago: executing program 4 (id=3106):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0x200000000000024f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x34, r4, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x6844}, 0x40800)
write$cgroup_type(r2, &(0x7f0000000080), 0x9)

1.90095189s ago: executing program 4 (id=3107):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r2, 0x601, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0)
unshare(0x22020400)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30, 0x6f, 0x5f, 0x2e, 0x61]}}, 0x0, 0x2e}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r3, 0x2, 0x0}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001140)={0x1118, 0x36, 0x10, 0x70bd27, 0x25dfdbff, {0x14}, [@nested={0x10, 0x117, 0x0, 0x1, [@typed={0xc, 0xd8, 0x0, 0x0, @u64=0x6}]}, @nested={0x8, 0xb3, 0x0, 0x1, [@nested={0x4, 0x30}]}, @generic="19df0c0bebd4f9f64b561791c22aac92a97e5c7ac242146d39e11e3b2d477fc93094de452cf01241939496cb933860a385bdd37214cc58544a791f7246b1910db0123090738cfbd55ba911a19f366f73ca44e5f6fcb6c5919188428cf26a76ad0cb1365a1f218b733078d2e18f352a24822d9f7988fac3ddb0426f232d46100b9d601aaa9726864abd631429796ebca36f27406183937d1f795352f75927341f314565fa9f9706930d80b1f4e98015d71387359f81a20346e001b4c5a21c447cec", @nested={0x1024, 0x58, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @ipv4=@local}, @generic="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", @typed={0x14, 0xef, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @nested={0x4, 0x6}]}, @nested={0x4, 0xc9, 0x0, 0x1, [@generic]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x4000081}, 0x2c0080d0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a00000000000081116f000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

1.730182365s ago: executing program 1 (id=3108):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000e0687d0b1150000040000006000000000000009500000000000000fee9007c29d9"], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @ethernet={0x306, @remote}, @nl=@unspec, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1.72256738s ago: executing program 4 (id=3109):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x2, 0x3, 0x100000001)
setsockopt(r1, 0xff, 0x9, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000a0000000400000002"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x95}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20)

1.661155669s ago: executing program 2 (id=3111):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xfffffffc}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r1 = socket(0x11, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRES16=r0, @ANYRESOCT], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r5)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
close(0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x44, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x97}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x100}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084)
writev(r4, &(0x7f00000002c0), 0x2)

1.50764579s ago: executing program 4 (id=3112):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@mpls_delroute={0x44, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1c, 0x0, 0x0, 0xd, 0x0, 0x3, 0xfe, 0x9, 0x400}, [@RTA_VIA={0x14, 0x12, {0xf, "ca8d132d290c3968d72ff0e7038e"}}, @RTA_VIA={0x14, 0x12, {0x2, "67c03cedc31b1b7a970ea1d4351a"}}]}, 0x44}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40080c0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x8044)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0)

1.494757781s ago: executing program 0 (id=3113):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
unshare(0x12030000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

1.440571579s ago: executing program 1 (id=3114):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) (async)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockname$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@netrom, @rose, @default, @netrom, @remote, @null, @default, @netrom]}, &(0x7f0000000300)=0x48)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
write(r7, &(0x7f0000000040)="cb", 0xfffffdef) (async)
write(r7, &(0x7f0000000040)="cb", 0xfffffdef)
setsockopt$sock_int(r7, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00) (async)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf00)

1.319887436s ago: executing program 4 (id=3115):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x40, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e23}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}}, 0x40000)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0xc8, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xf, 0x50, 0x6, 0x1, 0x2, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0xdc, 0xce, 0xff00, 0x9, 0x2, 0x4, 0x3, 0x6}}, {0x10, 0x2, [0x87d, 0xe8, 0x2, 0x6, 0x8, 0x800]}}, {{0x1c, 0x1, {0x2, 0x7, 0xc1c7, 0x5, 0x0, 0x80000001, 0x1000, 0x2}}, {0x8, 0x2, [0xfffc, 0x5]}}]}]}, 0xc8}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0xfff, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x91, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x3, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x28698000)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050800000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r9, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000000000000000000000000000064000100848b0100"/46], 0x2e)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1e)

1.297150549s ago: executing program 2 (id=3116):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x800)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r4, 0x5c2a7000)
sendmsg$nl_route(r4, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c7000fbdbdf250a2068fd", @ANYRES32=r2, @ANYBLOB="080009000600000014000200fc01000000000000000000000000000014000600020000005b1600000800000000000000140006000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x4084)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
socket(0x1e, 0x4, 0x7ffffffe)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtaction={0x58, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_sample={0x40, 0x1, 0x0, 0x0, {{0xfffffffffffffe3e}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0xd026}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x1}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x58}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd]}})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)

839.273494ms ago: executing program 1 (id=3117):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e40)={r0, 0xe0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0], 0x0, 0x2d, &(0x7f0000001c40)=[{}], 0x8, 0x10, &(0x7f0000001c80), &(0x7f0000001cc0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000001d00)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001e80)={'wg0\x00', <r3=>0x0})
sendmmsg$inet(r1, &(0x7f0000001f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000280)="8d3e2a530b848661c51b7c6cae4c8eb3c2f2850b8cabfb5e035d40e4b9a877ff1cfead35257ca2679bb05c65ee99ce271eaffa9b06922ae903123568647f34c471b845fb3397040ca7b3da0b79ddc994dbc22adafb4cb539b0c2b06943481e9f8269e53e04b7b9e8f3a4ea505bc85c238ee512e686cccb5f5a827749014f23c83315634e5864030a008ea93063b8159359dff97b6eeb52e59fb650f9f4845e1bca9b4241809fc508940a9c9dd8180380ca08dda6aa9e15baf0423f1f7b5282d8701807d83b", 0xc5}, {&(0x7f00000000c0)="c56cc0a391b307d3944a3f67d5533b631ca54c32a2c7f47f2f5e0a54e2ed9775dbbe16", 0x23}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000380)="d185f0161eccad35161587b8951b5dcdf7ac502f16664be85956de5929d033e48f23fb0576e0073649bfc40802f3958e9347e3d82eb9b13c4da0c01ea7f77a23a3132ef8d5d57484718e5a7f138c9008efb643faedc2ca7752fe444870c6ecfaad70df3a82afd275959213755bb778b33ef743a5ee45b148e9ebef469b0348f9e69cf261daa1b5469fea1ff6d9f2", 0x8e}, {&(0x7f0000000440)="906efab19bfbc1e0c0ca5c75582d53b2aed4bde1c080ec174ac73af7d0ce388202614a37f3179dc8011382c03142f81155618b26574fc4bba047251a870013c56b76c58336e8e5e88f8fef2320a610eca36bb4b6bd76f764bb6ae76fb40bf1433aafc5ab1459de6f059e3622cf49b82806241c14ea04c1fd1622f0378066eb1598c9866747dbae2443a9fec7611805f78b7c5b89a44509016c9593554cde49b0e9245bfcaa868091c3fc3d923bce3d82d02f71bbb3d4b74cc935e2addfc86ac4186104afa461f99cad77a262df57b1", 0xcf}, {&(0x7f0000000540)="dd9fe080211c07650e7498b779f87e8be0eaff3150bc3a39742db4ed642cb198e2494d5fe2fca43971007f0862f799f9e016074f9f4d8446b2a8d2b541bd2c84e269a78031c407eee4b1d9ea31cca3b3fd8cb2f28baae2ca79082c4e01191d41f33d8eab7445c22e4a5732c0164c6ecdbd01d4ee17736cda9a2e0039264ff5a699397972dcf853ee825259d3abe943", 0x8f}, {&(0x7f0000000180)="255a96db13ab5b7eaaed290b50c577c8d29e2e8e38ad7e820821c8fb", 0x1c}, {&(0x7f0000001640)="ede65413e65a2a1f8f045ad5d28966e941c81cab2ca4209abad811f418247a696cb3a5ba3262cb89dc9c2b6f071e4767e73ce6324c22d566e19e4e3fbd5c180f3f54d530e1ddc282ab066d99f0b42e80d15cda770f23650dbec0ad4f5dcac0a644ebc9d978fb608edea77c469cf48301c0f1367a1081423b67c24381ac1089c69cfa8aad83bcc3e0697ba3ac752591cfb58b8cc02ea704593e39dba4f7012671a5331ed23008505eab9dd498a1acde36ad5f27871dbe58263181df8df95dc32f39efd695603409ca4d9f2ca6b33fcfa85eb61a8d029263b48d221d08b6bef05734343b529cc2b064da80ad8659be01a4c29c1272e1", 0xf5}], 0x8, &(0x7f00000017c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x24}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9ad}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@generic={0x7, 0x4, "8f18"}, @timestamp_prespec={0x44, 0x54, 0xf8, 0x3, 0x4, [{@loopback, 0x200}, {@broadcast, 0x7}, {@private=0xa010102, 0x3}, {@multicast2}, {@empty, 0x4}, {@empty, 0x8001}, {@empty, 0x2}, {@multicast2, 0x40}, {@private=0xa010101, 0x37e}, {@rand_addr=0x64010101, 0x6}]}, @cipso={0x86, 0x6, 0x3}, @generic={0x82, 0x3, "bf"}, @timestamp={0x44, 0x1c, 0x16, 0x0, 0x2, [0x2, 0x2, 0xdeaf, 0x10, 0x0, 0x5]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x16, [@empty, @empty, @rand_addr=0x64010101, @multicast2]}, @timestamp={0x44, 0x2c, 0x23, 0x0, 0x1, [0x1ff, 0x5, 0xd973, 0x1, 0x9, 0x7, 0x4, 0x8, 0x7, 0x2]}]}}}], 0x118}}, {{&(0x7f0000001900)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000001940)="15e8e289629106a658293de59d8e0bd2415a85f5568179861d21f9c9e52b1199bf6f2eadc5196fa98ee569db0057f351f57bd767134d57fc2d71245dfe5de7c40c98a37c5ee35837a2db53dc057fccdec9544392fcef44262d11976b52062cf94c772837bc9379", 0x67}, {&(0x7f00000019c0)="73a173c575bd226aebc1994fa294b4393b4b77", 0x13}, {&(0x7f0000001a00)="1df256fb9d4d8f944cd3b20927e6e44820f52c23b11bfecd373a24f56c74a8b3c19a2f4dbb6b59c06604929b481ea0921cc858dc0707455590fd7a0f85ed027748d17bd5713c6e850f16a2824561e75bdc5cac468d1d879707aae95100115c532608436aed7d3c467cadd24ed8af08485a529d99c762abb5eb32293bb2cc178f8d719479c24bc956b0df4456d163e96d26063f16be9de4a368098d18664b14659142ff479269f35b2a6bc42516c89c3d065a6c998d3680a04c49531aa0028a12adffd725a3be5d0c2badb5cbed167d290c5c81c3a60de8", 0xd7}, {&(0x7f0000001b00)="1f0d3cee7c6361a2846975a7f9bac3774bd453e075d5b0316ba478d7e9b2aa410ba8ccc93dbb9e9b97e404af21e99882323e5d69affd", 0x36}], 0x4, &(0x7f0000001ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x27}, @loopback}}}], 0xb8}}], 0x2, 0x48080)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
close(r4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="0909000000000000000001"], 0x68}}, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0xd1383000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
r8 = accept4(r7, 0x0, 0x0, 0x0)
ioctl$int_in(r8, 0x5452, &(0x7f0000000100)=0x8000)
sendmsg$alg(r8, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002800)='a', 0x1}], 0x1, 0x0, 0x0, 0x20000044}, 0x24040011)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)

836.901256ms ago: executing program 5 (id=3118):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000440)=@newtaction={0x84, 0x30, 0x53b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_simple={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f, 0x0, 0x0, 0xfffffffd}}]}, {0x1c, 0x6, "621e181341cca12d20d48776743f8e3d8f5949ef97b7c329"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@dev, @loopback, <r2=>0x0}, &(0x7f0000000100)=0xc)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x1, 0x803, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000280)=0xd56, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000428bd7000fbdbdf250f00000008000600", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB="050033000200000005002e000100000005002e0000000000080034068200000005003800000000000500330002000000"], 0x54}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r6, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="28b3", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000002c0)={<r7=>0x0, 0x8, 0x30}, &(0x7f00000003c0)=0xc)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000040)={r7, 0xc, 0x100}, 0x8)

536.065016ms ago: executing program 2 (id=3119):
r0 = socket$inet(0x2, 0x4, 0x5)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x3}, &(0x7f0000000100)=0x90)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r2, 0x7f}, 0x8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000071028000000000008719000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)

530.044499ms ago: executing program 5 (id=3120):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
socket$kcm(0x11, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000880)={0xa, 0x4e27, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc02000000000000d0bb2d3fdc768bfa8010"], 0x10e0}}], 0x13, 0x880) (async)
shutdown(r1, 0x1) (async)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
sendmmsg$inet6(r2, &(0x7f00000008c0), 0x0, 0x408c0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000206010200000000000000000005000400000000000c000780080012400010000014000300686173683a69702c706ff71f597ae852a57472742c69700005000100070000000900020073797a300000000009"], 0x58}}, 0x8000) (async)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0}) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

514.312247ms ago: executing program 1 (id=3121):
pipe(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="b40800000000000073113300005a0000008503000002000008b70042f17235b0e312470000000000009500c20000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="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", 0xfa, 0x80, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0xc6e9f000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0xffffe000)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
shutdown(r2, 0x2)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001600)=<r7=>0x0, &(0x7f0000001640)=0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001700)={'ip6_vti0\x00', &(0x7f0000001680)={'ip6gre0\x00', <r8=>0x0, 0x4, 0x0, 0x57, 0x9c33, 0x1a, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x10, 0x1, 0x8, 0x1}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000001780)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001740)={&(0x7f0000001880)={0x108, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x108}}, 0x810)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "1007371d14ec5bec", "fb327dc96021a92ce2170f70b57be010", "8a860d98", "228c58937fbd45d1"}, 0x28)
write(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0xe, &(0x7f0000000200)=ANY=[@ANYRES32=r8], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x1}, 0x10}, 0x94)

377.547931ms ago: executing program 1 (id=3122):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000002840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000100)=0x60, 0xc0000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a00028008000a00"/32, @ANYRES8=r0, @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000008eb8b6aff4ac8400000001000000000000000c0000000000000000000000000000000000f43e321862b782e028000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async)
socket(0x11, 0x800000003, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) (async)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1d001c00eeffffff020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8fffeff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r10}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r10}, 0x38)

296.299871ms ago: executing program 5 (id=3123):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)

