last executing test programs:

3m19.83002824s ago: executing program 3 (id=2596):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0xc25d08b, 0x4)

3m19.678317663s ago: executing program 3 (id=2599):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x178, r6, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x178}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084)

3m19.434243159s ago: executing program 3 (id=2603):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0xfffffeb8}, 0x48)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000040f8d2e0ff86f6ac620cf5221bba2e9459c942a3cf425759bb5db952c7c7a7c35785fe504b38b702b6530b37a4095e7270eb878eb2ce91d39963fbf468cbf4fb12d65c124406c35099bfed4c4313f3170ca7b8eb1832caccbe59999a5604945d25f91f5b013ea5d4c09597b31297021fc082a1483742ff9fc7ab418d740cb19c5df5ae9c6819653d396f29bf2f75d0cc0e2b11edc613aa34c965b7fc2bf93c4be446ec752cfb4855e89"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x3, 0x0, 0x23, 0x0, 0x0, 0x2}, 0x90)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0xffde, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x67, 0x4}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc, 0x20000000}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmmsg$inet(r2, &(0x7f0000003f40)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000e00)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc570d15691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0801af924a0df53cd52aaf4eca9516d8c5ccc", 0x7b}, {&(0x7f00000008c0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b", 0x44}, {&(0x7f0000001100)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3", 0x85}], 0x3}}], 0x2, 0x2000c044)
writev(r2, &(0x7f0000002640)=[{&(0x7f0000001640)="5c0148a5d1436d9af1538f8cac9c58cd8915777168e6e0fa01baf4bc5db2aca71d0b94cdc74d7cb34a19684a9ab2b84627d9c79655123c925bf6bb85ea8862866f9c8fce81183f0e3449451c4240e1d35e1ca864fd624243c5774d0757743716cd44a03f4843f23a02ac15b6d944018e0bfc0d6caaf3a18c514a579eccca87ad50588f2ee977a5018c0e485041bf888cab388cba1054f23e32deca1469b3c3e4cfb77268ed80128a33b0413a297a248b56eb27061acb372f6080a825f73fb9262e955de847107a30699d10e1beae0566f92f9bb3ee450ccbbb69cf003c6cf71716fc51a25888ea1a24adaefa1ec12ba484e967a07d95e5ffcf953057bfb3c028af504c9f7d13654f99fd3dc056d851dede60bfdd1ff83d5e8d0a860f3e8297ac71f2eeba5d8d301fc75096ee22608fb1d3850c8eccd1ea02640888a3a5b8ad218230146e4d850afa1896a228a3cd18498385ae07f70dba5fe70b14a926321af913fbea327b29cb81b5005c9d545cf63a1d741621160b32e67103594a9da1f8ef7e41e071e2844ca65c013ac27c21a65339abae11bdb9bb75428ba76e34eae5d17e6afd05c00b1d30f717b459b24276e666a08c6639bd0c21fddde88fbf7231643fc8bf0f86e1684590ab3fc71ccec7d107d7ca11cc67d07816bb46fce17df959fe43c30a0b8d4df86cc3ea1258d8e45be84dfe8584ff76dfd7010577b269032b3dacacbe44d7182380a98eb61f612bb06175da62a7e78d8792232678aad4981b5bd7de8647064c51c584c9136cc123d80ecd3b88f52dde0085b418c96f324590e2643d7d584986b1b55d73cb2fd507460f4a6c671f951587a7120017b1cb44754acc2a804a64a8acb37697c1457e00a30e8a6d53195b24cd3baabdb94f01041345b142dd6e93bf7c00da4ef4fc55e820c946d736841f17a79c1887254bdea716f0c9792f29fdc7f0bf88a8eaae16bd44ee26cffa67024ee3a7451f0bcde958432a06e0d5aa2cf80fcd1293c1d4c0013c604c356a03286dba90e7490c92a37b17299705b38971695c875e0b88bb690aa5928bfed45efecc80d637d753c51cbdb3125bb6ec069789a990193c2ef2d7f5591764b2c68a7c0679a329ce86f6d9875a45bf5e22722218f724a305e527b03a914bf68acdcc54d208bb9485068064d93ad55f709311df4702ae33af368b9ad7c97a4904bb133d495547e6b5337ff0feb7965beae97a84e4ae85e4d256f003aa23d509a94a7888c336b63986d544dc2a7196fc44cae04a7beb1ed298df1adeb2d79852400faf59952485887df3acaa766a51ddb525bb8f192f3e3f412af364282b9c9ed0713de45caffbd332ce1cc80fd140d8594b24338304e304e27468c32476b84128f7e1dd136a12275d3163cdb07f7e41be17ee4fcecabccbaac62d38f7b4c2d8a8c26d45e6ace82ecc3f73a13b88109090bedf7c2ec3988a9089963c0223549fc1f0a912b8868778a9fca1233b3422d67439a7f3c29725e3f0eb54bdaa8f310fd02a8a429a2eb26ba0e663200a39d40e01965b194c3fcba5a7dedf65bfc188d4e5f49288bf1f04b4aa62a08ec51476260849922c60caffd59cd594aba0602c71be92d1080c77d1ab5d7d2a881f05fab490f150c5da88ba804cf39767b5393fd18539f7be4b00a0369b07115f6f943cd6d09859350b4b81f954adc9b3f086b5bd44d4bad016c0413e57f3f537d972f7c61f1bd6e6900f259395784c1d6c1d5bad2b72a74900bfaea1bd31756cd76928fa1f968aa1591345601b59864bee79c65677423705f76be243f0f6a5d44fe87d3c08d2c03535a53591187b5531e629afe08bf7c02e60d608b7965e", 0x51c}], 0x1)

3m18.235724559s ago: executing program 3 (id=2607):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000), 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f00000002c0)=0x80000b, 0x4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000beffffff0200000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00&\x00l\t\x00\x00\b\x00\'\x00\x00\x00\x00\f'], 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000056)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

3m18.075479327s ago: executing program 3 (id=2609):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084)
r1 = socket(0xa, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x4f, "19c685c87cc846b5c36a736f734574eb23a5dc525def6123f63efb0132691b1324e79e05c5d556b0742be7a7a79354795fd62f1d6b9f5bc758ca0cb813af4ee445be4f11717812f951f12b0b55b8e6"}, &(0x7f0000000200)=0x57) (async)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={<r2=>0x0, 0x4f, "19c685c87cc846b5c36a736f734574eb23a5dc525def6123f63efb0132691b1324e79e05c5d556b0742be7a7a79354795fd62f1d6b9f5bc758ca0cb813af4ee445be4f11717812f951f12b0b55b8e6"}, &(0x7f0000000200)=0x57)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0x100, 0x0, 0x8, 0x6c6, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}], 0x40, 0x4855}, 0x24000052)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', <r3=>0x0, 0x1, 0x8, 0x1000, 0x8001, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x68, 0x0, 0xa1, 0x29, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x24, 0x32, 0x1, 0x3, [{@remote, 0x7}, {@empty, 0xa96}, {@private=0xa010101, 0xfffffffd}, {@private=0xa010100, 0xffffffff}]}, @cipso={0x86, 0x19, 0x1526867be65b9306, [{0x6, 0x9, "17021ff5cfe5cc"}, {0x5, 0xa, "02e5e90d91c7f810"}]}, @timestamp_prespec={0x44, 0xc, 0xc5, 0x3, 0x0, [{@multicast1, 0xffffffff}]}, @ra={0x94, 0x4, 0x1}]}}}}})
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000003c0)={r3, 0x1, 0x6}, 0x10)