224.955517ms ago: executing program 5 (id=3124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r5, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4) (async)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r5, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4)
ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000300))
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0xc4, r5, 0x5, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xa1, 0x2a, [@random_vendor={0xdd, 0x98, "f4acdbfdbcb72df0efadff840b4d01be4f4c59eda1a4ba3d7c8c9fddbb74d33e66f839b8cee8fecbf0ca4a2745e4c167bb058bbaceadad8d56fa23002920b4786b31328438716b991ca981c1133ebed0bab7104f4350c3c319f78293e489a6fedf9be0d05145006ffc08cfdbdba769bfbe56d0e37c97618bc49c9845e7060aa66f7cc76c50a0d7b438a12a5843be29951e55d5799a463e5a"}, @dsss={0x3, 0x1, 0x6c}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x44) (async)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0xc4, r5, 0x5, 0x70bd28, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xa1, 0x2a, [@random_vendor={0xdd, 0x98, "f4acdbfdbcb72df0efadff840b4d01be4f4c59eda1a4ba3d7c8c9fddbb74d33e66f839b8cee8fecbf0ca4a2745e4c167bb058bbaceadad8d56fa23002920b4786b31328438716b991ca981c1133ebed0bab7104f4350c3c319f78293e489a6fedf9be0d05145006ffc08cfdbdba769bfbe56d0e37c97618bc49c9845e7060aa66f7cc76c50a0d7b438a12a5843be29951e55d5799a463e5a"}, @dsss={0x3, 0x1, 0x6c}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x44)

190.394726ms ago: executing program 2 (id=3125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4000000}]}], {0x14, 0x10}}, 0x80}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=@newtaction={0xac, 0x30, 0xb, 0x5, 0x0, {}, [{0x98, 0x1, [@m_ct={0x94, 0x1, 0x0, 0x0, {{0x7}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0xfffffffc, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "e14221dc6b3a3dd0a0eb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "14d13dec9dcc5dea7cc3e615eb9b94f3"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r7)
sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfe, {0x6, 0x0, 0xfcff}}, 0x14}, 0x1, 0x0, 0x0, 0x800a0}, 0x4000000)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000000c0)={'pimreg1\x00', {0x2, 0x0, @multicast2}})
r9 = socket$kcm(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r10, &(0x7f0000003a00)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="510022b7321019dff62f1a9300"/26, 0x1a}], 0x4, 0x0, 0x0, 0x84}, 0xc011)
recvmsg(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)=""/4098, 0xd5e}], 0x3a}, 0x0)

103.347536ms ago: executing program 5 (id=3126):
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x259c}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8001)
r2 = socket$inet(0xa, 0x801, 0x84)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000fc0)={0x0, @in6={{0xa, 0x4e20, 0x200, @local, 0xb4}}, [0x2, 0x38, 0x3, 0xffffffffffff0000, 0x7e, 0xfffffffffffffffb, 0xc54e, 0x40, 0x6, 0x40, 0x2e66, 0xf, 0x0, 0x7, 0x10000]}, &(0x7f00000001c0)=0x100)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'ovf\x00', 0x1, 0x10, 0x4}, 0x2c)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'lo\x00', 0x20})
r4 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x9, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

0s ago: executing program 5 (id=3127):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x800)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x4048010)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000200)="825b6db64bb3147a734852f1c0374ee84eb968e5c7392b70eb10a35b3235f09cee48eb0485a2c7961ff281fb2125", 0x2e, 0x24004000, &(0x7f0000000240)={0x11, 0x4, r1, 0x1, 0x50, 0x6, @local}, 0x14)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x23, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfff}, [@generic={0x5, 0x2, 0x1, 0x0, 0xfffff505}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0x4, 0x8, 0x5, 0x2, 0x8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf9cc}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @call={0x85, 0x0, 0x0, 0x4}, @ldst={0x1, 0x0, 0x3, 0x6, 0xe, 0x40, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000400)=""/4096, 0x41100, 0x3a, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001440)={0x1, 0x10, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001480)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f00000014c0)=[{0x0, 0x5, 0xa, 0x5}, {0x2, 0x1, 0x1, 0xc}, {0x1, 0x1, 0xb, 0x8}]}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001900)={r2, 0x0, 0xd8, 0x2a, &(0x7f00000015c0)="a0ee9bcb6b9759915c86fcbddb47bc68741998aa3b5db985c5c18f1a1a8700e8262582c02970c57552e1c006073d0daa111c0c42cd087d57a56676287e070a402696c4ef892132a4c17de0136202568d8e1c161d6d783eac51fe6a566f3d556d738d6c3a069cd1c4434508c722f63b108f83b812617a46aeea71116fcf20f087745aa5b24f4a8ddf0385bf9ba3a7a4f65b9d7505998c93a5a072b335949c0be94f389dff0456fd34809e1322d2c116e25e4c9cc97f82dfc35ce119ce525eb542059697624122d404b3df4378d876c33b08ac6be7514c7b5d", &(0x7f00000016c0)=""/42, 0x8, 0x0, 0xc7, 0xfb, &(0x7f0000001700)="5d2fe373f6ed2120b43aab04a5ef30ab33ef246d732d99d75d8c24b2a0589ecf28df5f004bab3312a62294664f46cee4ed93b0db74301dd2dbe89ac642b8083850841e57cabc9edb9ef9b44c170dfd461417d07f6241717227a0f4b8fd57440fab301d414f2d2b5d8519384eed90b0867a15bed59afd0ca13b3e970fa2b4736436541affe02f883b023ceaffb2c6d4009d776cb308dd980bd8074958256a34170bee3dd85b2a3fedff35cae155102ccd5a01d7a51e1060cc368d4da8f8c326052b91c67e2880c6", &(0x7f0000001800)="7a5f8e86da703aab9c17328c00e87e1ea9ebc23cde7a59e1887bb67441362c9c0d20617c78ecbcb2294d0296249050ccd1b05bfd9da8948496e4537946d93762dd398f3f9e2a6f4776cb408085d0aa235fcd2ca3a3ab724de81f9029d77b1919e63481465211c75fb0de1163598cf89ceaad4a176455de6e62652d0a066b20bce51359baf7a3881b1aaf25c6dcb9db74ac45546a95f274674cbd7cbf9ed40bcd6738b1bff8432b7f37cb15f57bd6a8f15f3e278e7f4b51e6ac1767f783085f1685537816ce0b0f72b1d384a5f118551dc3eae7d9eb56c0c6e732295bbf5812df45560337874059d9f6bb300191b6157d3dd5227ca7f1bde322094a", 0x3, 0x0, 0xbb}, 0x50)
socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000001980), 0x4)
recvfrom$l2tp6(r0, &(0x7f00000019c0)=""/244, 0xf4, 0x40000000, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @empty}, 0x20)
r3 = socket(0x22, 0x1, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000001b00))
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000001c00)={&(0x7f0000001b40), 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x14, 0x4, 0x1, 0x500, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24048001)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$kcm(0x29, 0x5, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001c40))
sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x40, 0x0, 0x120, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1c}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x40}}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x30, 0x140f, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001ec0), r7)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4014}, 0x20)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r7)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x24, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r3)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000022c0)={&(0x7f00000021c0)={0xe8, r10, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x74}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x676}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x49, 0x20}}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x8b, 0xac, "8196202ab32e8179dd9dce513d0559f743c8bb79362afdd1e37e1083425b55b92d3c7b3ad8a10fd0093469cf9891c8adfd322ab97844872b4361de11e92b51fd55c8d2dba580ea50dcbdccd6a19745442753be9f4011b5dc15090c5951e5826655bdf0bdb97bf2c6992199ff43b809e13ac0c26f2017a2f1f22ef0abd290d6ccddcf0087537b1d"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x30}, {0x2}, {0x1, 0x1}, {0x3}, {0x36}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000002480)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0xc0, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40f1}, 0x4040080)
connect$rds(r0, &(0x7f00000024c0)={0x2, 0x4e24, @multicast2}, 0x10)
r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002500), 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000002540)={[{0x2b, 'net'}, {0x2b, 'io'}, {0x2b, 'cpu'}, {0x2d, 'devices'}, {0x2d, 'memory'}]}, 0x1f)

kernel console output (not intermixed with test programs):

 type 2 family 0 port 6081 - 0
[  256.125142][ T9008] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  256.168607][ T9011] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.338039][T11704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1497'.
[  256.772458][T11716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1503'.
[  256.781832][T11716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1503'.
[  257.414720][T11739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1509'.
[  257.512079][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1511'.
[  257.960345][T11778] bridge_slave_0: left promiscuous mode
[  257.968243][T11778] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.985785][T11778] bridge_slave_1: left allmulticast mode
[  257.992571][T11778] bridge_slave_1: left promiscuous mode
[  258.001663][T11778] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.014919][T11778] bond0: (slave bond_slave_0): Releasing backup interface
[  258.060809][T11778] bond0: (slave bond_slave_1): Releasing backup interface
[  258.101433][T11778] team_slave_0: left promiscuous mode
[  258.113021][T11778] team0: Port device team_slave_0 removed
[  258.120382][T11778] team_slave_1: left promiscuous mode
[  258.139790][T11778] team0: Port device team_slave_1 removed
[  258.146829][T11778] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.166324][T11778] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.188966][T11778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  258.222673][T11778] ieee802154 phy0 wpan0: encryption failed: -126
[  258.268359][T11795] 8021q: VLANs not supported on lo
[  259.619174][ T9008] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[  260.481998][T11924] netlink: 'syz.0.1561': attribute type 1 has an invalid length.
[  260.569731][T11924] netlink: 'syz.0.1561': attribute type 1 has an invalid length.
[  260.573704][T11929] __nla_validate_parse: 41 callbacks suppressed
[  260.573722][T11929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1563'.
[  260.620885][T11933] dvmrp0: entered allmulticast mode
[  260.633183][T11924] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1561'.
[  260.653449][T11924] netlink: 'syz.0.1561': attribute type 1 has an invalid length.
[  260.675018][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1561'.
[  260.775812][T11924] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1561'.
[  261.544684][T11992] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  261.556427][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1577'.
[  261.576084][T11990] netlink: 'syz.2.1578': attribute type 1 has an invalid length.
[  261.621779][T11996] netlink: 'syz.3.1579': attribute type 1 has an invalid length.
[  261.677878][ T5884] Bluetooth: hci3: command 0x0405 tx timeout
[  261.722228][T12002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1579'.
[  261.723523][T11996] 8021q: adding VLAN 0 to HW filter on device bond6
[  261.748888][T12001] netlink: 'syz.1.1582': attribute type 9 has an invalid length.
[  261.988466][T12010] pim6reg1: entered promiscuous mode
[  261.993832][T12010] pim6reg1: entered allmulticast mode
[  262.054480][T12015] netlink: 'syz.4.1583': attribute type 13 has an invalid length.
[  262.066915][T12015] netlink: 'syz.4.1583': attribute type 17 has an invalid length.
[  262.218670][T12015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  262.267098][T12029] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.302589][T12029] tipc: Resetting bearer <eth:syzkaller0>
[  262.345065][T12023] lo speed is unknown, defaulting to 1000
[  262.415181][T12038] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  262.629019][T12044] netlink: 'syz.0.1590': attribute type 10 has an invalid length.
[  262.637038][T12044] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1590'.
[  262.655202][T12044] dummy0: entered promiscuous mode
[  262.663654][T12044] bridge0: port 1(dummy0) entered blocking state
[  262.670508][T12044] bridge0: port 1(dummy0) entered disabled state
[  262.677832][T12044] dummy0: entered allmulticast mode
[  262.692161][T12038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.722893][T12037] tipc: Disabling bearer <eth:syzkaller0>
[  262.765086][T12051] IPv6: sit1: Disabled Multicast RS
[  262.810954][T12049] netlink: 'syz.4.1591': attribute type 21 has an invalid length.
[  263.123726][T12066] lo speed is unknown, defaulting to 1000
[  263.135962][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'.
[  263.893620][T12105] 8021q: adding VLAN 0 to HW filter on device bond1
[  264.018863][T12117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1611'.
[  264.044933][T12119] netlink: 179 bytes leftover after parsing attributes in process `syz.0.1612'.
[  264.067137][T12117] bond0: Unable to set down delay as MII monitoring is disabled
[  264.261121][T12124] bond7: entered promiscuous mode
[  264.266318][T12124] bond7: entered allmulticast mode
[  264.294703][T12124] 8021q: adding VLAN 0 to HW filter on device bond7
[  264.441521][T12144] vlan2: entered promiscuous mode
[  264.447005][T12144] vlan2: entered allmulticast mode
[  264.453161][T12144] hsr_slave_1: entered allmulticast mode
[  264.835392][T12166] team1: entered promiscuous mode
[  264.840980][T12166] team1: entered allmulticast mode
[  264.857295][T12166] 8021q: adding VLAN 0 to HW filter on device team1
[  264.867963][T12172] netlink: 'syz.1.1624': attribute type 11 has an invalid length.
[  265.490135][T12192] validate_nla: 4 callbacks suppressed
[  265.490156][T12192] netlink: 'syz.4.1630': attribute type 13 has an invalid length.
[  265.504971][T12192] netlink: 'syz.4.1630': attribute type 17 has an invalid length.
[  265.538252][T12192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  265.613876][T12186] lo speed is unknown, defaulting to 1000
[  265.636153][T12196] __nla_validate_parse: 4 callbacks suppressed
[  265.636173][T12196] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1633'.
[  265.657071][T12192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  265.668947][T12196] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1633'.
[  265.722023][T12199] netlink: 'syz.0.1634': attribute type 7 has an invalid length.
[  265.748452][T12200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  265.842422][T12192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  265.874552][T12198] lo speed is unknown, defaulting to 1000
[  266.024118][T12214] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  266.035540][T12214] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.121312][T12214] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  266.132475][T12214] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.155201][T12211] lo speed is unknown, defaulting to 1000
[  266.226544][T12214] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  266.248776][T12217] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  266.266247][T12214] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.314653][T12222] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1640'.
[  266.451723][T12214] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  266.462789][T12214] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  266.810646][ T9011] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 55740 - 0
[  266.852438][ T9011] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  266.946955][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1648'.
[  267.221329][ T1107] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 55740 - 0
[  267.243039][ T1107] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  267.320121][ T1107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 55740 - 0
[  267.338942][ T1107] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  267.378236][ T1107] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 55740 - 0
[  267.400745][T12261] Set syz1 is full, maxelem 65536 reached
[  267.412769][ T1107] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  267.429578][T12253] lo speed is unknown, defaulting to 1000
[  267.494473][T12252] lo speed is unknown, defaulting to 1000
[  267.610358][T12270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1654'.
[  267.735417][T12273] netlink: 'syz.3.1655': attribute type 1 has an invalid length.
[  267.744079][T12273] netlink: 'syz.3.1655': attribute type 1 has an invalid length.
[  268.076377][T12275] lo speed is unknown, defaulting to 1000
[  269.059463][T12295] lo speed is unknown, defaulting to 1000
[  270.009030][T12322] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1665'.
[  270.094642][T12320] lo speed is unknown, defaulting to 1000
[  270.101729][T12322] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.150933][T12321] lo speed is unknown, defaulting to 1000
[  270.618661][T12342] block nbd0: server does not support multiple connections per device.
[  270.648775][T12342] block nbd0: shutting down sockets
[  270.946198][T12352] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1675'.
[  271.128411][T12352] nbd: socks must be embedded in a SOCK_ITEM attr
[  271.319529][T12369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1678'.
[  271.489882][T12374] FAULT_INJECTION: forcing a failure.
[  271.489882][T12374] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.514570][T12374] CPU: 1 UID: 0 PID: 12374 Comm: syz.1.1681 Not tainted syzkaller #0 PREEMPT(full) 
[  271.514598][T12374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  271.514609][T12374] Call Trace:
[  271.514617][T12374]  <TASK>
[  271.514626][T12374]  dump_stack_lvl+0x189/0x250
[  271.514654][T12374]  ? __pfx____ratelimit+0x10/0x10
[  271.514684][T12374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.514705][T12374]  ? __pfx__printk+0x10/0x10
[  271.514745][T12374]  should_fail_ex+0x414/0x560
[  271.514780][T12374]  _copy_to_user+0x31/0xb0
[  271.514808][T12374]  simple_read_from_buffer+0xe1/0x170
[  271.514840][T12374]  proc_fail_nth_read+0x1b3/0x220
[  271.514866][T12374]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  271.514890][T12374]  ? rw_verify_area+0x2a6/0x4d0
[  271.514910][T12374]  ? __lock_acquire+0xab9/0xd20
[  271.514929][T12374]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  271.514949][T12374]  vfs_read+0x200/0xa30
[  271.514970][T12374]  ? fdget_pos+0x247/0x320
[  271.514999][T12374]  ? __pfx___mutex_lock+0x10/0x10
[  271.515019][T12374]  ? __pfx_vfs_read+0x10/0x10
[  271.515046][T12374]  ? __fget_files+0x2a/0x420
[  271.515078][T12374]  ? __fget_files+0x3a0/0x420
[  271.515100][T12374]  ? __fget_files+0x2a/0x420
[  271.515143][T12374]  ksys_read+0x145/0x250
[  271.515170][T12374]  ? __pfx_ksys_read+0x10/0x10
[  271.515189][T12374]  ? rcu_is_watching+0x15/0xb0
[  271.515214][T12374]  ? do_syscall_64+0xbe/0x3b0
[  271.515237][T12374]  do_syscall_64+0xfa/0x3b0
[  271.515254][T12374]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.515282][T12374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.515302][T12374]  ? clear_bhb_loop+0x60/0xb0
[  271.515325][T12374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.515344][T12374] RIP: 0033:0x7f7491b8d8dc
[  271.515363][T12374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  271.515387][T12374] RSP: 002b:00007f7492a4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  271.515409][T12374] RAX: ffffffffffffffda RBX: 00007f7491de5fa0 RCX: 00007f7491b8d8dc
[  271.515423][T12374] RDX: 000000000000000f RSI: 00007f7492a4c0a0 RDI: 0000000000000004
[  271.515435][T12374] RBP: 00007f7492a4c090 R08: 0000000000000000 R09: 0000000000000000
[  271.515447][T12374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.515458][T12374] R13: 00007f7491de6038 R14: 00007f7491de5fa0 R15: 00007ffcc8875b58
[  271.515494][T12374]  </TASK>
[  271.640545][T12379] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.1683'.
[  271.827909][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'.
[  271.880416][T12382] lo speed is unknown, defaulting to 1000
[  272.046137][T12391] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  272.071096][T12391] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  272.488402][T12400] syz_tun: entered allmulticast mode
[  272.504888][T12400] dvmrp8: entered allmulticast mode
[  272.570042][T12408] macvtap1: entered allmulticast mode
[  272.575592][T12408] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  272.598184][T12409] netlink: 'syz.4.1688': attribute type 23 has an invalid length.
[  272.599300][T12408] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  272.786869][T12400] lo speed is unknown, defaulting to 1000
[  272.803256][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'.
[  272.878256][T12424] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.886804][T12424] syzkaller0: entered promiscuous mode
[  272.894396][T12424] syzkaller0: entered allmulticast mode
[  273.055647][T12423] tipc: Resetting bearer <eth:syzkaller0>
[  273.078500][T12434] netlink: 'syz.2.1696': attribute type 8 has an invalid length.
[  273.088831][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'.
[  273.099556][T12423] tipc: Disabling bearer <eth:syzkaller0>
[  273.137761][T12435] netlink: 'syz.2.1696': attribute type 8 has an invalid length.
[  273.145755][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'.
[  273.369622][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1700'.
[  273.394552][T12441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1700'.
[  273.553933][T12452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1703'.
[  273.576385][T12454] tls_set_device_offload: netdev not found
[  273.628428][T12441] syzkaller0: entered promiscuous mode
[  273.634212][T12441] syzkaller0: entered allmulticast mode
[  273.885751][T12478] netlink: 'syz.3.1709': attribute type 1 has an invalid length.
[  273.895202][T12478] netlink: 'syz.3.1709': attribute type 1 has an invalid length.
[  275.673568][T12496] pim6reg1: entered promiscuous mode
[  275.692837][T12496] pim6reg1: entered allmulticast mode
[  276.174360][T12515] lo speed is unknown, defaulting to 1000
[  276.218676][T12534] __nla_validate_parse: 4 callbacks suppressed
[  276.218697][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'.
[  276.478787][T12546] IPv6: Can't replace route, no match found
[  276.744211][T12558] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1731'.
[  276.802190][T12564] netlink: 'syz.1.1730': attribute type 4 has an invalid length.
[  276.969679][T12577] lo speed is unknown, defaulting to 1000
[  277.003001][T12584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1737'.
[  277.027378][T12582] dvmrp8: entered allmulticast mode
[  277.061433][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'.
[  277.383918][T12599] syzkaller0: entered promiscuous mode
[  277.390250][T12599] syzkaller0: entered allmulticast mode
[  277.422960][T12599] syzkaller0: mtu less than device minimum
[  277.529820][T12604] netlink: 'syz.1.1743': attribute type 13 has an invalid length.
[  277.545900][T12604] netlink: 'syz.1.1743': attribute type 17 has an invalid length.
[  277.559336][T12604] netlink: 'syz.1.1743': attribute type 27 has an invalid length.
[  277.576039][T12607] netlink: 'syz.2.1744': attribute type 1 has an invalid length.
[  277.593997][T12604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.719742][T12611] lo speed is unknown, defaulting to 1000
[  277.730204][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'.
[  278.108532][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'.
[  278.121775][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1751'.
[  278.140215][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1751'.
[  278.264020][T12632] netlink: 'syz.2.1755': attribute type 5 has an invalid length.
[  278.289916][T12632] ip6erspan0: entered promiscuous mode
[  278.481778][T12641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'.
[  278.584861][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'.
[  278.637430][T12652] bond0: option resend_igmp: invalid value (262144)
[  278.653728][T12652] bond0: option resend_igmp: allowed values 0 - 255
[  278.996039][T12668] lo speed is unknown, defaulting to 1000
[  279.074075][T12674] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  279.589879][T12686] tap0: tun_chr_ioctl cmd 35108
[  280.186618][T12734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.228720][T12734] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  280.248258][T12734] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  280.321680][T12739] lo speed is unknown, defaulting to 1000
[  280.852098][   T30] audit: type=1107 audit(1758803884.711:3): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='V£žŠ®)'
[  280.975102][T12770] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  280.998664][T12770] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  281.299460][ T8791] tipc: Node number set to 3998297686
[  281.320982][T12786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  281.328539][T12786] IPv6: NLM_F_CREATE should be set when creating new route
[  281.371930][T12790] delete_channel: no stack
[  281.381818][T12789] delete_channel: no stack
[  281.624493][T12801] __nla_validate_parse: 12 callbacks suppressed
[  281.624514][T12801] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1804'.
[  281.860714][T12812] lo speed is unknown, defaulting to 1000
[  281.973160][T12821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1812'.
[  282.538675][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'.
[  282.561761][T12855] geneve2: entered promiscuous mode
[  282.567035][T12855] geneve2: entered allmulticast mode
[  282.611569][T12858] bridge_slave_0: entered promiscuous mode
[  282.621754][T12858] batman_adv: batadv0: Adding interface: macsec1
[  282.628470][T12858] batman_adv: batadv0: Interface activated: macsec1
[  282.909637][T12887] vlan0: entered promiscuous mode
[  282.915153][T12887] bond0: entered promiscuous mode
[  282.921328][T12887] bond_slave_0: entered promiscuous mode
[  282.927970][T12887] bond_slave_1: entered promiscuous mode
[  283.001639][T12893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1829'.
[  283.199667][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'.
[  283.425795][T12913] IPVS: set_ctl: invalid protocol: 59 172.20.20.63:20001
[  283.448876][T12912] lo speed is unknown, defaulting to 1000
[  283.453505][T12910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1836'.
[  283.468299][T12910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1836'.
[  283.477692][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'.
[  283.509204][T12910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1836'.
[  283.715275][T12926] xt_socket: unknown flags 0xd0
[  284.416627][T12968] netlink: 'syz.1.1847': attribute type 10 has an invalid length.
[  284.483102][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1849'.
[  284.560397][T12970] netlink: 'syz.0.1849': attribute type 1 has an invalid length.
[  285.104901][T13001] syzkaller1: entered allmulticast mode
[  285.257331][T13006] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  285.791521][T13029] lo speed is unknown, defaulting to 1000
[  286.347221][T13032] syzkaller0: entered promiscuous mode
[  286.373749][T13032] syzkaller0: entered allmulticast mode
[  289.901386][T13070] __nla_validate_parse: 4 callbacks suppressed
[  289.901410][T13070] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1876'.
[  290.744794][T13112] lo speed is unknown, defaulting to 1000
[  291.113112][T13133] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1891'.
[  291.316707][T13142] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1894'.
[  291.518124][T13133] lo speed is unknown, defaulting to 1000
[  291.810635][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'.