3m17.711901222s ago: executing program 3 (id=2614):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002700010060bd7000fedbdf2506000000c65aca144610c37560628ca2701063850cff08adc86bbc6f14aeee96ee142b20ac9e360c"], 0x14}}, 0x4004804)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x39)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003b00010027bd7000fddbdf4ded000000d5992b891a72259bae5aa42a294391b866e84ed66dc2709d1afdb120871d34ca2e841a6c3c3d56b24ebc81c6c93242be87e36e5a5f449044ae8f6c17f86471f0acde45149db9a70d1e1509b3ea05f401582e87deed7dcce9d303000000000000003f120fd21f715e436fbd6fe772ae3815948d35938e36d522509a3c4722f8d86a1ed1f9a3eb5a2a432c2f0fffb025a57118a7059fcddcee0b8be7009dccbe6664f323f9606765e24cb6155504afc741e40f151b1c416b5fe5b6f362089a82600d8a0db11e88b6d56331db3576d6c79e92e88782513171ad92215bb22ebfb641"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040000)
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
pipe(&(0x7f0000000c00)={<r5=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r7, &(0x7f0000000440)="9f392016021d675e", 0x8, 0x0, &(0x7f0000004ff0)={0x2, 0x4e20, @loopback}, 0x10)
listen(r7, 0xda90)
r8 = accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000180), &(0x7f0000000080)=0x8)
r9 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f00000004c0)={0xe0000012})
socket$nl_netfilter(0x10, 0x3, 0xc)

3m10.703596837s ago: executing program 0 (id=2672):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c8c1}, 0x8000)
r8 = socket(0x2, 0x3, 0xff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xff5c, 0x0, &(0x7f00000002c0)="0300000000000000ff9e14f086dd", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002000000850000006100000018010000646c000400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
setsockopt$inet_opts(r8, 0x0, 0x13, &(0x7f00000001c0)="1e2fdec1b8", 0x5)
sendto$inet(r8, 0x0, 0x0, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)

3m10.498073099s ago: executing program 0 (id=2676):
r0 = epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
syz_emit_ethernet(0x16, &(0x7f0000000000)={@multicast, @multicast, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0x88ca}}}, 0x0) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async)
listen(0xffffffffffffffff, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', <r4=>0x0, 0xf851, 0x8, 0x7fffffff, 0x7f, {{0x8, 0x4, 0x2, 0x0, 0x20, 0x64, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp={0x44, 0x8, 0x6d, 0x0, 0x1, [0xfffffff2]}]}}}}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', r4, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYBLOB='&'], 0x10)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x2) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

3m9.868371034s ago: executing program 0 (id=2680):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3m9.735904719s ago: executing program 0 (id=2681):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x26, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)

3m9.594412555s ago: executing program 0 (id=2684):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = accept4$x25(r1, &(0x7f00000000c0), &(0x7f00000001c0)=0x12, 0x80800)
ioctl$OCFS2_IOC_INFO(r4, 0x80106f05, &(0x7f000000c980)={&(0x7f000000c7c0)=[0x0, 0x0, &(0x7f00000002c0)=@uuid={{0x4f32494e, 0x5, 0x0, 0xc0000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1fffff28})
r5 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r5, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="65844100c5dc2f"], 0xdd12}], 0x1}, 0x200488d4)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x40)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90100000000c54222cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}}, 0x0)

3m9.235600628s ago: executing program 0 (id=2692):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x38, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75", 0x0, 0x0, 0x3}, 0x50)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
close(0x3)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="200080020102010800000000000000000a00000006005c67914ea10a6268c2e8"], 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x2400c000)
sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000200)=@llc={0x1a, 0x303, 0x0, 0x5a, 0x67, 0xff, @remote}, 0x80, 0x0}}], 0x1, 0x4044000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r6, 0x0, 0x53, 0x0, &(0x7f0000000080))
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, r9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m2.675514106s ago: executing program 32 (id=2614):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000002700010060bd7000fedbdf2506000000c65aca144610c37560628ca2701063850cff08adc86bbc6f14aeee96ee142b20ac9e360c"], 0x14}}, 0x4004804)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x39)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003b00010027bd7000fddbdf4ded000000d5992b891a72259bae5aa42a294391b866e84ed66dc2709d1afdb120871d34ca2e841a6c3c3d56b24ebc81c6c93242be87e36e5a5f449044ae8f6c17f86471f0acde45149db9a70d1e1509b3ea05f401582e87deed7dcce9d303000000000000003f120fd21f715e436fbd6fe772ae3815948d35938e36d522509a3c4722f8d86a1ed1f9a3eb5a2a432c2f0fffb025a57118a7059fcddcee0b8be7009dccbe6664f323f9606765e24cb6155504afc741e40f151b1c416b5fe5b6f362089a82600d8a0db11e88b6d56331db3576d6c79e92e88782513171ad92215bb22ebfb641"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040000)
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
pipe(&(0x7f0000000c00)={<r5=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r7, &(0x7f0000000440)="9f392016021d675e", 0x8, 0x0, &(0x7f0000004ff0)={0x2, 0x4e20, @loopback}, 0x10)
listen(r7, 0xda90)
r8 = accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000180), &(0x7f0000000080)=0x8)
r9 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r5, &(0x7f00000004c0)={0xe0000012})
socket$nl_netfilter(0x10, 0x3, 0xc)

2m54.106000877s ago: executing program 33 (id=2692):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x38, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75", 0x0, 0x0, 0x3}, 0x50)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
close(0x3)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000000)=ANY=[@ANYBLOB="200080020102010800000000000000000a00000006005c67914ea10a6268c2e8"], 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x2400c000)
sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000200)=@llc={0x1a, 0x303, 0x0, 0x5a, 0x67, 0xff, @remote}, 0x80, 0x0}}], 0x1, 0x4044000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r6, 0x0, 0x53, 0x0, &(0x7f0000000080))
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, r9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m38.0837675s ago: executing program 4 (id=2888):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0xcc}}, 0x24040084)

2m37.923879693s ago: executing program 4 (id=2889):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x20000000000000b5, &(0x7f0000001440)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', r1, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (rerun: 64)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r3, @ANYBLOB="0000000000000000100100000000000200050000000002000000"], 0x48) (rerun: 64)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r4, r5, 0x7, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r4}, 0x16) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r6], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)=@ethtool_eeprom={0x4f, 0xcd, 0x7}}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a03000800000000000000020000000c000340000000000000000209000200733d9481414dc638f3631d0bfbb1c382797a32000000000900010073797a3000000000140000001100010000000000000000000500000a"], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) (async)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0)
ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f0000000240)=0x7f)
r13 = openat$cgroup_ro(r11, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r13, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) (async, rerun: 64)
connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x1}, 0xe) (async, rerun: 64)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000280)={r10, r10, 0x3, 0x57, &(0x7f0000000740)="818325fd661ca34ec8a87d1ff40eb45db54c3a60f05b063fb3d9c2b335d57194899e6a9b9ad987ab0107b3bc118c90fd6e03e349ed25502ec3d6a150f3eb5eb8325d7c9b73a559bede854e921223527665cc557e7a1d6e", 0x9, 0xf3, 0x1, 0x40, 0xc336, 0x2, 0x8000, 'syz0\x00'})
r14 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r13, 0x84, 0x72, &(0x7f0000000340)={<r15=>0x0, 0x20c, 0x10}, &(0x7f0000000440)=0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, &(0x7f00000004c0)={r15, 0x7, 0x7fff}, 0x8) (async)
sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d6163736563000018000280050003000c0000000f000100060000000000000108000500", @ANYBLOB="755ea10f429ecead13823b42bd993ea8cec793820556827101989a15302097da4bc2e09c7ccd1bfb18ae579c8ab351dce88cf8106d808541709128a076bc6e4955d9101b8191526e02dd5c3dff28d2e08b2ff20bdb99d31852ed73b173e278965ee7312800b84d08568983e9a074ac7bbe51688da209b94f97e20a0780aee52bf0791794a29a1ac6c0ff3467e419926edbdc017d347c977f0fec39d0ca33666493f2383ebf351aed3e941a0d76ceef1ab2584652d6514f6433e04f43f3509af0130ba5f44bf03953b08246e2b03cc20cde"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000)