[  291.865699][T13158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1898'.
[  291.909396][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'.
[  292.976621][T13198] netlink: 'syz.2.1906': attribute type 13 has an invalid length.
[  292.977064][T13204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1910'.
[  292.985266][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'.
[  293.015346][T13198] netlink: 'syz.2.1906': attribute type 17 has an invalid length.
[  293.066284][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'.
[  293.087946][T13198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.097940][T13199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1908'.
[  293.138293][T13208] netlink: 'syz.0.1911': attribute type 12 has an invalid length.
[  293.235007][T13207] lo speed is unknown, defaulting to 1000
[  293.273056][T13209] lo speed is unknown, defaulting to 1000
[  293.418106][T13198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.505973][T13223] netlink: 'syz.4.1912': attribute type 10 has an invalid length.
[  293.579009][T13216] netlink: 'syz.4.1912': attribute type 10 has an invalid length.
[  293.684759][T13226] tipc: Invalid UDP bearer configuration
[  293.684824][T13226] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  293.739103][T13231] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  293.757059][T13223] team0: Port device dummy0 added
[  293.780631][T13216] team0: Port device dummy0 removed
[  293.799543][T13216] dummy0: entered promiscuous mode
[  293.807804][T13216] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  293.819732][T12872] bond0: (slave dummy0): interface is now down
[  293.837841][T12871] bond0: (slave dummy0): interface is now down
[  293.857873][T12871] bond0: (slave dummy0): interface is now down
[  293.867421][T12871] bond0: now running without any active interface!
[  294.245851][T13253] netlink: 'syz.4.1924': attribute type 5 has an invalid length.
[  294.460381][T13256] lo speed is unknown, defaulting to 1000
[  294.892033][T13276] lo speed is unknown, defaulting to 1000
[  295.945609][T13308] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  295.962213][T13327] __nla_validate_parse: 6 callbacks suppressed
[  295.962235][T13327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1942'.
[  295.972194][T13308] bond0 (unregistering): Released all slaves
[  296.031010][T13331] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1943'.
[  296.141437][T13335] netlink: 'syz.3.1943': attribute type 1 has an invalid length.
[  296.149537][T13335] netlink: 'syz.3.1943': attribute type 1 has an invalid length.
[  296.164817][T13327] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  296.414589][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1944'.
[  296.681511][T13358] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1951'.
[  296.692513][T13358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1951'.
[  296.725939][T13357] netlink: 'syz.3.1952': attribute type 1 has an invalid length.
[  296.795409][T13363] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1955'.
[  297.126705][T13372] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1957'.
[  297.290916][T13379] netlink: 'syz.3.1960': attribute type 21 has an invalid length.
[  297.302664][T13379] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1960'.
[  297.312554][T13379] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1960'.
[  297.481650][T13387] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1961'.
[  297.753457][T13402] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  298.281896][ T5884] block nbd0: Receive control failed (result -107)
[  298.301265][T13418] nbd0: detected capacity change from 0 to 32
[  298.663003][T13439] lo speed is unknown, defaulting to 1000
[  298.959320][T13446] validate_nla: 1 callbacks suppressed
[  298.959341][T13446] netlink: 'syz.1.1979': attribute type 1 has an invalid length.
[  299.031689][T13463] netlink: 'syz.0.1984': attribute type 5 has an invalid length.
[  299.142169][T13463] geneve2: entered promiscuous mode
[  299.167362][T13463] geneve2: entered allmulticast mode
[  299.231228][T12873] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  299.260451][T12873] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  299.327058][T12873] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  299.353544][T12873] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  300.083255][T13525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  317.281788][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  329.598317][ T5882] Bluetooth: hci4: command 0x0405 tx timeout
[  375.081725][T13539] FAULT_INJECTION: forcing a failure.
[  375.081725][T13539] name failslab, interval 1, probability 0, space 0, times 0
[  375.120181][T13539] CPU: 1 UID: 0 PID: 13539 Comm: syz.1.2001 Not tainted syzkaller #0 PREEMPT(full) 
[  375.120211][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  375.120223][T13539] Call Trace:
[  375.120231][T13539]  <TASK>
[  375.120239][T13539]  dump_stack_lvl+0x189/0x250
[  375.120269][T13539]  ? __pfx____ratelimit+0x10/0x10
[  375.120299][T13539]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.120321][T13539]  ? __pfx__printk+0x10/0x10
[  375.120349][T13539]  ? __lock_acquire+0xab9/0xd20
[  375.120389][T13539]  should_fail_ex+0x414/0x560
[  375.120423][T13539]  should_failslab+0xa8/0x100
[  375.120452][T13539]  kmem_cache_alloc_noprof+0x73/0x3c0
[  375.120475][T13539]  ? skb_clone+0x212/0x3a0
[  375.120508][T13539]  skb_clone+0x212/0x3a0
[  375.120538][T13539]  __netlink_deliver_tap+0x404/0x850
[  375.120584][T13539]  ? netlink_deliver_tap+0x2e/0x1b0
[  375.120608][T13539]  netlink_deliver_tap+0x19c/0x1b0
[  375.120631][T13539]  netlink_unicast+0x7fa/0x9e0
[  375.120662][T13539]  ? __pfx_netlink_unicast+0x10/0x10
[  375.120684][T13539]  ? netlink_sendmsg+0x642/0xb30
[  375.120704][T13539]  ? skb_put+0x11b/0x210
[  375.120731][T13539]  netlink_sendmsg+0x805/0xb30
[  375.120766][T13539]  ? __pfx_netlink_sendmsg+0x10/0x10
[  375.120792][T13539]  ? aa_sock_msg_perm+0xf1/0x1d0
[  375.120824][T13539]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  375.120851][T13539]  ? __pfx_netlink_sendmsg+0x10/0x10
[  375.120874][T13539]  __sock_sendmsg+0x21c/0x270
[  375.120907][T13539]  ____sys_sendmsg+0x52d/0x830
[  375.120938][T13539]  ? __pfx_____sys_sendmsg+0x10/0x10
[  375.120976][T13539]  ? import_iovec+0x74/0xa0
[  375.121005][T13539]  ___sys_sendmsg+0x21f/0x2a0
[  375.121040][T13539]  ? __pfx____sys_sendmsg+0x10/0x10
[  375.121111][T13539]  ? __fget_files+0x2a/0x420
[  375.121137][T13539]  ? __fget_files+0x3a0/0x420
[  375.121185][T13539]  __sys_sendmmsg+0x227/0x430
[  375.121217][T13539]  ? __pfx___sys_sendmmsg+0x10/0x10
[  375.121237][T13539]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  375.121290][T13539]  ? ksys_write+0x22a/0x250
[  375.121318][T13539]  ? __pfx_ksys_write+0x10/0x10
[  375.121338][T13539]  ? rcu_is_watching+0x15/0xb0
[  375.121365][T13539]  __x64_sys_sendmmsg+0xa0/0xc0
[  375.121393][T13539]  do_syscall_64+0xfa/0x3b0
[  375.121411][T13539]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.121439][T13539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.121458][T13539]  ? clear_bhb_loop+0x60/0xb0
[  375.121482][T13539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.121500][T13539] RIP: 0033:0x7f7491b8eec9
[  375.121518][T13539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  375.121532][T13539] RSP: 002b:00007f7492a4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  375.121555][T13539] RAX: ffffffffffffffda RBX: 00007f7491de5fa0 RCX: 00007f7491b8eec9
[  375.121568][T13539] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005
[  375.121582][T13539] RBP: 00007f7492a4c090 R08: 0000000000000000 R09: 0000000000000000
[  375.121593][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.121605][T13539] R13: 00007f7491de6038 R14: 00007f7491de5fa0 R15: 00007ffcc8875b58
[  375.121640][T13539]  </TASK>
[  375.612104][T13551] __nla_validate_parse: 6 callbacks suppressed
[  375.612126][T13551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2006'.
[  375.627840][T13551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2006'.
[  376.967990][T13620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2026'.
[  377.056483][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2027'.
[  377.066939][T13622] macsec0: left allmulticast mode
[  377.073518][T13622] veth1_macvtap: left allmulticast mode
[  377.086018][T13622] macsec0: left promiscuous mode
[  377.096605][T13622] bridge0: port 1(macsec0) entered disabled state
[  377.487213][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'.
[  377.510157][T13635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2030'.
[  377.557979][T13637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2030'.
[  377.637971][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'.
[  377.669647][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'.
[  377.714328][T13640] ip6tnl3: entered promiscuous mode
[  377.726714][T13640] ip6tnl3: entered allmulticast mode
[  378.329234][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'.
[  378.427939][T13658] netlink: 'syz.3.2035': attribute type 21 has an invalid length.
[  378.435948][T13658] netlink: 'syz.3.2035': attribute type 5 has an invalid length.
[  378.459292][T13658] netlink: 'syz.3.2035': attribute type 6 has an invalid length.
[  378.723515][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  379.059094][T13669] lo speed is unknown, defaulting to 1000
[  379.132190][T13674] netlink: 'syz.2.2040': attribute type 1 has an invalid length.
[  379.253566][T13674] 8021q: adding VLAN 0 to HW filter on device bond2
[  379.420584][T13676] bond2: (slave veth7): Enslaving as an active interface with a down link
[  379.463735][T13674] veth0: entered promiscuous mode
[  379.526581][T13674] veth0: left promiscuous mode
[  379.647667][ T8792] IPVS: starting estimator thread 0...
[  379.654236][T13685] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  379.797880][T13688] IPVS: using max 32 ests per chain, 76800 per kthread
[  379.798057][T13691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  379.840545][T13693] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002
[  379.974313][T13691] syzkaller0: entered promiscuous mode
[  379.995612][T13691] syzkaller0: entered allmulticast mode
[  380.943105][T13706] netlink: 'syz.3.2048': attribute type 1 has an invalid length.
[  381.325982][T13721] __nla_validate_parse: 4 callbacks suppressed
[  381.326004][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2054'.
[  381.382577][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2054'.
[  381.654726][T13733] lo speed is unknown, defaulting to 1000
[  382.082548][T13741] lo speed is unknown, defaulting to 1000
[  382.134500][T13740] lo speed is unknown, defaulting to 1000
[  382.143275][T13751] syzkaller1: tun_chr_ioctl cmd 1074025677
[  382.149932][T13751] syzkaller1: linktype set to 823
[  383.345511][T13792] IPVS: length: 121 != 24
[  383.458212][T13767] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  440.160980][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  471.437803][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'.
[  471.444273][T13843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'.
[  471.456330][T13843] netlink: 'syz.1.2087': attribute type 5 has an invalid length.
[  471.465814][T13843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2087'.
[  471.490006][T13843] geneve2: entered promiscuous mode
[  471.495281][T13843] geneve2: entered allmulticast mode
[  471.503459][T12872] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  471.528075][T12872] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  471.545633][T12872] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  471.565382][T12872] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  471.569974][T13850] rdma_rxe: rxe_newlink: failed to add lo
[  471.700344][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'.
[  471.906955][T13876] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  471.927940][T13873] lo speed is unknown, defaulting to 1000
[  471.949460][T13878] netlink: 'syz.4.2095': attribute type 23 has an invalid length.
[  472.112665][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'.
[  472.138603][T13886] lo speed is unknown, defaulting to 1000
[  472.409517][T13895] netlink: 'syz.4.2102': attribute type 10 has an invalid length.
[  472.419548][T13895] bond0: (slave wlan1): Opening slave failed
[  472.430629][T13894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  472.641410][T13891] lo speed is unknown, defaulting to 1000
[  473.391348][T13927] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20000
[  473.525447][T13930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2109'.
[  473.701179][T13930] nbd: socks must be embedded in a SOCK_ITEM attr
[  473.752533][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'.
[  474.046154][T13954] netlink: 'syz.1.2116': attribute type 7 has an invalid length.
[  474.054470][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'.
[  474.247225][T13967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.260052][T13967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  474.310470][T13973] netlink: 'syz.1.2121': attribute type 2 has an invalid length.
[  474.311594][T13971] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2120'.
[  474.329185][T13973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2121'.
[  474.360017][T13967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.371411][T13967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  474.432791][T13976] netlink: 'syz.1.2122': attribute type 1 has an invalid length.
[  474.476113][T13967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.486655][T13967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  474.505212][T13976] bond0: entered promiscuous mode
[  474.510808][T13976] bond0: entered allmulticast mode
[  474.516401][T13976] 8021q: adding VLAN 0 to HW filter on device bond0
[  474.542599][T13976] bridge11: entered promiscuous mode
[  474.550511][T13976] bridge11: entered allmulticast mode
[  474.556860][T13976] bond0: (slave bridge11): Enslaving as a backup interface with an up link
[  474.582768][T13967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  474.593815][T13967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  474.607940][T12872] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  474.729141][T12872] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  474.885824][T12873] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  474.898703][T12873] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  474.939086][T12873] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  474.961858][T12873] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  475.030653][T12874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  475.044568][T12874] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  475.102336][T12873] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  475.111065][T12873] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  475.430445][T14025] netlink: 'syz.3.2138': attribute type 15 has an invalid length.
[  475.689289][T14036] lo speed is unknown, defaulting to 1000
[  475.979768][T14042] team0: Device gtp0 is up. Set it down before adding it as a team port
[  476.351970][T14050] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  476.385402][T14055] 8021q: adding VLAN 0 to HW filter on device bond3
[  476.394581][T14055] bond3: entered promiscuous mode
[  476.402983][T14055] team0: Port device bond3 added
[  476.472159][T14066] __nla_validate_parse: 4 callbacks suppressed
[  476.472179][T14066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2144'.
[  476.508732][T14060] lo speed is unknown, defaulting to 1000
[  476.562800][T14065] lo speed is unknown, defaulting to 1000
[  476.757021][T14078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2149'.
[  476.784959][T14078] netlink: 'syz.0.2149': attribute type 2 has an invalid length.
[  476.821949][T14078] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2149'.
[  477.276018][T14093] lo speed is unknown, defaulting to 1000
[  477.820476][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2160'.
[  477.896089][T14125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2161'.
[  477.924273][T14114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  478.253220][T14142] netlink: 'syz.4.2163': attribute type 1 has an invalid length.
[  478.306165][T14142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  478.742324][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'.
[  478.750374][T14161] ieee802154 phy0 wpan0: encryption failed: -22
[  478.767798][T14161] ieee802154 phy0 wpan0: encryption failed: -22
[  478.779098][T14162] netlink: 'syz.4.2170': attribute type 1 has an invalid length.
[  478.791507][T14162] netlink: 17231 bytes leftover after parsing attributes in process `syz.4.2170'.
[  479.176557][T14146] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  479.343978][T14185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2180'.
[  479.625682][T14207] netlink: 'syz.0.2184': attribute type 3 has an invalid length.
[  479.641494][T14207] syz_tun: entered allmulticast mode
[  479.673705][T14208] netlink: 'syz.4.2185': attribute type 1 has an invalid length.
[  479.688310][T14208] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2185'.
[  479.738699][T14207] dvmrp8: left allmulticast mode
[  479.796237][T14209] siw: device registration error -23
[  479.839974][T14209] gretap0: entered promiscuous mode
[  479.842207][T14211] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2186'.
[  479.861157][T14213] netlink: 'syz.4.2186': attribute type 1 has an invalid length.
[  479.876084][T14209] sit0: left promiscuous mode
[  479.901368][T14209] bridge0: port 1(dummy0) entered blocking state
[  479.908063][T14209] bridge0: port 1(dummy0) entered forwarding state
[  479.923115][T14209] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.936221][T14209] 8021q: adding VLAN 0 to HW filter on device team0
[  479.950552][T14209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  480.027217][T14213] bond2: entered promiscuous mode
[  480.034008][T14213] 8021q: adding VLAN 0 to HW filter on device bond2
[  480.048054][T14206] syz_tun: left allmulticast mode
[  480.265155][T14221] netlink: 'syz.0.2188': attribute type 1 has an invalid length.
[  480.602013][T14237] netdevsim0: renamed from caif0
[  480.620399][T14237] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  480.651015][T14242] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  480.665870][T14242] syzkaller0: entered promiscuous mode
[  480.681500][T14242] syzkaller0: entered allmulticast mode
[  480.983602][T14262] ieee802154 phy0 wpan0: encryption failed: -126
[  480.986341][T14253] dvmrp11: entered allmulticast mode
[  482.037829][T14298] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  482.108538][T14299] netlink: 'syz.1.2212': attribute type 1 has an invalid length.
[  482.263788][T14309] lo speed is unknown, defaulting to 1000
[  483.048796][   T30] audit: type=1800 audit(1758804086.901:4): pid=14340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2223" name="memory.events" dev="tmpfs" ino=2330 res=0 errno=0
[  483.423257][T14365] lo speed is unknown, defaulting to 1000
[  483.674967][T14385] __nla_validate_parse: 3 callbacks suppressed
[  483.674988][T14385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2232'.
[  483.927095][T14405] syzkaller1: entered promiscuous mode
[  483.933422][T14405] syzkaller1: entered allmulticast mode
[  483.993896][T14409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2238'.
[  484.260492][T14426] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2243'.
[  484.422353][T14445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2245'.
[  484.482632][   T30] audit: type=1800 audit(1758804088.341:5): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2245" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=2419 res=0 errno=0
[  484.815429][T14457] netlink: 'syz.1.2249': attribute type 1 has an invalid length.
[  484.823506][T14457] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2249'.
[  484.899765][T14463] tc_dump_action: action bad kind
[  484.910217][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'.
[  484.970688][T14465] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2250'.
[  485.130111][T14477] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2254'.
[  485.149921][T14475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2255'.
[  485.173695][T14471] lo speed is unknown, defaulting to 1000
[  485.357345][T14481] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2256'.
[  487.156489][T14496] batman_adv: batadv0: Interface deactivated: gretap1
[  487.192697][T14496] batman_adv: batadv0: Interface deactivated: macsec1
[  487.236301][T14508] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  487.258950][T14508] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  487.328540][T12872] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.338947][T12872] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.348113][T12872] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  487.362390][T12872] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.374355][T12872] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.386311][T12872] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  487.396414][T12872] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.405788][T12872] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.415789][T12872] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  487.425641][T12872] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.435964][T12872] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.446156][T12872] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  487.484992][T14508] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  487.495223][T14508] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  487.558969][T14555] lo speed is unknown, defaulting to 1000
[  487.589915][T14508] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  487.599906][T14508] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  487.704383][T14508] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  487.714919][T14508] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  487.735283][T14560] netlink: 'syz.4.2273': attribute type 1 has an invalid length.
[  487.807153][T12871] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  487.822247][T12871] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  487.847029][T12871] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  487.855973][T12871] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  487.873065][T14563] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  487.905852][T12872] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  487.914301][T12872] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  487.938164][T12871] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  487.956860][T12871] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  488.236291][T14575] netlink: 'syz.0.2277': attribute type 13 has an invalid length.
[  488.821112][T14584] lo speed is unknown, defaulting to 1000
[  489.040995][T14591] __nla_validate_parse: 4 callbacks suppressed
[  489.041016][T14591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2283'.
[  489.331540][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2286'.
[  489.591135][T14616] netlink: 'syz.3.2292': attribute type 323 has an invalid length.
[  489.743580][T14609] lo speed is unknown, defaulting to 1000
[  490.092829][T14644] netlink: 'syz.1.2297': attribute type 10 has an invalid length.
[  490.102395][T14644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2297'.
[  490.115084][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2296'.
[  490.153055][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'.
[  490.208677][T14642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2296'.
[  490.381731][T14653] netlink: 'syz.3.2296': attribute type 1 has an invalid length.
[  490.389788][T14653] netlink: 'syz.3.2296': attribute type 1 has an invalid length.
[  490.397813][T14653] netlink: 'syz.3.2296': attribute type 1 has an invalid length.
[  490.405720][T14653] netlink: 'syz.3.2296': attribute type 1 has an invalid length.
[  490.454886][T14653] netlink: 'syz.3.2296': attribute type 1 has an invalid length.
[  490.462984][T14653] netlink: 'syz.3.2296': attribute type 1 has an invalid length.
[  490.500528][T14654] batadv_slave_1: entered promiscuous mode
[  490.539264][T14651] batadv_slave_1: left promiscuous mode
[  490.711980][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2301'.
[  490.804256][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'.
[  490.918100][T14679] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2308'.
[  490.973499][T14681] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2310'.
[  491.203422][T14702] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.567990][T14711] block nbd1: server does not support multiple connections per device.
[  491.576862][T14711] block nbd1: shutting down sockets
[  491.863620][T14735] tipc: Invalid UDP bearer configuration
[  491.863681][T14735] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  491.903544][T14735] tipc: Invalid UDP bearer configuration
[  491.903608][T14735] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  491.941033][T14740] bridge_slave_1: left allmulticast mode
[  491.946743][T14740] bridge_slave_1: left promiscuous mode
[  491.968712][T14740] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.988238][T14740] ¾x9ÿ: left allmulticast mode
[  491.993503][T14740] ¾x9ÿ: left promiscuous mode
[  491.999811][T14740] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  492.104675][T14744] lo speed is unknown, defaulting to 1000
[  492.198541][T14756] 8021q: adding VLAN 0 to HW filter on device bond7
[  492.264020][T14755] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  492.285091][T14755] bond7: (slave macvlan3): Enslaving as a backup interface with a down link
[  492.303651][T14756] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  492.703865][T14782] syzkaller1: entered allmulticast mode
[  492.776042][T14791] validate_nla: 9 callbacks suppressed
[  492.776066][T14791] netlink: 'syz.3.2340': attribute type 1 has an invalid length.
[  493.349721][T14824] netlink: 'syz.2.2350': attribute type 1 has an invalid length.
[  493.352541][T14823] netlink: 'syz.2.2350': attribute type 1 has an invalid length.
[  493.426369][T14823] 8021q: adding VLAN 0 to HW filter on device bond3
[  493.465555][T14829] bond3: (slave veth9): Enslaving as an active interface with a down link
[  493.595854][T14825] lo speed is unknown, defaulting to 1000
[  494.021124][T14852] gtp0: entered promiscuous mode
[  494.046943][T14851] lo speed is unknown, defaulting to 1000
[  494.160643][T14855] __nla_validate_parse: 13 callbacks suppressed
[  494.160667][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2356'.
[  494.233147][T14864] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.252786][T14865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.256418][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'.
[  494.277985][T14862] netlink: 'syz.4.2358': attribute type 30 has an invalid length.
[  494.318052][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2358'.
[  494.599390][T14873] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2361'.
[  494.808577][T12870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.820931][T12870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.052696][T14901] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2369'.
[  495.115772][T14901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2369'.
[  495.365391][T14921] netlink: 'syz.0.2375': attribute type 1 has an invalid length.
[  495.394041][T14921] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2375'.
[  495.413824][T14925] veth0: entered promiscuous mode
[  495.419114][T14919] lo speed is unknown, defaulting to 1000
[  495.496949][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2376'.
[  495.556496][T14931] sctp: [Deprecated]: syz.0.2377 (pid 14931) Use of struct sctp_assoc_value in delayed_ack socket option.
[  495.556496][T14931] Use struct sctp_sack_info instead
[  495.578633][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'.
[  495.719388][T14941] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2380'.
[  495.732238][T14941] lo: Caught tx_queue_len zero misconfig
[  496.184490][T14925] veth0: left promiscuous mode
[  496.208039][T14964] lo speed is unknown, defaulting to 1000
[  496.582440][T14988] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  496.929116][T12870] tipc: Resetting bearer <eth:syzkaller0>
[  497.860091][T15044] lo speed is unknown, defaulting to 1000
[  498.653128][ T5936] IPVS: starting estimator thread 0...
[  498.757777][T15074] IPVS: using max 25 ests per chain, 60000 per kthread
[  499.392776][T15108] lo speed is unknown, defaulting to 1000
[  499.731936][T15112] lo speed is unknown, defaulting to 1000
[  499.772371][T15128] netlink: 'syz.1.2429': attribute type 10 has an invalid length.
[  500.016245][T15134] __nla_validate_parse: 10 callbacks suppressed
[  500.016267][T15134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2431'.
[  500.108043][T15141] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2430'.
[  500.193538][T15139] 8021q: adding VLAN 0 to HW filter on device team0
[  500.233379][T15139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  500.234684][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2433'.
[  500.273058][T15140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  500.452640][T15141] team0: Port device team_slave_0 removed
[  500.523428][T15149] bridge3: port 1(veth5) entered blocking state
[  500.531066][T15149] bridge3: port 1(veth5) entered disabled state
[  500.538634][T15149] veth5: entered allmulticast mode
[  500.546437][T15149] veth5: entered promiscuous mode
[  500.556062][    T9] infiniband syz0: ib_query_port failed (-19)
[  500.575659][T15150] bridge3: port 2(veth0_to_bond) entered blocking state
[  500.583441][T15150] bridge3: port 2(veth0_to_bond) entered disabled state
[  500.591476][T15150] veth0_to_bond: entered allmulticast mode
[  500.599249][T15150] veth0_to_bond: entered promiscuous mode
[  500.605951][T15153] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2434'.
[  500.749754][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'.
[  500.801206][T15171] policy can only be matched on NF_INET_PRE_ROUTING
[  500.801230][T15171] unable to load match
[  500.925338][T15175] sctp: [Deprecated]: syz.1.2440 (pid 15175) Use of int in maxseg socket option.
[  500.925338][T15175] Use struct sctp_assoc_value instead
[  501.288319][T15196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2443'.
[  501.397119][T15202] netlink: 'syz.0.2446': attribute type 1 has an invalid length.
[  501.482549][T15202] 8021q: adding VLAN 0 to HW filter on device bond4
[  501.503623][T15204] bond4: (slave geneve3): making interface the new active one
[  501.514540][T15204] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  501.607886][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  501.880265][T15219] netlink: 'syz.3.2450': attribute type 5 has an invalid length.
[  501.950498][T15219] sctp: [Deprecated]: syz.3.2450 (pid 15219) Use of int in maxseg socket option.
[  501.950498][T15219] Use struct sctp_assoc_value instead
[  502.233317][T15227] sock: sock_timestamping_bind_phc: sock not bind to device
[  502.417553][T15232] netlink: 'syz.2.2455': attribute type 3 has an invalid length.
[  502.615039][T15246] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2459'.
[  502.650978][T15246] ip6gretap0: entered promiscuous mode
[  502.687949][T15246] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2459'.
[  502.964349][T15256] lo speed is unknown, defaulting to 1000
[  503.029143][T15263] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2464'.
[  503.326601][T15279] netlink: 'syz.0.2466': attribute type 10 has an invalid length.
[  503.360008][T15281] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2468'.
[  503.458434][T15279] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  503.549186][T15274] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  503.651421][T15292] netlink: 'syz.0.2473': attribute type 1 has an invalid length.
[  503.826251][T15292] 8021q: adding VLAN 0 to HW filter on device bond5
[  503.944991][T15294] bond5: (slave ip6erspan0): making interface the new active one
[  503.972610][T15294] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link
[  504.176975][T15306] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  504.649560][T15322] netlink: 'syz.3.2480': attribute type 13 has an invalid length.
[  505.155109][T15322] tipc: Resetting bearer <eth:syzkaller0>
[  505.189357][T15328] macsec0: entered promiscuous mode
[  505.220123][T15328] macsec0: entered allmulticast mode
[  505.234697][T15331] veth1_macvtap: entered allmulticast mode
[  505.243851][T15331] macsec0: left promiscuous mode
[  505.249662][T15331] macsec0: left allmulticast mode
[  505.254941][T15331] veth1_macvtap: left allmulticast mode
[  505.286433][T15336] IPv6: sit3: Disabled Multicast RS
[  505.304125][T15327] lo speed is unknown, defaulting to 1000
[  505.359294][T15330] netlink: 'syz.4.2483': attribute type 5 has an invalid length.
[  505.545618][T15343] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:17
[  505.703018][T15349] __nla_validate_parse: 3 callbacks suppressed
[  505.703040][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'.
[  505.957313][T15363] netlink: 'syz.3.2492': attribute type 1 has an invalid length.
[  505.994921][T15365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2495'.
[  506.346582][T15387] netlink: 'syz.3.2498': attribute type 21 has an invalid length.
[  506.392957][T15387] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2498'.
[  506.750263][T15415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2508'.
[  506.761508][T15415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2508'.
[  506.909219][T15421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2510'.
[  506.993568][T15421] bridge2: port 1(veth13) entered blocking state
[  507.001231][T15421] bridge2: port 1(veth13) entered disabled state
[  507.008369][T15421] veth13: entered allmulticast mode
[  507.015661][T15421] veth13: entered promiscuous mode
[  507.058458][T15421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'.
[  507.077095][T15425] bridge2: port 2(veth0_to_bond) entered blocking state
[  507.084599][T15425] bridge2: port 2(veth0_to_bond) entered disabled state
[  507.093430][T15425] veth0_to_bond: entered allmulticast mode
[  507.102086][T15425] veth0_to_bond: entered promiscuous mode
[  507.125184][T15421] vlan1: entered allmulticast mode
[  507.131091][T15421] veth1: entered allmulticast mode
[  507.214128][T15432] netlink: 'syz.2.2512': attribute type 1 has an invalid length.
[  507.223228][T15432] netlink: 'syz.2.2512': attribute type 1 has an invalid length.
[  507.288486][T15434] netlink: 'syz.1.2513': attribute type 1 has an invalid length.
[  507.326011][T15434] bond10: entered promiscuous mode
[  507.332108][T15434] bond10: entered allmulticast mode
[  507.360706][T15434] bridge13: entered promiscuous mode
[  507.366092][T15434] bridge13: entered allmulticast mode
[  507.376871][T15434] bond10: (slave bridge13): making interface the new active one
[  507.386145][T15434] bond10: (slave bridge13): Enslaving as an active interface with an up link
[  507.501436][T15443] netlink: 'syz.2.2512': attribute type 1 has an invalid length.
[  507.531819][T15447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2515'.
[  507.683978][T15443] 8021q: adding VLAN 0 to HW filter on device bond4
[  507.695679][T15446] tipc: New replicast peer: 255.255.255.255
[  507.702939][T15446] tipc: Enabled bearer <udp:syz2>, priority 10
[  507.717996][T15453] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  508.151319][T15478] bond0: (slave dummy0): Releasing backup interface
[  508.168593][T15478] dummy0: left promiscuous mode
[  508.181113][T15478] batman_adv: batadv0: Adding interface: dummy0
[  508.230047][T15478] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  508.259582][T15478] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  508.690965][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2530'.
[  508.836610][T15518] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2531'.
[  509.363890][T15534] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  509.406581][T15531] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  509.446079][T15536] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  510.719735][T15602] __nla_validate_parse: 4 callbacks suppressed
[  510.719756][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2552'.
[  511.229316][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'.
[  511.593237][T15635] netlink: 'syz.3.2561': attribute type 5 has an invalid length.
[  511.636848][T15641] netlink: 212396 bytes leftover after parsing attributes in process `syz.0.2563'.
[  511.670564][T15641] netlink: get zone limit has 8 unknown bytes
[  511.705956][T15646] veth1_to_bond: entered allmulticast mode
[  511.714615][T15646] veth1_to_bond: entered promiscuous mode
[  511.718513][T15641] netlink: 'syz.0.2563': attribute type 1 has an invalid length.
[  511.722297][T15646] veth1_to_bond: left promiscuous mode
[  511.731698][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'.
[  511.734547][T15646] veth1_to_bond: left allmulticast mode
[  511.752521][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'.
[  511.764903][T15641] netlink: 'syz.0.2563': attribute type 1 has an invalid length.
[  511.773068][T15641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2563'.
[  511.850540][T15650] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20004
[  511.947372][T15656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  512.155365][T15675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2572'.
[  512.155365][T15674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2572'.
[  512.186250][T15679] netlink: 'syz.2.2573': attribute type 3 has an invalid length.
[  512.568445][T15695] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  512.721090][T15701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'.
[  512.813898][T15700] lo: Caught tx_queue_len zero misconfig
[  512.994434][T15711] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2577'.
[  513.702227][T15722] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  515.462164][T15782] netlink: 'syz.3.2598': attribute type 64 has an invalid length.
[  515.832657][T15789] batadv_slave_0: entered promiscuous mode
[  516.592773][T15788] batadv_slave_0: left promiscuous mode
[  517.532045][T15846] netlink: 'syz.3.2616': attribute type 13 has an invalid length.
[  517.554031][T15845] netlink: 'syz.3.2616': attribute type 13 has an invalid length.
[  517.565992][T15846] netlink: 'syz.3.2616': attribute type 17 has an invalid length.
[  517.574968][T15845] netlink: 'syz.3.2616': attribute type 17 has an invalid length.