2m37.628462164s ago: executing program 4 (id=2892):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r1, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(r3, r4, 0x0, 0xff7fffff000) (async)
r5 = socket$packet(0x11, 0x3, 0x300) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x31}}, 0x0) (async)
recvmsg$unix(r3, &(0x7f0000000740)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/190, 0xbe}], 0x1, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x2101) (async)
getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x4c}}, 0x0) (async)
sendto$packet(r5, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x6, 0x6, @local}, 0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000180)={0x6, 'veth1_macvtap\x00', {0x101}, 0x3})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c00)=ANY=[@ANYBLOB="60020000", @ANYRES16=0x0, @ANYBLOB="180025bd7000fbdbdf2507000000180001801400020076657468315f746f5f626174616476004400018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020076657468305f766972745f77696669001400020064766d727031000000000000000000000c00018008000300030000003c000180140002006272696467655f736c6176655f31000008000100", @ANYRES32=r7, @ANYBLOB="0800030000000000140002007369743000000000000000000000000014000180080003000200000008000100", @ANYRES32=r7, @ANYBLOB="5c0001800800030001000000140002007767320000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000300857e5ba908000100", @ANYRES32=r7, @ANYBLOB="01020100", @ANYRES32=0x0, @ANYBLOB="08000300030000001400020073797a6b616c6c6572310000000000003000018014000200697036746e6c30000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000074000180080003000200000008000300020000001400020076657468315f766c616e000000000000140002006d6163766c616e3000000000000000001400020076657468305f746f5f7465616d00000008000300030000001400020069703665727370616e3000000000000008000100", @ANYRES32=r7, @ANYBLOB="5c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300030000001400020076657468315f746f5f7465616d00000014000200636169663000000000000000000000000800030001000000080003000300000008000100", @ANYRES32=r5, @ANYBLOB="38000180080003000000000008000300000000002a0003000200000014000200687372300000000000000000000000000800030001000000"], 0x260}, 0x1, 0x0, 0x0, 0x4c881}, 0x800)
r10 = syz_genetlink_get_family_id$batadv(0x0, r8)
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100c0}, 0x4c801) (async)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40801)

2m37.386716425s ago: executing program 4 (id=2894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="88aa3d2fd3bcc157b60f21d719481e248e7ea8e353227c0b7e4decbc4bc45b90bc6aa2665dd35e2a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r1, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004040)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4800)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000004001b0000000c00228059fe008004000080060021"], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="680b53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000082c0)={{r9}, &(0x7f0000008240), &(0x7f0000008280)='%ps    \x00'}, 0x20)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, 0x0, 0x24008800)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="6400000041000104fcff070004000000010000000400488044000180400010803c000b80b76020681528a1b0c0f8459498a47a3c94f4d6e5306ef8d78e6bc8de779d73d2f26e922f35fe0c7e15ec243d6c4273df223b50d904003d8008000200", @ANYRES16=r12, @ANYBLOB="479ec158f8ab3ea30fae7192975629de919aa5fcf1fae39df487de29e1da093deb0b51be03bc1a8065b64a244038366ac0422a1fc403e57aa0c10441ce5e3f4f2297b3ea5370159813c002b63546c8aa706ff45407201b0cdfc4ae85cad2652a217ac66c01b9f3a71cdd02a74768a8"], 0x64}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

2m36.692425222s ago: executing program 4 (id=2904):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pI4   \x00'}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="996dc0c34a05d45daa4a68693e63aed1e3dfa9f9e56f921bf097a909b42361b35e1cf12e3064b79be5666035a9e0c215b3868a618cafae2543ee92add39469b974b31c791795750c4fb07620ad8a9d2b935b04a0a57f78d71f3aee39b26ff0ab2a5534fcf033a25696dce8944611cabf975b945def2a28014544e76fddacacfc2ff02548b2db6804fa90e3a39fee7aaa2c8ba4927ad45626e83a116b45c862139d7b9b7b2658351a267a2958ca8d3cbf", @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES8=r5, @ANYRESDEC=r5, @ANYRES8=r5, @ANYRES8=r5], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000380)={[{0x2d, 'pids'}, {0x2b, 'memory'}]}, 0xe)

2m36.144396844s ago: executing program 4 (id=2906):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10)
r4 = socket(0x1e, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10)
write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', <r12=>0x0, 0x2f, 0x3, 0x40, 0xdd, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0xbf, 0x9}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x14c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000)

2m21.062131172s ago: executing program 34 (id=2906):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a3000000000090002"], 0xc0}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414"], 0xfdef)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x40, 0x0, 0x1}, 0x10)
r4 = socket(0x1e, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000004)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10)
write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x50, 0x140b, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb8b5cbbbb0800450000a70000000200119078000000000000000000000000010000000000060080000000"], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xa}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl0\x00', <r12=>0x0, 0x2f, 0x3, 0x40, 0xdd, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7800, 0x7800, 0xbf, 0x9}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x14c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000)

2.934991821s ago: executing program 7 (id=4103):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket(0x11, 0x3, 0x8)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x3, 0x0, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x64, 0x3, 0xe6, 0x29, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x42}]}}}}}) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x67, 0x400}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc, 0x20000000}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d3e76f9ebcce8038e61cc452f9f102b620000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c0006800800060005000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008060}, 0x4000800) (async)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0xef) (async, rerun: 64)
sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042760590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) (rerun: 64)
socket$kcm(0x29, 0x5, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000140)={&(0x7f0000000080)=[{0x1, 0x0, 0x8f9a, 0x5, 0x5, 0x4, 0x6, 0x2}, {0x0, 0x0, 0x9, 0x7fffffff, 0xffff, 0x7, 0x8, 0x8001}], 0x2, 0x38, 0x0, 0x4})

2.79497934s ago: executing program 2 (id=4106):
r0 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1d, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c010000130a030000000000000000000300000280000800e83ca08fdfd3c5428c17036d65a155263a1e2b821be0166ce513aebd9aacaba83231db4cf83d14d0f0403c573e766cfdcc2f3137adfba2cc2e02aed88ad01826760776ce870fccf3d7977eb95ccb6bd5e66f56b05f575bf7ae68310976441b4d81fe7b0d09ca19d641d661f3e6706d4ca274c529586dba22b8f88f0408000340000000010900010073797a30000000000900020073797a"], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000440)={0x3, 'vlan0\x00', {0xc}, 0xdd25})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000780), &(0x7f00000007c0)=0x4)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x19, 0x4, 0x4, 0x8}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4)
sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
readv(r11, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0xffffff07, &(0x7f0000000180)="0400d876d5620064d082778c3938adfc73342d7335a2c8807c6b14fcd634fee8b9af4c33956bdf18f076e3e588829d65ddc4825e1d13e9522736f20832e770322fc9addbb11eea2ae8f216ce86e35590b900bf5a7ecd89cbfeb1f2148b8138c4a79d8f8866d037343ae64f2b4f35455364fda4e89c96a72ecee8a784d6f6f03f1d769342ad53ce8fce4e5402d1745ffa69b1edf60fc36226", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0xf}, 0x28)
r12 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f00000002c0)=[{0x5763, 0x7, 0x8}, {0x0, 0x6, 0x4, 0x9}]}, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r12)

2.255610709s ago: executing program 2 (id=4111):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7) (async)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r7)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x3c, r8, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}}, 0x8000) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)={0x3c, r8, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}}, 0x8000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r8, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r10 = socket$inet6(0xa, 0x3, 0x6)
sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) (async)
sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b80), r0)
sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000002c00)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)