[  517.878803][T15846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  517.906504][T15845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  517.944798][T15859] __nla_validate_parse: 1 callbacks suppressed
[  517.944819][T15859] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2619'.
[  518.049128][T15860] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2619'.
[  518.111224][T15863] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2620'.
[  518.182977][T15871] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2621'.
[  518.899674][T15870] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2622'.
[  518.909379][T15870] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2622'.
[  519.467084][T15915] tipc: Resetting bearer <eth:syzkaller0>
[  519.832146][T15926] syz.0.2638: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  519.847369][T15926] CPU: 0 UID: 0 PID: 15926 Comm: syz.0.2638 Not tainted syzkaller #0 PREEMPT(full) 
[  519.847406][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  519.847417][T15926] Call Trace:
[  519.847426][T15926]  <TASK>
[  519.847434][T15926]  dump_stack_lvl+0x189/0x250
[  519.847476][T15926]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.847500][T15926]  ? __pfx__printk+0x10/0x10
[  519.847527][T15926]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  519.847547][T15926]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  519.847570][T15926]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  519.847593][T15926]  warn_alloc+0x214/0x310
[  519.847621][T15926]  ? stack_depot_save_flags+0x40/0x860
[  519.847651][T15926]  ? __pfx_warn_alloc+0x10/0x10
[  519.847683][T15926]  ? kasan_save_track+0x4f/0x80
[  519.847708][T15926]  ? xskq_create+0x56/0x170
[  519.847736][T15926]  ? xsk_init_queue+0xb0/0x110
[  519.847760][T15926]  ? xsk_setsockopt+0x4dc/0x8d0
[  519.847783][T15926]  ? do_sock_setsockopt+0x179/0x1b0
[  519.847804][T15926]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  519.847824][T15926]  ? do_syscall_64+0xfa/0x3b0
[  519.847841][T15926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.847872][T15926]  __vmalloc_node_range_noprof+0x125/0x12f0
[  519.847941][T15926]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  519.847979][T15926]  ? __kasan_kmalloc+0x93/0xb0
[  519.848009][T15926]  vmalloc_user_noprof+0xad/0xf0
[  519.848037][T15926]  ? xskq_create+0xbf/0x170
[  519.848068][T15926]  xskq_create+0xbf/0x170
[  519.848100][T15926]  xsk_init_queue+0xb0/0x110
[  519.848132][T15926]  xsk_setsockopt+0x4dc/0x8d0
[  519.848163][T15926]  ? __pfx_xsk_setsockopt+0x10/0x10
[  519.848191][T15926]  ? __pfx_aa_sk_perm+0x10/0x10
[  519.848224][T15926]  ? aa_sock_opt_perm+0xff/0x1b0
[  519.848246][T15926]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  519.848266][T15926]  ? __pfx_xsk_setsockopt+0x10/0x10
[  519.848295][T15926]  do_sock_setsockopt+0x179/0x1b0
[  519.848326][T15926]  __x64_sys_setsockopt+0x13f/0x1b0
[  519.848357][T15926]  do_syscall_64+0xfa/0x3b0
[  519.848375][T15926]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.848405][T15926]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.848424][T15926]  ? clear_bhb_loop+0x60/0xb0
[  519.848450][T15926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.848476][T15926] RIP: 0033:0x7f5ebcf8eec9
[  519.848496][T15926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.848513][T15926] RSP: 002b:00007f5ebddc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  519.848535][T15926] RAX: ffffffffffffffda RBX: 00007f5ebd1e5fa0 RCX: 00007f5ebcf8eec9
[  519.848550][T15926] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  519.848562][T15926] RBP: 00007f5ebd011f91 R08: 0000000000000004 R09: 0000000000000000
[  519.848575][T15926] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.848588][T15926] R13: 00007f5ebd1e6038 R14: 00007f5ebd1e5fa0 R15: 00007ffe82e124e8
[  519.848622][T15926]  </TASK>
[  520.176799][T15926] Mem-Info:
[  520.180076][T15926] active_anon:7270 inactive_anon:0 isolated_anon:0
[  520.180076][T15926]  active_file:3770 inactive_file:40040 isolated_file:0
[  520.180076][T15926]  unevictable:768 dirty:224 writeback:0
[  520.180076][T15926]  slab_reclaimable:12792 slab_unreclaimable:169619
[  520.180076][T15926]  mapped:29512 shmem:2876 pagetables:1213
[  520.180076][T15926]  sec_pagetables:0 bounce:0
[  520.180076][T15926]  kernel_misc_reclaimable:0
[  520.180076][T15926]  free:1240093 free_pcp:22158 free_cma:0
[  520.229713][T15926] Node 0 active_anon:22980kB inactive_anon:0kB active_file:15080kB inactive_file:159956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118048kB dirty:896kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13736kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  520.300768][T15926] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  520.333386][T15926] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  520.367197][T15926] lowmem_reserve[]: 0 2499 2501 2501 2501
[  520.374498][T15926] Node 0 DMA32 free:1070952kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23156kB inactive_anon:0kB active_file:15080kB inactive_file:158124kB unevictable:1536kB writepending:900kB present:3129332kB managed:2559908kB mlocked:0kB bounce:0kB free_pcp:65868kB local_pcp:37264kB free_cma:0kB
[  520.408006][T15926] lowmem_reserve[]: 0 0 1 1 1
[  520.412953][T15926] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  520.442399][T15926] lowmem_reserve[]: 0 0 0 0 0
[  520.447162][T15926] Node 1 Normal free:3883960kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20004kB local_pcp:13216kB free_cma:0kB
[  520.502958][T15942] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2641'.
[  520.552617][T15934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2640'.
[  520.562276][T15926] lowmem_reserve[]: 0 0 0 0 0
[  520.568068][T15926] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  520.581430][T15926] Node 0 DMA32: 1911*4kB (UM) 725*8kB (UME) 217*16kB (UME) 801*32kB (UME) 401*64kB (UM) 371*128kB (UME) 349*256kB (UME) 264*512kB (UE) 192*1024kB (UE) 2*2048kB (UE) 127*4096kB (UM) = 1061108kB
[  520.604465][T15926] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  520.618346][T15926] Node 1 Normal: 172*4kB (UE) 49*8kB (UME) 40*16kB (UME) 116*32kB (UME) 30*64kB (UME) 8*128kB (UME) 7*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 944*4096kB (M) = 3883960kB
[  520.659264][T15926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  520.695815][T15926] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  520.706855][T15926] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  520.718359][T15926] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  520.728745][T15926] 45163 total pagecache pages
[  520.733595][T15926] 0 pages in swap cache
[  520.738364][T15926] Free swap  = 124996kB
[  520.742842][T15926] Total swap = 124996kB
[  520.748738][T15926] 2097051 pages RAM
[  520.753370][T15926] 0 pages HighMem/MovableOnly
[  520.759021][T15926] 424984 pages reserved
[  520.763341][T15926] 0 pages cma reserved
[  520.931202][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'.
[  520.948025][T15961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2646'.
[  521.062938][T15972] netlink: 'syz.3.2650': attribute type 1 has an invalid length.
[  521.149926][T15980] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  521.163983][T15980] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  521.189977][T15980] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  521.800498][T15964] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  521.897220][T16000] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  522.086334][ T8777] IPVS: starting estimator thread 0...
[  522.198389][T16015] IPVS: using max 26 ests per chain, 62400 per kthread
[  523.198612][ T5884] Bluetooth: hci4: command 0x0405 tx timeout
[  523.877117][T16081] __nla_validate_parse: 3 callbacks suppressed
[  523.877138][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2672'.
[  524.210650][T16094] sctp: [Deprecated]: syz.4.2676 (pid 16094) Use of struct sctp_assoc_value in delayed_ack socket option.
[  524.210650][T16094] Use struct sctp_sack_info instead
[  524.495512][T16111] netlink: 'syz.2.2677': attribute type 1 has an invalid length.
[  524.510925][T16112] netlink: 'syz.4.2682': attribute type 1 has an invalid length.
[  524.522285][T16115] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  524.524255][T16112] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2682'.
[  524.545604][T16115] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  524.580411][T16106] gretap1: entered allmulticast mode
[  524.622771][T16115] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  524.654491][T16123] netlink: 'syz.0.2684': attribute type 2 has an invalid length.
[  524.681237][T16115] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  524.721384][T16122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2685'.
[  524.742718][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2685'.
[  524.764797][T16115] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  524.780437][T16115] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  524.784154][T16122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2685'.
[  524.825593][T16115] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  524.836077][T16115] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  524.861859][T16129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2686'.
[  524.988620][   T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 55740 - 0
[  525.001977][   T36] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  525.025499][   T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 55740 - 0
[  525.035103][   T36] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  525.044691][T16133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2687'.
[  525.074576][   T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 55740 - 0
[  525.085227][   T36] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  525.116034][   T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 55740 - 0
[  525.137719][T16141] netlink: 'syz.4.2688': attribute type 10 has an invalid length.
[  525.152358][   T36] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  525.237964][T16141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.251031][T16141] batadv0: entered promiscuous mode
[  525.257914][T16141] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  525.258112][T15489] bond0: (slave batadv0): interface is now down
[  525.280155][T16141] netlink: 'syz.4.2688': attribute type 10 has an invalid length.
[  525.289525][T15489] bond0: (slave batadv0): interface is now down
[  525.290492][T16141] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2688'.
[  525.305348][T15489] bond0: now running without any active interface!
[  525.316378][T16137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2687'.
[  525.344202][T16141] batadv0: entered allmulticast mode
[  525.409180][T16141] bond0: (slave batadv0): Releasing backup interface
[  525.470229][T16141] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  525.932697][T16165] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  526.209841][T16171] nbd2: detected capacity change from 0 to 127
[  526.247726][ T5884] block nbd2: Receive control failed (result -32)
[  526.888719][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2702'.
[  527.574983][ T9022] dvmrp8 (unregistering): left allmulticast mode
[  527.629063][ T9022] bridge0 (unregistering): left allmulticast mode
[  527.844711][ T9022] bond0 (unregistering): Released all slaves
[  527.927014][T16237] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  527.945328][T16237] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  527.985212][ T9022] tipc: Left network mode
[  528.752091][ T9022] hsr_slave_0: left promiscuous mode
[  528.770896][ T9022] hsr_slave_1: left promiscuous mode
[  528.812150][ T9022] pim6reg (unregistering): left allmulticast mode
[  530.035721][T16303] __nla_validate_parse: 4 callbacks suppressed
[  530.035741][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2730'.
[  530.423731][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2735'.
[  530.464220][T16320] syzkaller0: entered allmulticast mode
[  530.522226][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'.
[  530.531799][T16319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.541099][T16319] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.555022][T16305] netlink: 'syz.2.2732': attribute type 31 has an invalid length.
[  530.578187][T16321] netlink: 'syz.2.2732': attribute type 31 has an invalid length.
[  530.764537][T16324] IPVS: Scheduler module ip_vs_sip not found
[  530.779080][T16319] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.806718][T16319] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.832751][T16319] batman_adv: batadv0: Removing interface: dummy0
[  530.935428][T16317] syzkaller0 (unregistering): left allmulticast mode
[  531.602003][T16339] netlink: 'syz.2.2740': attribute type 13 has an invalid length.
[  531.610464][T16339] netlink: 'syz.2.2740': attribute type 17 has an invalid length.
[  531.626809][T16339] 8021q: adding VLAN 0 to HW filter on device team0
[  531.649946][T16339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  531.924098][T16351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2741'.
[  532.271067][T16358] !
: renamed from dummy0 (while UP)
[  532.301319][T16358] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  532.579362][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'.
[  533.109716][T16391] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  533.201581][T16396] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  533.210899][T16396] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  533.456687][T16402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2756'.
[  533.491585][T16405] atomic_op ffff888071d29998 conn xmit_atomic 0000000000000000
[  533.866052][T16419] openvswitch: netlink: Key type 186 is out of range max 32
[  533.936343][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'.
[  534.245814][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2763'.
[  534.350766][T16427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2763'.
[  534.734378][T16435] netlink: 'syz.2.2765': attribute type 7 has an invalid length.
[  534.833452][T16437] sctp: [Deprecated]: syz.1.2767 (pid 16437) Use of int in maxseg socket option.
[  534.833452][T16437] Use struct sctp_assoc_value instead
[  535.206651][T16449] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2768'.
[  535.354532][T16452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2770'.
[  535.413587][T16454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2770'.
[  535.568567][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2772'.
[  535.586069][T16460] netlink: 'syz.0.2772': attribute type 1 has an invalid length.
[  535.672972][T16464] ieee802154 phy0 wpan0: encryption failed: -22
[  535.675897][T16466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2772'.
[  535.702987][T16466] bridge0: port 2(syz_tun) entered blocking state
[  535.720448][T16466] bridge0: port 2(syz_tun) entered disabled state
[  535.735103][T16466] syz_tun: entered allmulticast mode
[  535.759640][T16466] syz_tun: entered promiscuous mode
[  535.773142][T16466] bridge0: port 2(syz_tun) entered blocking state
[  535.780235][T16466] bridge0: port 2(syz_tun) entered forwarding state
[  536.076425][T16476] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16
[  536.119912][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2776'.
[  536.666407][T16500] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  536.682754][T16500] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  536.756654][T16500] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  536.767640][T16500] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  536.861502][T16500] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  536.885447][T16500] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  536.914411][T16516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  536.920604][T16518] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7
[  536.933192][T16520] syzkaller0: entered promiscuous mode
[  536.952318][T16520] syzkaller0: entered allmulticast mode
[  537.090885][T16500] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  537.131793][T16500] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  537.205589][T16516] tipc: Resetting bearer <eth:syzkaller0>
[  537.260582][T15489] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  537.288955][T15489] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  537.321556][T16513] tipc: Resetting bearer <eth:syzkaller0>
[  537.346997][T16513] tipc: Disabling bearer <eth:syzkaller0>
[  537.410946][T15489] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  537.423119][T15489] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  537.581727][ T9022] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  537.606891][ T9022] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  537.636232][ T9022] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  537.655668][ T9022] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  537.709114][T16547] openvswitch: netlink: IP tunnel attribute has 17 unknown bytes.
[  537.732483][T15489] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  537.757960][T15489] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  537.790329][T16546] netlink: 'syz.2.2796': attribute type 3 has an invalid length.
[  537.798496][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  537.806914][   T36] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  537.926391][T15489] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 55740 - 0
[  537.979986][T16551] can: request_module (can-proto-5) failed.
[  537.990685][T15489] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  538.068630][T12876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  538.076791][T12876] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  538.111900][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2800'.
[  538.118343][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  538.144766][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  538.154305][T16565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2800'.
[  538.168604][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  538.177075][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  538.187176][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  538.230677][T16552] netlink: 'syz.4.2797': attribute type 10 has an invalid length.
[  538.240259][T16558] bond0: (slave bond_slave_0): Releasing backup interface
[  538.260730][T16558] bond_slave_0: left promiscuous mode
[  538.298082][T16558] bond0: (slave bond_slave_1): Releasing backup interface
[  538.309093][T16558] bond_slave_1: left promiscuous mode
[  538.330793][T16558] team0: Port device team_slave_0 removed
[  538.367173][T16558] team0: Port device team_slave_1 removed
[  538.385173][T16558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  538.551708][T16552] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode
[  538.571534][T16552] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  538.733389][T12876] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  538.799343][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2805'.
[  538.860134][T16586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2803'.
[  539.019278][T12878] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  539.050754][T16589] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address
[  539.063164][T16596] delete_channel: no stack
[  539.065477][T16589] bond11: (slave vxcan1): Error -95 calling set_mac_address