2.187306388s ago: executing program 1 (id=4113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r0, 0x2b, 0x1, 0x3, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x4c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x4, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80, @mcast1, 0x4, 0x1}, 0x20)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000040))
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan0\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r3, r1, 0x0, 0x9799)

1.947902648s ago: executing program 7 (id=4116):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000001200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc080)
shutdown(r0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x5, 0x8}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x5, 0x8}]}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

1.808136305s ago: executing program 2 (id=4118):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x2c, &(0x7f00000005c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xb, @private1, 0x1}]}, &(0x7f00000004c0)=0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000))

1.785755335s ago: executing program 7 (id=4119):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000140), 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x5, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'ip6_vti0\x00', <r3=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0], <r4=>0x0, 0x2c, &(0x7f0000000d80)=[{}], 0x8, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_tracing={0x1a, 0x20, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@alu={0x7, 0x1, 0x8, 0x8, 0xa, 0xfffffffffffffffe, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x33}, @alu={0x4, 0x1, 0x2, 0x1, 0x5, 0xffffffffffffffc0, 0x4}, @alu={0x0, 0x0, 0x7, 0x3, 0xa, 0xfffffffffffffffc, 0x9}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000010c0)='GPL\x00', 0x86, 0x47, &(0x7f0000001100)=""/71, 0x41000, 0x54, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0xc, 0xe49, 0xfffffffa}, 0x10, 0x1c75f, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000001200)=[{0x0, 0x5, 0x7, 0xc}, {0x2, 0x5, 0xe, 0x1}, {0x2, 0x4, 0x3, 0xa}, {0x0, 0x4, 0x2, 0x7}, {0x0, 0x4, 0x10, 0x8}, {0x4, 0x4, 0x3, 0xc}, {0x1, 0x4, 0xe, 0x2}], 0x10, 0x10}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7}, 0x50)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000b00)=ANY=[@ANYRES32=r8], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001480)={0xffffffffffffffff, 0x8001, 0x10}, 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001540)={{0x1, <r12=>0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x9, 0x23, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb42a}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0xa, 0x26, &(0x7f0000000bc0)=""/38, 0x41000, 0x42, '\x00', r3, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x4, 0x10, 0x7a, 0x3}, 0x10, r4, r5, 0x2, &(0x7f0000001580)=[r6, r7, r8, r9, r10, 0xffffffffffffffff, r11, r12], &(0x7f00000015c0)=[{0x4, 0x1, 0xe, 0x4}, {0x3, 0x3, 0x1, 0x4}], 0x10, 0x9}, 0x94)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x30}, @NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @meta={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_SREG={0x0, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x0, 0x1, 0x1, 0x0, 0xb}]}}}, {0x0, 0x1, 0x0, 0x1, @rt={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x0, 0x2, 0x1, 0x0, 0x3}]}}}, {0x0, 0x1, 0x0, 0x1, @cmp={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x0, 0x1, 0x1, 0x0, 0x11}]}}}, {0x0, 0x1, 0x0, 0x1, @nat={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @bitwise={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x0, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_BITWISE_OP, @NFTA_BITWISE_DREG={0x0, 0x2, 0x1, 0x0, 0x8}, @NFTA_BITWISE_DATA={0x0, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x0, 0x1, "105300716c87b2d992f6456232813ab7cc7135c334b5a425295a4a87fa05de28a5de08562aeebb819090f90a356bef42564fc3dd0fa6f2db7a804320f5b0fc4ad81b23227a07e008efec9a7eae1a20b1999f39f9eaf66410d7a0a7185ac1639b7e9e06fca4ad543fb1597778f8be702fc8ceaea031b2b6033abd1797f9c730b1642e56334e2e4d6aa7ac30ea059f22a183c84d1017"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_BITWISE_DATA={0x0, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "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"}]}, @NFTA_BITWISE_DATA={0x0, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0x7dc520ea1cba82d6}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_BITWISE_DATA={0x0, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "2f925df0fb313178e261741affab99f043844c009478634c9856b331a1234301d68a21a17ee873be83c558e6e037ddefd30024c7fcac56e209008324f086395506cbd416e32c10b4ad1a1f017aa28248527c8b4c9c93d282632b2150206d403873009a296cb521e97e09449662e8efdf27581b6f7a9817a18472cb9e09a3926fab563577626bb1cdfafcaebd5b0568c742b0"}]}, @NFTA_BITWISE_OP={0x0, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_LEN={0x0, 0x3, 0x1, 0x0, 0x41}]}}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x10}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
r14 = socket$nl_route(0x10, 0x3, 0x0)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r15, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0)
socket$inet(0x2, 0xa, 0x906)
socketpair(0x1d, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
sendmsg$IPSET_CMD_CREATE(r16, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8991)

1.624992104s ago: executing program 1 (id=4122):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x0, 0x0, 0x5}, 0xe)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000340)="df5db1d39fee14cfe60b330f5b5898fa9c3b13877dd5efece7d25824a4d03f085142fe404c25484a9bddfd450c5a8c13609d628670916255ac4989cbd5c7285aa03e498a1d2ed7beac06fddfa08dd373e59698a811f672e524e2a21c7c5fe34504dee3d7ae7396dd77128284c078199e39f533323f9a0a2406c6f63e34a71db5", &(0x7f00000004c0)=""/199}, 0x20)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000440)={r5, 0x705, 0xd}, 0x8)

1.488644615s ago: executing program 5 (id=4123):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r5)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r4)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7800ffdadf250100000008000200020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2010004)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)
sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000083", @ANYRES16=r6, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040)

1.483924902s ago: executing program 1 (id=4124):
r0 = socket$kcm(0x1e, 0x4, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
unshare(0x22020400)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000001c0)={{r1}, 0x3, 0x4b66ebf5, 0x7})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee1768810003308030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfcceb", 0x90)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r4, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0x8, 0xffffffffffffffff, 0x33)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

1.403772443s ago: executing program 7 (id=4126):
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4890)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001c00)=r2)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
shutdown(r5, 0x1)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
read(r8, &(0x7f0000000240)=""/176, 0xb0)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$NS_GET_USERNS(r9, 0xb701, 0x0)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000000)={r12, 0x3}, &(0x7f0000000040)=0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r13=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4000000120010022abd7000fedbdf2507000000", @ANYRES32=r13, @ANYBLOB="02040400000200007c0034801400350073797a6b616c6c6572310000000000001400350077673000000000000000000000000000140035006970766c616e30000000000000000000bea48023aa888d407d901400350068737230000000000002000000000000140035612e310000000000000000000000140035006e65747004000000000000000000000008"], 0xa4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r14=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r14, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
r15 = socket(0x10, 0x3, 0x0)
sendmmsg(r15, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.230972585s ago: executing program 1 (id=4128):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000aa771b62409a00"/34], 0x50)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES64=r5, @ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRESOCT=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB="ac060000", @ANYRES8=r2, @ANYBLOB="00012a4ba83cae4b3e538e09700c80affebd", @ANYRES32=0x0, @ANYBLOB="bc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRESOCT=r6, @ANYBLOB="0800070000009b327a0a0b26967b01006e6f746966795f70656572735f696e74657276616c00000000000000000500030003000000080004000900000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000778db8fb080004000f00000008000600fed73916387e7e717ec3f2d11d", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="b001028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ffffffff080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008e5eed2408000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400050000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="0802028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400f8ffffff38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400090000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d00006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004000900400aab000000018003075100000001006d6a000001000000000e060000000500030802000000000006051efaffffff003e04010100003c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0x6ac}, 0x1, 0x0, 0x0, 0x800}, 0x814)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}}, 0x18)
connect$can_j1939(r7, &(0x7f00000001c0)={0x1d, r10, 0x0, {0x0, 0x0, 0xc1e463a8b5b41666}}, 0x18)
sendmmsg(r7, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="d5a0eecf", 0x4}, {&(0x7f0000000180)="b5af655ca5", 0x5}], 0x2}}], 0x1, 0x4004)
recvmmsg(r7, &(0x7f00000059c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000680)=""/45, 0x2d}], 0x2}, 0x5}], 0x1, 0x10000, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x66)
close(r0)

1.122816531s ago: executing program 6 (id=4129):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x80}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/77, 0x4d}, {&(0x7f00000001c0)=""/129, 0x81}], 0x2}, 0x40)

1.078962349s ago: executing program 6 (id=4130):
unshare(0x28000600)
unshare(0x58060580)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r0=>0x0})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x52, 0x1, 0x100, 0x25dfdbff, {0x1c}, [@typed={0x4, 0x168}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff01a705"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x3, 0x5, 0x2, 0xffffffffffffffff, 0x41, '\x00', r0, r1, 0x2, 0x5, 0x3}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r5=>0x0}, &(0x7f0000000300)=0xc)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x29, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x1, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x40800000000000, 0x800000000000002}, 0xffffffff, 0xfffffffc, 0x1, 0x1, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x4048815}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x624}, 0x94)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x70000)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan3\x00'})

999.236835ms ago: executing program 1 (id=4131):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r0=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0xffffeffd, {0x7, r0}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x0, {@ip4=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4052)

893.602551ms ago: executing program 6 (id=4132):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000050000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085004000a500000085000000d00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r3], 0x9e)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r2}, 0xc)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c)
sendto$inet6(r5, &(0x7f0000000e80)="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", 0x2c0, 0x6d91fb6102d8910c, 0x0, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x40000, 0x0, 0x0)
recvfrom(r5, &(0x7f0000001a80)=""/4043, 0xfcb, 0x20, 0x0, 0x0)
close(0x3)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)="77179d0c72541cb8b450510db4775c579b704d765263c75f0aa1078408d613b2a786f888f526a0609491caa5885cc82fd712178b01b3a16ac6bf8ecc0b019f875658fd1498d0bffdc600a7d9bde5b5eddb854be6d39d7f7bbe4368b81440132b32db9edc48f921afb0fcbef09e1570425648cf2f6af3270152a8af98144173acd522b5520ab3281a76469466bea80107ff4015d6df0cdedc585bb1b12fdf9aaf4f72bf713de6c3b08f17e32a213a0576f2c79b75097d6096643db67661fa85a20c82fc01aaf9979cce02961658a7b6121ea78e", 0xd3}], 0x1, &(0x7f00000006c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x30}, 0x20048050)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', <r8=>0x0, 0x80, 0x10, 0x1, 0xc, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x64, 0x0, 0x3, 0x4, 0x0, @empty, @rand_addr=0x2, {[@noop]}}}}})
socket$packet(0x11, 0x3, 0x300)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000000070000030000000100000000010000", @ANYBLOB="0300000400"/20, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500000003000000010000000800"/28], 0x50)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000180)=0x9, 0x4)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)

892.721944ms ago: executing program 1 (id=4133):
r0 = socket(0x2a, 0x2, 0x5)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x3fff}, 0x80)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbd7017fadbdf2502"], 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa1000000000378157f865fb74f33f85654932c8245000007010000f8ffffff8502000008004fee46036908c98c122fa83657005764"], &(0x7f0000000000)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x70}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$sock_int(r4, 0x1, 0x13cac0546f95b70a, &(0x7f0000000100)=0xa, 0x4)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5)
connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r5, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001c646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000040)="c1dfb080cd21d308098e000081", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socket(0x20, 0x6, 0x9)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x124}}, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r9, 0x4048587b, &(0x7f0000000a40)={{<r10=>r1, &(0x7f0000000240)='}{+@%\'#(\'&\xf0\x00', 0x2002, &(0x7f00000002c0)={@align=0x1, {0x7, 0xf10, 0xa, 0x8}}, 0x0, &(0x7f00000005c0), &(0x7f0000000600)=0x40}, 0x4, &(0x7f00000009c0)=[{0x1, 0x400, &(0x7f0000000640)='\x00', &(0x7f0000000680)="47cc55a765b0bd", 0x7, 0x8}, {0x2, 0x7, &(0x7f00000006c0)='\x00', &(0x7f0000000700), 0x0, 0x16}, {0x2, 0xb, &(0x7f0000000740)='/\x00', &(0x7f0000000780)="304c96f252996123aca2499e88092387cc996a44c0c114167e3c2feaec487cef6e43e1eac203418e960b41e436cfcf71fa3b97756fa4157046d2d446dd7f7f8befc4934efeb30741a4c362fbdafd5d36585c436cb8cad5532b9f5c6484616006cbb681e619a456a22e6c0f9358a8691f2544", 0x72, 0x20}, {0x2, 0x9, &(0x7f0000000800)='\xe3\x00', &(0x7f0000000900)="fe2b90d82288a87c3f6f6b1431244bf39de1f1b6d11db81c99f99f68ca29ba171c3776caaefaeb89a0b04b28a3cc074768b03815d0eb135decbc52871bf2999af23268c01f2370c45eb13b480014125a3ea08987485312179946345c8a456fbb34161e2f6d34d53f0a959cc9986a2241e94adeda3e36c77339ea55c1800cd8b384d3885848cda546bbf7ac9e7f7fff18a88f61f2df1f29a4dc26a1f4dff0365345e05e249157b9bdbadbee4e5c6f4fff4917af651f", 0xb5, 0x8}]})
ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000b00)={0x4, &(0x7f0000000ac0)=[{0x6, 0x0, 0x33, 0x8}, {0x3ff, 0xc0, 0x8, 0x6}, {0x400, 0x1, 0x2}, {0x3, 0xa, 0x7, 0x5}]})
sendmsg$inet6(r9, &(0x7f0000000100)={&(0x7f0000000180)={0xa, 0x4e1f, 0x80000, @empty, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000200000200000000003700"/24], 0x18}, 0x20048840)

877.888143ms ago: executing program 2 (id=4134):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x11, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x17, 0x0, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x40000)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..'])
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
openat$cgroup(r11, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)

765.539236ms ago: executing program 5 (id=4135):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x4000, 0x800, 0x0, 0x3}, 0x20) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x70}}, 0x0) (rerun: 32)

757.092979ms ago: executing program 6 (id=4136):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$netlink(r2, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000000180)={0x10}, 0x10}, {&(0x7f0000000380)={0x10, 0x3eb}, 0x10}], 0x2}, 0x0) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
close(0x3)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

563.388386ms ago: executing program 5 (id=4137):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0x0, 0x3}, 0xff}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000240)={0x1d, r3, 0x3, {0x0, 0xff, 0x4}, 0xfe}, 0x18)

560.998906ms ago: executing program 6 (id=4138):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000002000084fdf7ffff0a000000020000000000000005000000020000000400000600000000000000010500000020000000006100302e615f5f610061"], 0x0, 0x58, 0x0, 0x0, 0x0, 0x10000, @value=r1}, 0x28)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @initdev}, &(0x7f0000000080)=0xc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, &(0x7f0000000580)={0x2, @long={0x3, 0xffff, {0xc3f162150e0db309}}}, 0x14)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r4, 0xd3)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x6, 0xfffffff7, 0x12, @private2, @private1, 0x80, 0x0, 0x9, 0x5}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv6_getnetconf={0x34, 0x52, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xf}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x5}, @NETCONFA_FORWARDING={0x8, 0x2, 0xe}]}, 0x34}}, 0x12)

558.130292ms ago: executing program 2 (id=4139):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, 0x94)