[  539.087040][T16586] bridge_slave_0: left allmulticast mode
[  539.094197][T16586] bridge_slave_0: left promiscuous mode
[  539.100571][T16586] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.214476][T12876] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  539.275743][T12876] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20001 - 0
[  539.330636][T16601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  539.342718][T15489] veth0_to_bond: left allmulticast mode
[  539.370542][T15489] veth0_to_bond: left promiscuous mode
[  539.378106][T15489] bridge3: port 2(veth0_to_bond) entered disabled state
[  539.403354][T15489] veth5: left allmulticast mode
[  539.411277][T15489] veth5: left promiscuous mode
[  539.416475][T15489] bridge3: port 1(veth5) entered disabled state
[  540.181303][T16628] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  540.243095][ T5884] Bluetooth: hci4: command tx timeout
[  540.312107][T15489] dvmrp11 (unregistering): left allmulticast mode
[  540.389717][T15489] team0: Port device bridge1 removed
[  540.652200][T15489] bond7 (unregistering): (slave macvlan3): Releasing backup interface
[  540.665511][T15489] bond0 (unregistering): Released all slaves
[  540.679655][T15489] bond1 (unregistering): Released all slaves
[  540.693402][T15489] bond2 (unregistering): Released all slaves
[  540.707329][T15489] bond3 (unregistering): Released all slaves
[  540.828727][T15489] bond4 (unregistering): Released all slaves
[  540.939510][T15489] bond5 (unregistering): Released all slaves
[  541.054042][T15489] bond6 (unregistering): Released all slaves
[  541.164986][T15489] bond7 (unregistering): Released all slaves
[  541.178706][T15489] bond8 (unregistering): Released all slaves
[  541.192533][T15489] bond9 (unregistering): Released all slaves
[  541.205972][T15489] bond10 (unregistering): Released all slaves
[  541.240781][T16621] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2814'.
[  541.262540][T16621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  541.448312][T15489] tipc: Disabling bearer <eth:syzkaller0>
[  541.464872][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'.
[  541.484307][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'.
[  541.498541][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2820'.
[  541.508703][T15489] tipc: Left network mode
[  541.513505][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2820'.
[  541.524114][T16644] netlink: 'syz.2.2820': attribute type 15 has an invalid length.
[  541.532452][T16646] netlink: 'syz.2.2820': attribute type 15 has an invalid length.
[  541.559935][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'.
[  541.576150][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2820'.
[  541.589129][T16562] chnl_net:caif_netlink_parms(): no params data found
[  541.613954][T16644] netlink: 'syz.2.2820': attribute type 15 has an invalid length.
[  541.635637][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'.
[  541.676746][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2820'.
[  541.695806][T16646] netlink: 'syz.2.2820': attribute type 15 has an invalid length.
[  542.165454][T16562] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.192674][T16562] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.214758][T16562] bridge_slave_0: entered allmulticast mode
[  542.235088][T16562] bridge_slave_0: entered promiscuous mode
[  542.282706][T16562] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.313262][T16562] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.320503][ T5884] Bluetooth: hci4: command tx timeout
[  542.343817][T16562] bridge_slave_1: entered allmulticast mode
[  542.353391][T16562] bridge_slave_1: entered promiscuous mode
[  542.514983][T16562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.530002][T16562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.591672][T16687] syzkaller1: entered promiscuous mode
[  542.600860][T16687] syzkaller1: entered allmulticast mode
[  542.631234][T16688] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  542.699734][T16562] team0: Port device team_slave_0 added
[  542.734833][T16562] team0: Port device team_slave_1 added
[  542.747237][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'.
[  542.901495][T16707] netlink: 'syz.0.2832': attribute type 13 has an invalid length.
[  542.910507][T16707] netlink: 'syz.0.2832': attribute type 17 has an invalid length.
[  542.937982][T16562] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.945169][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.975507][T16562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.993017][T16562] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.000533][T16562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  543.027891][T16562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.085729][T16707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  543.215060][T15489] hsr_slave_0: left promiscuous mode
[  543.223115][T15489] hsr_slave_1: left promiscuous mode
[  543.253696][T15489] veth1_macvtap: left promiscuous mode
[  543.260924][T15489] veth0_macvtap: left promiscuous mode
[  543.270957][T15489] veth1_vlan: left promiscuous mode
[  543.277308][T15489] veth0_vlan: left promiscuous mode
[  544.392402][T16562] hsr_slave_0: entered promiscuous mode
[  544.398730][ T5884] Bluetooth: hci4: command tx timeout
[  544.405897][T16562] hsr_slave_1: entered promiscuous mode
[  544.413282][T16562] debugfs: 'hsr0' already exists in 'hsr'
[  544.419862][T16562] Cannot create hsr debugfs directory
[  544.681610][T15489] IPVS: stop unused estimator thread 0...
[  544.788599][T16737] ieee802154 phy0 wpan0: encryption failed: -22
[  545.122651][T16752] netlink: 'syz.4.2846': attribute type 12 has an invalid length.
[  545.373779][T16562] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  545.383881][T16759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.434029][T16562] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  545.534340][T16562] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  545.555757][T16759] IPVS: Unknown mcast interface: 
[  545.584459][T16562] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  545.727896][T16780] tipc: Resetting bearer <eth:syzkaller0>
[  545.754252][T16779] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  545.763625][T16779] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  545.772107][T16779] tipc: Resetting bearer <eth:syzkaller0>
[  545.785084][T16779] tipc: Resetting bearer <eth:syzkaller0>
[  545.852641][T16780] netlink: 'syz.4.2853': attribute type 13 has an invalid length.
[  545.860497][T16562] 8021q: adding VLAN 0 to HW filter on device bond0
[  545.871801][T16780] netlink: 'syz.4.2853': attribute type 17 has an invalid length.
[  545.879466][T16562] 8021q: adding VLAN 0 to HW filter on device team0
[  545.899033][T12878] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.906306][T12878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.928586][T16780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  545.959366][T12878] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.966566][T12878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.262243][T16807] 8021q: adding VLAN 0 to HW filter on device team0
[  546.272491][T16807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  546.327101][ T1161] tipc: Resetting bearer <eth:syzkaller0>
[  546.367160][T16813] netlink: 'syz.0.2859': attribute type 1 has an invalid length.
[  546.370495][T16562] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.391521][T16813] __nla_validate_parse: 13 callbacks suppressed
[  546.391539][T16813] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2859'.
[  546.477740][ T5884] Bluetooth: hci4: command tx timeout
[  547.190164][T16562] veth0_vlan: entered promiscuous mode
[  547.279555][T16562] veth1_vlan: entered promiscuous mode
[  547.345952][T16562] veth0_macvtap: entered promiscuous mode
[  547.363910][T16562] veth1_macvtap: entered promiscuous mode
[  547.461209][T16562] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.474142][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2869'.
[  547.586805][T16864] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2869'.
[  547.652148][T16866] nftables ruleset with unbound set
[  547.726752][T16562] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.756635][T15489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  547.797835][T15489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  547.806724][T15489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.161815][T15489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.164028][T16874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2874'.
[  548.330996][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2876'.
[  548.402820][ T9022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.428102][ T9022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.531733][T16886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2876'.
[  548.580795][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  548.613027][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  548.890080][T16908] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  548.898413][T16879] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.139507][T16879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.389550][T16879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.516080][T16879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.821506][T16938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2884'.
[  549.857290][T12879] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.870451][T12879] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.924809][ T9008] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.991478][T12878] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.012864][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2888'.
[  550.060188][T16951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2888'.
[  550.213715][T16957] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2891'.
[  550.306264][T16967] netlink: 'syz.5.2893': attribute type 4 has an invalid length.
[  550.480816][T16980] netlink: 'syz.0.2895': attribute type 8 has an invalid length.
[  551.349343][T17007] netlink: 'syz.5.2899': attribute type 1 has an invalid length.
[  551.569903][T17017] __nla_validate_parse: 2 callbacks suppressed
[  551.569925][T17017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2903'.
[  551.725882][T17028] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2907'.
[  551.925776][T17036] syzkaller1: entered promiscuous mode
[  551.938964][T17038] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2909'.
[  551.954430][T17036] syzkaller1: entered allmulticast mode
[  552.224682][T17052] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2911'.
[  552.328530][T17054] netlink: 'syz.5.2911': attribute type 8 has an invalid length.
[  552.837116][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2913'.
[  552.867539][T17061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2913'.
[  552.886638][T17061] netlink: 'syz.2.2913': attribute type 6 has an invalid length.
[  553.006544][T17068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'.
[  553.189333][T17075] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode
[  553.217326][T17075] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode
[  553.238421][T17075] tipc: Resetting bearer <eth:syzkaller0>
[  554.242585][T17070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2916'.
[  554.272994][T17097] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2924'.
[  554.360965][T17111] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2928'.
[  555.302877][T17140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.362272][T17140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.294695][T17161] netlink: 'syz.0.2941': attribute type 5 has an invalid length.
[  556.949151][T17181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  556.956639][T17181] IPv6: NLM_F_CREATE should be set when creating new route
[  557.395262][T17194] __nla_validate_parse: 1 callbacks suppressed
[  557.395282][T17194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'.
[  557.778918][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  557.791739][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  557.801170][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  557.810636][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  557.820795][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  558.686667][T17218] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  558.727947][T17218] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  558.950536][T17199] chnl_net:caif_netlink_parms(): no params data found
[  559.186526][T17244] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2962'.
[  559.296899][T17241] netlink: 'syz.5.2960': attribute type 11 has an invalid length.
[  559.309967][T17241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2960'.
[  559.316131][T17252] netlink: 'syz.0.2961': attribute type 10 has an invalid length.
[  559.342712][T17247] ÿÿÿÿÿÿ: renamed from vlan0 (while UP)
[  559.396270][T17251] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  559.418441][T17199] bridge0: port 1(bridge_slave_0) entered blocking state
[  559.434561][T17199] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.453591][T17199] bridge_slave_0: entered allmulticast mode
[  559.481620][T17199] bridge_slave_0: entered promiscuous mode
[  559.548681][T17199] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.557485][T17199] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.564909][T17199] bridge_slave_1: entered allmulticast mode
[  559.586593][T17199] bridge_slave_1: entered promiscuous mode
[  559.753930][T17199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  559.772883][T17199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  559.841524][T17270] Bluetooth: MGMT ver 1.23
[  559.895942][T17199] team0: Port device team_slave_0 added
[  559.922051][T17199] team0: Port device team_slave_1 added
[  559.926083][ T5884] Bluetooth: hci0: command tx timeout
[  560.024831][T17278] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode
[  560.057637][T17278] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode
[  560.082692][T17278] tipc: Resetting bearer <eth:syzkaller0>
[  560.181936][T17278] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  560.203180][T17199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  560.218067][T17199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  560.255552][T17199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  560.271320][T17278] tipc: Resetting bearer <eth:syzkaller0>
[  560.420892][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'.
[  560.577884][T17199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  560.590109][T17199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  560.657580][T17199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  560.717208][T17278] tipc: Resetting bearer <eth:syzkaller0>
[  560.770354][T17314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2977'.
[  560.782000][T17314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2977'.
[  560.851622][T17199] hsr_slave_0: entered promiscuous mode
[  560.861826][T17199] hsr_slave_1: entered promiscuous mode
[  560.877294][T17199] debugfs: 'hsr0' already exists in 'hsr'
[  560.884086][T17199] Cannot create hsr debugfs directory
[  560.946169][T17318] delete_channel: no stack
[  560.962575][T17318] netlink: 'syz.5.2979': attribute type 9 has an invalid length.
[  561.210110][T17318] tap0: tun_chr_ioctl cmd 1074025677
[  561.215643][T17318] tap0: linktype set to 800
[  561.314742][T17340] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2982'.
[  561.999540][ T5884] Bluetooth: hci0: command tx timeout
[  562.052064][T17199] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  562.074463][T17199] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  562.104002][T17199] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  562.114739][T17199] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  562.363619][T17392] netlink: 'syz.0.2993': attribute type 1 has an invalid length.
[  562.526879][T17399] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  562.540527][T17399] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  562.804033][T17392] bond6: (slave bridge7): Enslaving as an active interface with a down link
[  562.902764][T17399] netlink: 'syz.0.2993': attribute type 1 has an invalid length.
[  562.918898][T17399] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2993'.
[  562.951809][T17418] macvlan2: entered promiscuous mode
[  562.957259][T17418] macvlan2: entered allmulticast mode
[  562.964256][T17418] bond6: entered promiscuous mode
[  562.971280][T17418] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  562.980628][T17418] bond6: left promiscuous mode
[  563.161641][T17423] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  563.190726][T17199] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.224949][T17427] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3002'.
[  563.543420][T17199] 8021q: adding VLAN 0 to HW filter on device team0
[  563.648726][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.655979][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.764847][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.772137][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.084216][ T5884] Bluetooth: hci0: command tx timeout
[  564.100164][T17446] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3007'.
[  564.264681][T17453] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  564.348942][T17455] netlink: 'syz.5.3009': attribute type 4 has an invalid length.
[  564.356957][T17455] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3009'.
[  564.454332][T17455] : renamed from bond0 (while UP)
[  564.588842][T17199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.617060][T17460] batadv_slave_0: entered promiscuous mode
[  564.672747][T17462] syzkaller0: entered promiscuous mode
[  564.679874][T17462] syzkaller0: entered allmulticast mode
[  564.688080][T17460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  564.892774][T17460] tipc: Resetting bearer <eth:syzkaller0>
[  564.925736][T17460] tipc: Disabling bearer <eth:syzkaller0>
[  564.983587][T17460] batadv_slave_0: left promiscuous mode
[  565.021453][T17199] veth0_vlan: entered promiscuous mode
[  565.053252][T17199] veth1_vlan: entered promiscuous mode
[  565.161315][T17473] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  565.179290][T17473] syzkaller0: entered promiscuous mode
[  565.184813][T17473] syzkaller0: entered allmulticast mode
[  565.223788][T17199] veth0_macvtap: entered promiscuous mode
[  565.360718][T17473] tipc: Resetting bearer <eth:syzkaller0>
[  565.377231][T17199] veth1_macvtap: entered promiscuous mode
[  565.419319][T17471] tipc: Resetting bearer <eth:syzkaller0>
[  565.489080][T17471] tipc: Disabling bearer <eth:syzkaller0>
[  565.577303][T17199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  565.610790][T17480] syzkaller1: entered allmulticast mode
[  565.629599][T17199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  565.676604][ T9020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.698543][ T9020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.726235][ T9020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.780925][ T9020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  566.160702][ T5884] Bluetooth: hci0: command tx timeout