471.504993ms ago: executing program 5 (id=4140):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r1=>0x0, 0x29, 0x4, 0x3, 0xcbf, 0x4e, @private0={0xfc, 0x0, '\x00', 0xfc}, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x8, 0x101, 0x7}}) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', r1, 0x29, 0x84, 0x3, 0x4038a0b, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) (async)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)
r5 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f0000000300)=0xffffffff, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000001d80), 0x0, 0x48000)
ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, 0x0) (async)
sendto$inet(r5, &(0x7f00000007c0), 0x0, 0xe044, 0x0, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc0100000400000000000000000000000000000004"], 0xfc}}, 0x0) (async)
connect$inet(r8, 0x0, 0x0) (async)
socket$inet6(0x10, 0x2, 0x4)
r10 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$inet(r10, &(0x7f0000001200)=[{{&(0x7f0000000cc0)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfffd, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x6}}]}, 0x2c}}, 0x0)

377.870886ms ago: executing program 2 (id=4141):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) (async)
setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0x0) (async, rerun: 64)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (rerun: 64)

373.810944ms ago: executing program 7 (id=4142):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000003"], 0xa)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000fbffffff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r4}, 0x38)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r5, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

238.915307ms ago: executing program 5 (id=4143):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x70bd2b, 0x25dfdbff, {@in=@loopback, 0x4d5, 0xa, 0x33}, [@mark={0xc, 0x15, {0x35075d, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYBLOB="6428f1728ef11ec567d3a2de5acc460a0e70b033cf67fd37f414623c42767ca68d3385b7ad3386a808eb2cd81fa06c58b1a76b1ec5a0043432c4b97ae6447b3a535f70b85f7e69318694c3b6602fa2eb9d27e809418d4801edf8eef947143a31dce6235b2f028ad91ece5c6779b414b2fbf87f621268d285e33fdb4fc19f2f7c46e74ba51a3fa1ea0ded50e23a529fb25869418057ea0a9e9f6c08f30e487aa2c1ee8a017bcfeae77a1307bd2234f7e7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)

150.268119ms ago: executing program 5 (id=4144):
syz_emit_ethernet(0x46, &(0x7f0000004000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x1, 0x8, 0xbb, 0xa}}}}}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0xcb}, @generic={0x7, 0xd, "064d291a00000000d05c49"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000540)=0x10000b, 0x4)
sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffffffffffe00}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bind$802154_dgram(r1, &(0x7f0000000580)={0x24, @none={0x0, 0xffff}}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000008480)=ANY=[@ANYBLOB="aaaaaafe0800482f00fc020000000000000000000000000000ff020000000000000000000000000001242088a8000000000003000500000800000086dd88a888be080000001000a0000100000000000000080022eb00000000200000000200000000000000fffc00000800655800000000"], 0x0)

123.020797ms ago: executing program 6 (id=4145):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@empty, <r4=>0x0}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@deltclass={0x5c, 0x29, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0x10}, {0x5, 0x10}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xd3}}, @tclass_kind_options=@c_htb={{0x8}, {0x10, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xf}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x78}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x20044051)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
sendto$x25(r3, &(0x7f0000000480)="1a24b56200fee6ea65b264fc6918c7f04dbba7ab8fe7f0f82a8cb2fc0e0d0121599e533948030881e7b92f9e70a0fc7a9c8a", 0x32, 0x4000001, &(0x7f00000004c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18)
getpeername$l2tp6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000005c0)=0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000600)={<r6=>r3, 0xb, 0x7, 0xa5})
connect$pppoe(r6, &(0x7f0000000640)={0x18, 0x0, {0x2, @random="cdfb2956cec4", 'batadv0\x00'}}, 0x1e)
syz_genetlink_get_family_id$nbd(&(0x7f0000000680), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40004800)
ioctl$PPPIOCGFLAGS(r6, 0x8004745a, &(0x7f0000000800))
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000880)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r5, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0xb}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x440400c4}, 0x4000001)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000009c0)={@local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x17}, 0xfffffe01, 0xfffc, 0x4, 0x100, 0x2, 0x80080, r4})
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a80), r6)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x2, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1000}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r7)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xb0, r11, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x50, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x240000c4)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000013c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000000e00)={0x550, r12, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7ff, 0x4, 0x7f, 0x9, 0x3, 0xf5cd, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x2, 0x8}, {0x6, 0x3}, {0x5, 0x6}, {0x6, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x7, 0xa}, {0x5, 0x5}, {0x3, 0x4}, {0x0, 0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0x9}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x6, 0x6}, {0x4, 0xa}, {0x2, 0x9}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x3, 0xa}, {0x4, 0x6}, {0x2, 0xa}, {0x4}, {0x4, 0x7}, {0x2, 0x5}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x2}, {0x6}, {0x1}, {0x6, 0x5}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x1b, 0x18, 0x12, 0x1b, 0x6c, 0x12, 0x12, 0x6c, 0x3, 0xc, 0x5, 0xb, 0x18, 0x48, 0x65, 0x3, 0x1b, 0x44, 0x48, 0xb, 0x5, 0x4, 0x48, 0x2, 0x6c, 0x12, 0x4, 0x6, 0x60, 0xc, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x58, 0x80, 0x401, 0x9, 0xfc00]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x22c, 0xfff9, 0xc, 0x1, 0xc, 0x2, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x5, 0x6, 0x6, 0xfffa, 0x3, 0x1ff, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x4, 0xa}, {0x1, 0x8}, {0x6, 0x3}, {0x1, 0x9}, {0x4, 0x6}, {0x3, 0x9}, {0x3, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x9}, {0x1}, {0x0, 0x13}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x3}, {0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x1, 0x4}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x8}, {0x4, 0x5}, {0x2, 0x6}, {0x2, 0x7}, {0x0, 0x3}, {0x4, 0x5}, {0x3, 0x9}, {0x1, 0x3}, {0x2, 0x9}, {0x7, 0x6}, {0x1, 0xa}, {}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0xa}, {0x6, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x3}, {0x5}, {0x0, 0x4}, {0x6}, {0x0, 0x6}, {0x3, 0x5}, {0x2, 0x4}, {0x4, 0x8}, {0x4}, {0x5, 0xa}, {0x3}, {0x3, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x2}, {0x3, 0xa}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x3}, {0x7, 0x6}, {0x7, 0xa}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x400, 0x9, 0xfe7, 0x1, 0x4, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7, 0xfb1, 0xc2b, 0xe, 0x0, 0x7fff, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x3}, {0x1, 0x7}, {0x4, 0x5}, {0x6, 0x7}, {0x0, 0x6}, {0x7, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x6, 0xa}, {0x2, 0xa}, {0x7, 0x5}, {0x2, 0x7}, {0x0, 0xa}, {0x1}, {0x2, 0x4}, {0x0, 0x8}, {0x1, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x7, 0x6}, {0x2, 0x9}, {0x3, 0x2}, {0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x1, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1}, {0x6}, {0x5}, {0x2, 0x3}, {0x6, 0x6}, {0x2, 0x1}, {0x1}, {0x1, 0x8}, {0x3, 0x6}, {0x4, 0x5}, {0x7, 0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0x9, 0x12, 0x5, 0x4, 0x1, 0x6c, 0x6, 0xa, 0x12, 0xc, 0x2, 0x12, 0x30, 0x18, 0x1b, 0xc, 0x12]}]}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x10be, 0x40, 0x7, 0x8, 0x3, 0x7, 0xba]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x3, 0xa, 0x1000, 0x9, 0x7, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8001, 0x5dd, 0x2, 0xe, 0x2, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x12, 0x6, 0xb, 0x5, 0x30, 0x24]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x1b, 0x6c, 0xb, 0x18, 0x30, 0x7e, 0x30, 0xc, 0x1b, 0x3, 0x6, 0x34, 0x12, 0x6, 0x6c, 0x1b, 0x9, 0x30, 0x30, 0x18]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x24, 0x9, 0x6, 0x16]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0x4}, {0x2, 0x3}, {0x3}, {0x2, 0x8}, {0x0, 0xa}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x1}, {0x5, 0x7}, {0x3, 0x7}, {0x6, 0x4}, {0x6}, {0x5, 0x7}, {0x2}, {0x5}, {0x7, 0x1}, {0x6, 0x7}, {0x4, 0x6}, {0x3, 0x5}, {0x3, 0x7}, {0x4, 0x1}, {0x3, 0x6}, {0x5, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x9, 0x5, 0x3, 0x8, 0xfe38, 0xa]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x90dbdb214015373b, 0x2, 0x24, 0x48, 0x16, 0x1b, 0x4, 0x5, 0xb, 0x7, 0x48, 0xf018b0b08c8c565e, 0x6c, 0x6c, 0x45, 0x18, 0x0, 0x16, 0x9, 0xc, 0x4, 0x60, 0xc, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9439, 0x0, 0x8, 0x1, 0x6, 0x5, 0xd9, 0x1]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x7}, {0x5, 0x8}, {0x4, 0x9}, {0x0, 0x6}, {0x6, 0x3}, {0x5, 0x5}, {0x1, 0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x7, 0x2}, {0x2, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x9}, {0x3, 0x8}, {0x4, 0x1}, {0x4, 0x9}, {0x7, 0x8}, {0x2, 0x3}, {0x7, 0x6}, {0x2, 0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x6, 0x5}, {0x4, 0x7}, {0x4, 0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x9}, {0x7}, {0x7, 0x9}, {0x0, 0x6}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x1}, {0x2, 0x5}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0x8}, {0x4}, {0x4, 0x7}, {0x2}, {0x2, 0xa}, {0x6, 0xa}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x7, 0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x1, 0x3}, {0x2, 0x4}, {0x3, 0x5}, {0x5, 0x6}, {0x6}, {0x2, 0x9}, {0x1, 0x3}, {0x6, 0x6}, {0x3, 0x4}, {0x7, 0xa}, {0x3, 0x7}, {0x5, 0x2}, {0x5, 0x8}, {0x7, 0x4}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x6}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x3}, {0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x4, 0x9}, {0x0, 0x8}, {0x2, 0x3}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x8}, {0x5, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x7, 0xa}, {0x5, 0x4}, {0x1, 0x1}, {0x2, 0x3}, {0x5, 0x2}, {}, {0x0, 0x7}, {0x4, 0x5}, {0x5, 0x8}, {0x3, 0x7}, {0x6, 0x4}, {0x6, 0x3}, {0x0, 0xa}, {0x7, 0x9}, {0x2, 0x6}, {0x3, 0x4}, {0x6, 0x3}, {0x2, 0xa}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x1}, {0x5, 0x6}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x3, 0x72, 0x4, 0x1b, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x1d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xddbf, 0xfffe, 0x6, 0x400, 0xbc, 0xd, 0xf6b, 0x9]}}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x1}, {0x3, 0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x7, 0x9}, {0x5, 0x3}, {0x4, 0x1}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x9}, {0x4}, {}, {0x7, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x4, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x6, 0x8}, {0x2, 0x1e}, {0x7, 0x5}, {0x5}, {0x7, 0x1}, {0x2, 0x3}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x4}, {0x6, 0x6}, {0x5, 0x8}, {0x4, 0x2}, {0x3, 0x7}, {0x5, 0x4}, {0x7, 0x1}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x2, 0x6}, {0x7, 0x5}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x2}, {0x1, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x7, 0x6, 0x4, 0xff7f, 0x9, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x82, 0x8, 0x64c, 0xfffb, 0x1, 0x1000, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x24, 0x1, 0x7, 0x5, 0x7, 0x7, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xfffa, 0x0, 0x40, 0x7, 0x8, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x6}, {0x6, 0x9}, {0x3, 0x1}, {0x5, 0x5}, {0x2, 0x2}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x7, 0x9}, {0x2, 0x9}, {0x2, 0x4}, {0x7, 0x7}, {0x7, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x4}, {0x3, 0xa}, {0x3, 0xa}, {0x4, 0x3}, {0x3, 0x3}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x4, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x7, 0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x3}, {0x6, 0x2}, {0x5, 0x7}, {0x5, 0x9}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x7}, {0x2, 0x5}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0x8}, {0x4, 0x7}, {0x4, 0x4}, {0x4, 0x9}, {0x7, 0x6}, {0x4, 0xa}, {0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4}, {0x0, 0x6}, {0x1, 0x2}, {}, {0x2, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x5}, {0x5}, {0x1, 0x9}, {0x5}, {0x3, 0x7}, {0x2, 0x4}, {0x3, 0x8}, {0x2, 0x4}, {0x3}, {0x7, 0x8}, {0x6, 0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x3, 0x1}, {0x7, 0x1}, {0x2, 0x9}, {0x6, 0x1}, {0x1, 0x1}, {0x7}, {0x5, 0x5}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0x3}, {0x5, 0x5}, {0x3, 0x9}, {0x3, 0xa}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x9, 0x0, 0x0, 0xfffb, 0x8001, 0x86]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x5, 0x0, 0x6, 0x9, 0x22, 0x6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x9, 0xee77a0a81568298f, 0x18, 0x24, 0x6, 0x1, 0x36, 0x2, 0x24, 0x4, 0x1b, 0x44, 0x5, 0x2, 0x2, 0x18, 0x30, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x0, 0x2, 0x24, 0x18, 0x30, 0x24, 0x6c, 0x58, 0x12, 0x48, 0x6, 0x6, 0x48, 0x30, 0x18, 0x16]}]}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x550}, 0x1, 0x0, 0x0, 0x20000000}, 0x1804)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000016c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001440)={0x210, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x59}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x3191}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_KEYS={0x19c, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "e87c215a155b19e86fd18093871be6"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "12449aa691"}, @NL80211_KEY_SEQ={0x10, 0x4, "47e4b52506eb467a4054bea3"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "438166c5d975f4a35f0905d595"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "04a21cb629"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "10e131e324"}, @NL80211_KEY_SEQ={0x8, 0x4, "cd3cb40d"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1757509ef6"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xa, 0x4, "91612e7c3680"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, ')sqgT'}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "8ce4c66be297b2798404af23fa"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0xf, 0x4, "72bcb46cc6349c3221ca1f"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "0fed36bc32e0127aa61ce7604c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d441ce204a"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000008}, 0x8000)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x70, r11, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x80000}, 0x8800)
ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000001840))

0s ago: executing program 7 (id=4146):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea35512)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044094)

kernel console output (not intermixed with test programs):