[  566.587229][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.616244][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.846838][T12879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.887226][T12879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.826317][T17540] netlink: 'syz.2.3030': attribute type 1 has an invalid length.
[  568.179229][T17540] veth15: entered promiscuous mode
[  568.516225][ T5868] bridge0: port 2(syz_tun) entered disabled state
[  568.580149][ T5868] syz_tun (unregistering): left allmulticast mode
[  568.596933][ T5868] syz_tun (unregistering): left promiscuous mode
[  568.614100][ T5868] bridge0: port 2(syz_tun) entered disabled state
[  568.706960][ T1161] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  568.736177][T17567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3037'.
[  568.745393][ T1161] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  568.769226][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  568.781034][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  568.790348][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  568.808546][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  568.816611][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  568.885234][ T1161] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  568.926696][ T1161] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  568.996268][T17572] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3038'.
[  569.005893][T17572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'.
[  569.034252][ T1161] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  569.050736][T17572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3038'.
[  569.056932][ T1161] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  569.073714][T17572] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3038'.
[  569.160302][ T1161] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  569.174921][ T1161] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  569.572702][T17568] chnl_net:caif_netlink_parms(): no params data found
[  569.742761][ T9008] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 20001 - 0
[  569.755836][T17578] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3041'.
[  569.798718][T17578] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3041'.
[  569.879483][T12879] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 20001 - 0
[  569.958336][T12879] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 20001 - 0
[  570.019740][T12878] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 20001 - 0
[  570.080314][ T1161] dummy0: left allmulticast mode
[  570.085659][ T1161] dummy0: left promiscuous mode
[  570.096690][ T1161] bridge0: port 1(dummy0) entered disabled state
[  570.339071][T17596] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3045'.
[  570.485008][ T1161] bond5 (unregistering): (slave ip6erspan0): Releasing active interface
[  570.502928][T17619] netlink: 'syz.5.3045': attribute type 1 has an invalid length.
[  570.671238][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3045'.
[  570.801869][T17630] netlink: 'syz.1.3055': attribute type 11 has an invalid length.
[  570.885176][ T5882] Bluetooth: hci2: command tx timeout
[  570.976006][T17639] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3055'.
[  571.013358][ T1161] bond4 (unregistering): (slave geneve3): Releasing active interface
[  571.061439][ T1161] geneve0 (unregistering): left promiscuous mode
[  571.071832][ T1161] team0: Port device geneve0 removed
[  571.420726][ T1161] bond6 (unregistering): (slave bridge7): Releasing active interface
[  571.466966][ T1161] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  571.476407][ T1161] bond0 (unregistering): Released all slaves
[  571.495771][ T1161] bond1 (unregistering): Released all slaves
[  571.621289][ T1161] bond2 (unregistering): Released all slaves
[  571.743610][ T1161] bond3 (unregistering): left promiscuous mode
[  571.750861][ T1161] team0: Port device bond3 removed
[  571.757177][ T1161] bond3 (unregistering): Released all slaves
[  571.879367][ T1161] bond4 (unregistering): Released all slaves
[  572.000799][ T1161] bond5 (unregistering): Released all slaves
[  572.016261][ T1161] bond6 (unregistering): Released all slaves
[  572.053254][T17619] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  572.078205][T17568] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.125200][T17568] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.149333][T17568] bridge_slave_0: entered allmulticast mode
[  572.162562][T17568] bridge_slave_0: entered promiscuous mode
[  572.180999][T17568] bridge0: port 2(bridge_slave_1) entered blocking state
[  572.209070][T17568] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.216746][T17568] bridge_slave_1: entered allmulticast mode
[  572.241288][T17568] bridge_slave_1: entered promiscuous mode
[  572.406835][T17568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.461498][T17568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  572.552076][T17568] team0: Port device team_slave_0 added
[  572.576897][T17568] team0: Port device team_slave_1 added
[  572.739210][T17568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  572.761472][T17568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.788402][T17568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  572.804408][T17568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  572.811623][T17568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  572.840549][T17568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  572.899603][T17568] hsr_slave_0: entered promiscuous mode
[  572.906190][T17568] hsr_slave_1: entered promiscuous mode
[  572.913229][T17568] debugfs: 'hsr0' already exists in 'hsr'
[  572.919118][T17568] Cannot create hsr debugfs directory
[  572.957647][ T5882] Bluetooth: hci2: command tx timeout
[  573.044892][T17568] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  573.185511][T17568] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  573.275891][T17568] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  573.449026][T17704] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.457015][T17704] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.701655][T17704] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  573.721954][T17704] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  573.741523][T17720] __nla_validate_parse: 1 callbacks suppressed
[  573.741547][T17720] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3071'.
[  573.880476][ T5929] syz1: Port: 1 Link DOWN
[  573.887032][T17568] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  573.907227][T17718] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3071'.
[  573.922179][ T1107] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.946433][ T1107] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.976491][ T1107] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  573.995967][ T1107] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  574.043443][T17724] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3072'.
[  574.219907][ T1161] tipc: Left network mode
[  574.252608][T17568] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  574.265943][T17568] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  574.290112][T17568] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  574.322092][T17734] macsec1: entered promiscuous mode
[  574.329017][T17734] macvlan0: entered promiscuous mode
[  574.339551][T17734] macvlan0: left promiscuous mode
[  574.435986][T17568] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  574.688915][T17755] netlink: 'syz.1.3079': attribute type 11 has an invalid length.
[  574.956857][ T1161] hsr_slave_0: left promiscuous mode
[  574.966897][ T1161] hsr_slave_1: left promiscuous mode
[  575.040847][ T5882] Bluetooth: hci2: command tx timeout
[  575.193533][T17743] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3076'.
[  575.206117][T17743] netlink: 'syz.5.3076': attribute type 1 has an invalid length.
[  575.217321][T17743] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3076'.
[  576.387317][T17772] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3083'.
[  576.458875][T17774] netlink: 'syz.4.3084': attribute type 21 has an invalid length.
[  576.471202][T17568] 8021q: adding VLAN 0 to HW filter on device bond0
[  576.495687][T17774] netlink: 'syz.4.3084': attribute type 1 has an invalid length.
[  576.528010][T17774] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3084'.
[  576.594288][T17774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3084'.
[  576.616460][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3084'.
[  576.672739][T17568] 8021q: adding VLAN 0 to HW filter on device team0
[  576.702504][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.709776][ T9011] bridge0: port 1(bridge_slave_0) entered forwarding state
[  576.756306][T12878] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.763588][T12878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  576.929172][ T1161] IPVS: stop unused estimator thread 0...
[  577.120725][ T5882] Bluetooth: hci2: command tx timeout
[  577.470016][T17568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.692572][T17568] veth0_vlan: entered promiscuous mode
[  577.721427][T17568] veth1_vlan: entered promiscuous mode
[  577.904518][T17815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3093'.
[  578.104450][T17568] veth0_macvtap: entered promiscuous mode
[  578.251624][T17830] pimreg: tun_chr_ioctl cmd 1074025673
[  578.281095][T17568] veth1_macvtap: entered promiscuous mode
[  578.325116][T17568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.356117][T17568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  578.449442][ T9008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.477758][ T9008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.497038][ T9008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.549743][ T9008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.913401][T17847] netlink: 'syz.5.3103': attribute type 13 has an invalid length.
[  578.976481][T12878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.997990][T12878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.202420][ T9020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.225732][ T9020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.611292][T17862] __nla_validate_parse: 2 callbacks suppressed
[  579.611314][T17862] netlink: 468 bytes leftover after parsing attributes in process `syz.0.3029'.
[  579.876127][T17875] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  579.983000][T17888] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3112'.
[  580.166522][T17894] bridge0: port 2(bridge_slave_1) entered disabled state
[  580.174411][T17894] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.205364][T17902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3116'.
[  580.268352][T17905] netlink: 'syz.4.3115': attribute type 13 has an invalid length.
[  580.282236][T17904] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3116'.
[  580.293086][T17905] netlink: 'syz.4.3115': attribute type 17 has an invalid length.
[  580.301955][T17904] netlink: zone id is out of range
[  580.307928][T17904] netlink: zone id is out of range
[  580.313757][T17904] netlink: get zone limit has 8 unknown bytes
[  580.333713][T17894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  580.351498][T17894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.630450][T12878] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.650144][T12878] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.745495][T12878] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.791045][T12878] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.992617][T17899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  580.996095][T17917] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3120'.
[  581.179861][T17929] netlink: 'syz.1.3122': attribute type 1 has an invalid length.
[  581.250549][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'.
[  581.267531][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  581.273681][T17929] 8021q: adding VLAN 0 to HW filter on device bond1
[  581.325538][T17929] veth3: entered promiscuous mode
[  581.345508][T17929] bond1: (slave veth3): Enslaving as an active interface with a down link
[  581.384534][ T9008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  581.395935][T17937] 
[  581.398317][T17937] ======================================================
[  581.405355][T17937] WARNING: possible circular locking dependency detected
[  581.407848][ T9008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.412648][T17937] syzkaller #0 Not tainted
[  581.424412][T17937] ------------------------------------------------------
[  581.431544][T17937] syz.2.3125/17937 is trying to acquire lock:
[  581.437886][T17937] ffffffff8f68fab8 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0xa9/0x720
[  581.447494][T17937] 
[  581.447494][T17937] but task is already holding lock:
[  581.455041][T17937] ffffffff8f68fa58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  581.464710][T17937] 
[  581.464710][T17937] which lock already depends on the new lock.
[  581.464710][T17937] 
[  581.475199][T17937] 
[  581.475199][T17937] the existing dependency chain (in reverse order) is:
[  581.484214][T17937] 
[  581.484214][T17937] -> #2 (nr_neigh_list_lock){+...}-{3:3}:
[  581.492124][T17937]        lock_acquire+0x120/0x360
[  581.497159][T17937]        _raw_spin_lock_bh+0x36/0x50
[  581.502806][T17937]        nr_rt_ioctl+0x390/0xd50
[  581.507916][T17937]        sock_do_ioctl+0xdc/0x300
[  581.513066][T17937]        sock_ioctl+0x576/0x790
[  581.517921][T17937]        __se_sys_ioctl+0xfc/0x170
[  581.523038][T17937]        do_syscall_64+0xfa/0x3b0
[  581.528235][T17937]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.534656][T17937] 
[  581.534656][T17937] -> #1 (&nr_node->node_lock){+...}-{3:3}:
[  581.542652][T17937]        lock_acquire+0x120/0x360
[  581.547942][T17937]        _raw_spin_lock_bh+0x36/0x50
[  581.553241][T17937]        nr_rt_ioctl+0x193/0xd50
[  581.558177][T17937]        sock_do_ioctl+0xdc/0x300
[  581.563208][T17937]        sock_ioctl+0x576/0x790
[  581.568236][T17937]        __se_sys_ioctl+0xfc/0x170
[  581.573441][T17937]        do_syscall_64+0xfa/0x3b0
[  581.578477][T17937]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.584890][T17937] 
[  581.584890][T17937] -> #0 (nr_node_list_lock){+.-.}-{3:3}:
[  581.592813][T17937]        validate_chain+0xb9b/0x2140
[  581.598186][T17937]        __lock_acquire+0xab9/0xd20
[  581.603651][T17937]        lock_acquire+0x120/0x360
[  581.608685][T17937]        _raw_spin_lock_bh+0x36/0x50
[  581.614238][T17937]        nr_rt_device_down+0xa9/0x720
[  581.619788][T17937]        nr_device_event+0x137/0x150
[  581.625079][T17937]        notifier_call_chain+0x1b3/0x3e0
[  581.630803][T17937]        __dev_notify_flags+0x18d/0x2e0
[  581.636525][T17937]        netif_change_flags+0xe8/0x1a0
[  581.641987][T17937]        dev_change_flags+0x130/0x260
[  581.647710][T17937]        dev_ioctl+0x7b4/0x1150
[  581.652570][T17937]        sock_do_ioctl+0x22c/0x300
[  581.657692][T17937]        sock_ioctl+0x576/0x790
[  581.662570][T17937]        __se_sys_ioctl+0xfc/0x170
[  581.667779][T17937]        do_syscall_64+0xfa/0x3b0
[  581.672906][T17937]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.679405][T17937] 
[  581.679405][T17937] other info that might help us debug this:
[  581.679405][T17937] 
[  581.689634][T17937] Chain exists of:
[  581.689634][T17937]   nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock
[  581.689634][T17937] 
[  581.703726][T17937]  Possible unsafe locking scenario:
[  581.703726][T17937] 
[  581.711433][T17937]        CPU0                    CPU1
[  581.716885][T17937]        ----                    ----
[  581.722245][T17937]   lock(nr_neigh_list_lock);
[  581.727009][T17937]                                lock(&nr_node->node_lock);
[  581.734393][T17937]                                lock(nr_neigh_list_lock);
[  581.741953][T17937]   lock(nr_node_list_lock);
[  581.746573][T17937] 
[  581.746573][T17937]  *** DEADLOCK ***
[  581.746573][T17937] 
[  581.754815][T17937] 2 locks held by syz.2.3125/17937:
[  581.760034][T17937]  #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  581.768935][T17937]  #1: ffffffff8f68fa58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720
[  581.778949][T17937] 
[  581.778949][T17937] stack backtrace:
[  581.784845][T17937] CPU: 1 UID: 0 PID: 17937 Comm: syz.2.3125 Not tainted syzkaller #0 PREEMPT(full) 
[  581.784865][T17937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  581.784874][T17937] Call Trace:
[  581.784880][T17937]  <TASK>
[  581.784887][T17937]  dump_stack_lvl+0x189/0x250
[  581.784907][T17937]  ? __pfx_dump_stack_lvl+0x10/0x10
[  581.784922][T17937]  ? __pfx__printk+0x10/0x10
[  581.784941][T17937]  ? print_lock_name+0xde/0x100
[  581.784959][T17937]  print_circular_bug+0x2ee/0x310
[  581.784975][T17937]  check_noncircular+0x134/0x160
[  581.784991][T17937]  validate_chain+0xb9b/0x2140
[  581.785007][T17937]  ? rt6_disable_ip+0x6b3/0x720
[  581.785025][T17937]  ? __lock_acquire+0xab9/0xd20
[  581.785045][T17937]  __lock_acquire+0xab9/0xd20
[  581.785066][T17937]  ? nr_rt_device_down+0xa9/0x720
[  581.785079][T17937]  lock_acquire+0x120/0x360
[  581.785097][T17937]  ? nr_rt_device_down+0xa9/0x720
[  581.785114][T17937]  ? nr_rt_device_down+0xa9/0x720
[  581.785127][T17937]  _raw_spin_lock_bh+0x36/0x50
[  581.785147][T17937]  ? nr_rt_device_down+0xa9/0x720
[  581.785160][T17937]  nr_rt_device_down+0xa9/0x720
[  581.785174][T17937]  ? do_raw_spin_unlock+0x122/0x240
[  581.785191][T17937]  nr_device_event+0x137/0x150
[  581.785212][T17937]  notifier_call_chain+0x1b3/0x3e0
[  581.785230][T17937]  __dev_notify_flags+0x18d/0x2e0
[  581.785248][T17937]  ? __pfx___dev_notify_flags+0x10/0x10
[  581.785263][T17937]  ? __dev_change_flags+0x4cc/0x6d0
[  581.785281][T17937]  ? __pfx___dev_change_flags+0x10/0x10
[  581.785297][T17937]  ? full_name_hash+0x92/0xe0
[  581.785313][T17937]  netif_change_flags+0xe8/0x1a0
[  581.785331][T17937]  dev_change_flags+0x130/0x260
[  581.785348][T17937]  dev_ioctl+0x7b4/0x1150
[  581.785364][T17937]  sock_do_ioctl+0x22c/0x300
[  581.785386][T17937]  ? __pfx_sock_do_ioctl+0x10/0x10
[  581.785404][T17937]  ? __lock_acquire+0xab9/0xd20
[  581.785427][T17937]  sock_ioctl+0x576/0x790
[  581.785448][T17937]  ? __pfx_sock_ioctl+0x10/0x10
[  581.785467][T17937]  ? __fget_files+0x2a/0x420
[  581.785486][T17937]  ? __fget_files+0x3a0/0x420
[  581.785512][T17937]  ? __fget_files+0x2a/0x420
[  581.785533][T17937]  ? bpf_lsm_file_ioctl+0x9/0x20
[  581.785550][T17937]  ? __pfx_sock_ioctl+0x10/0x10
[  581.785569][T17937]  __se_sys_ioctl+0xfc/0x170
[  581.785587][T17937]  do_syscall_64+0xfa/0x3b0
[  581.785600][T17937]  ? lockdep_hardirqs_on+0x9c/0x150
[  581.785620][T17937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.785634][T17937]  ? clear_bhb_loop+0x60/0xb0
[  581.785649][T17937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.785663][T17937] RIP: 0033:0x7fbab1f8eec9
[  581.785677][T17937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  581.785690][T17937] RSP: 002b:00007fbab2e98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  581.785707][T17937] RAX: ffffffffffffffda RBX: 00007fbab21e5fa0 RCX: 00007fbab1f8eec9
[  581.785719][T17937] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005
[  581.785729][T17937] RBP: 00007fbab2011f91 R08: 0000000000000000 R09: 0000000000000000
[  581.785738][T17937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  581.785747][T17937] R13: 00007fbab21e6038 R14: 00007fbab21e5fa0 R15: 00007fff17181438
[  581.785764][T17937]  </TASK>