12786] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 42198 - 0
[  421.998405][T12786] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  422.008855][T12786] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.020183][T12786] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 42198 - 0
[  422.031705][T12787] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  422.041113][T12787] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.050474][T12787] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 42198 - 0
[  422.078923][T17494] lo speed is unknown, defaulting to 1000
[  422.099923][  T778] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  422.118745][  T778] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  422.130613][ T7513] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  422.152916][T17494] lo speed is unknown, defaulting to 1000
[  422.204577][T17165] veth0_vlan: entered promiscuous mode
[  422.250390][T17165] veth1_vlan: entered promiscuous mode
[  422.299643][T17165] veth0_macvtap: entered promiscuous mode
[  422.314281][T17165] veth1_macvtap: entered promiscuous mode
[  422.345933][T17165] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.365646][T17165] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.404054][T11644] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.425611][T11644] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.439014][T11644] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.458199][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  422.470099][T11644] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.676995][ T7503] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  423.101994][T12784] net_ratelimit: 5 callbacks suppressed
[  423.102014][T12784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.931696][T17477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  424.189538][T12784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.231208][T12784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.283661][  T778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.284608][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.324518][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.325800][  T778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.411967][T17513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2884'.
[  424.511312][T17518] x_tables: duplicate underflow at hook 1
[  424.521490][T17518] x_tables: duplicate underflow at hook 1
[  424.538474][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.580782][T12784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.614750][T12784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.634805][  T778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.668568][  T778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.767994][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.787684][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.799035][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.022809][T17531] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  425.177245][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.188090][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.459086][T17549] netlink: 83 bytes leftover after parsing attributes in process `syz.1.2811'.
[  425.523858][ T5627] cgroup: fork rejected by pids controller in /syz2
[  425.672820][T17569] netlink: 'syz.1.2896': attribute type 1 has an invalid length.
[  425.685259][T17566] netlink: 'syz.4.2894': attribute type 1 has an invalid length.
[  425.707795][T17569] netlink: 'syz.1.2896': attribute type 2 has an invalid length.
[  425.717274][T17566] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2894'.
[  425.803970][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2896'.
[  425.971336][T17579] xt_CT: No such helper "syz0"
[  426.265458][T17592] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2901'.
[  426.355881][T17600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2903'.
[  426.475548][T17603] dvmrp8: entered allmulticast mode
[  426.537631][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  426.749223][T17610] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2905'.
[  426.762098][T17609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2906'.
[  426.795798][T17611] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2905'.
[  426.922114][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2908'.
[  427.021439][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  427.042626][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  427.053698][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  427.065163][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  427.073883][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  427.786284][T17647] netlink: 'syz.1.2913': attribute type 32 has an invalid length.
[  428.002499][T17654] netlink: 'syz.5.2914': attribute type 11 has an invalid length.
[  428.065335][T17623] lo speed is unknown, defaulting to 1000
[  428.083288][T17656] sctp: [Deprecated]: syz.6.2915 (pid 17656) Use of int in max_burst socket option.
[  428.083288][T17656] Use struct sctp_assoc_value instead
[  428.085657][T17623] lo speed is unknown, defaulting to 1000
[  428.362918][T17672] netlink: 'syz.1.2920': attribute type 1 has an invalid length.
[  428.777219][    C1] net_ratelimit: 230 callbacks suppressed
[  428.777239][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.182680][ T5623] Bluetooth: hci2: command tx timeout
[  429.768375][T17623] bridge0: port 1(bridge_slave_0) entered blocking state
[  429.787022][T17623] bridge0: port 1(bridge_slave_0) entered disabled state
[  429.803505][T17623] bridge_slave_0: entered allmulticast mode
[  429.825797][T17623] bridge_slave_0: entered promiscuous mode
[  429.856831][T17623] bridge0: port 2(bridge_slave_1) entered blocking state
[  429.873665][T17623] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.890162][T17623] bridge_slave_1: entered allmulticast mode
[  429.921686][T17623] bridge_slave_1: entered promiscuous mode
[  430.029033][T17623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  430.063148][T17623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  430.169826][T17623] team0: Port device team_slave_0 added
[  430.189592][T17623] team0: Port device team_slave_1 added
[  430.234051][T17725] __nla_validate_parse: 71 callbacks suppressed
[  430.234071][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2927'.
[  430.302548][T17623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.322802][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.417166][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.422818][T17623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.489179][T17623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.496333][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.529498][T17623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.549011][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2928'.
[  430.720212][T17623] hsr_slave_0: entered promiscuous mode
[  430.727984][T17623] hsr_slave_1: entered promiscuous mode
[  430.737588][T17623] debugfs: 'hsr0' already exists in 'hsr'
[  430.745708][T17623] Cannot create hsr debugfs directory
[  430.870046][T17731] lo speed is unknown, defaulting to 1000
[  430.941412][T17731] lo speed is unknown, defaulting to 1000
[  431.181855][ T1682] block nbd4: Possible stuck request ffff888027557000: control (read@0,1024B). Runtime 120 seconds
[  431.195261][ T1682] block nbd4: Possible stuck request ffff8880275571c0: control (read@1024,1024B). Runtime 120 seconds
[  431.211508][ T1682] block nbd4: Possible stuck request ffff888027557380: control (read@2048,1024B). Runtime 120 seconds
[  431.228100][ T1682] block nbd4: Possible stuck request ffff888027557540: control (read@3072,1024B). Runtime 120 seconds
[  431.257156][ T5623] Bluetooth: hci2: command tx timeout
[  431.725038][T17623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  431.750802][T17623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.826227][   T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.974434][T17623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  432.006439][T17623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.178663][T17751] netlink: 'syz.1.2931': attribute type 13 has an invalid length.
[  432.197028][T17751] netlink: 'syz.1.2931': attribute type 17 has an invalid length.
[  432.383542][T17747] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.393054][T17747] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.460393][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.469944][T12785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.483515][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.498145][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.778019][T17747] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.795365][T17747] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.100576][T11645] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.112122][T17751] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.127175][T17751] 8021q: adding VLAN 0 to HW filter on device team0
[  433.146283][T17751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.175678][T17751] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.184506][T17751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.199312][T17751] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.209086][T17751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.247538][T17751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  433.260167][T17751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.297817][T17751] veth1_vlan: left promiscuous mode
[  433.306120][T17751] veth0_vlan: left promiscuous mode
[  433.308481][T17665] Set syz1 is full, maxelem 65536 reached
[  433.314220][T17751] veth0_vlan: entered promiscuous mode
[  433.330260][T17751] veth1_vlan: entered promiscuous mode
[  433.337718][ T5623] Bluetooth: hci2: command tx timeout
[  433.361288][T17751] veth1_macvtap: left promiscuous mode
[  433.368804][T17751] veth0_macvtap: left promiscuous mode
[  433.379699][T17751] veth0_macvtap: entered promiscuous mode
[  433.427300][T17751] veth1_macvtap: entered promiscuous mode
[  433.451372][T17751] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  433.466360][T17751] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  433.488955][T17751] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  433.498961][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.521884][T17751] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  433.528171][T17765] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2933'.
[  433.568954][T17752] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.743206][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2934'.
[  433.841862][T17623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  433.856155][T17623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.310184][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2938'.
[  434.320843][T17779] netlink: 'syz.5.2938': attribute type 5 has an invalid length.
[  434.328199][T17623] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  434.334556][T17779] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2938'.
[  434.348319][T17623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  434.357622][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2939'.
[  434.385399][T17779] geneve3: entered promiscuous mode
[  434.397403][T17779] geneve3: entered allmulticast mode
[  434.412566][T17623] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  434.435303][T17623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  434.462288][T17780] vxcan2: entered allmulticast mode
[  434.478467][ T1121] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 60000 - 0
[  434.489513][T17623] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  434.501063][T17623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  434.518519][ T1121] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 60000 - 0
[  434.528850][ T1121] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 60000 - 0
[  434.539995][T17623] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  434.552253][T17623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  434.561271][ T1121] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 60000 - 0
[  434.808158][T17623] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.831072][T17799] netlink: 'syz.1.2943': attribute type 1 has an invalid length.
[  434.843806][T17801] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  434.881484][T17623] 8021q: adding VLAN 0 to HW filter on device team0
[  434.901358][T17803] netlink: 'syz.5.2944': attribute type 1 has an invalid length.
[  434.915777][T11647] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.923031][T11647] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.999519][T17803] 8021q: adding VLAN 0 to HW filter on device bond2
[  435.041328][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2946'.
[  435.062398][T17810] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  435.078833][T11647] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.088438][T11647] bridge0: port 2(bridge_slave_1) entered forwarding state
[  435.117649][T17803] macvlan3: entered promiscuous mode
[  435.123124][T17803] macvlan3: entered allmulticast mode
[  435.129426][T17803] bond2: entered promiscuous mode
[  435.135216][T17803] veth0_to_bond: entered promiscuous mode
[  435.146070][T17803] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  435.157525][T17803] bond2: left promiscuous mode
[  435.162856][T17803] veth0_to_bond: left promiscuous mode
[  435.336239][T11647] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  435.366779][T11647] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  435.412566][T11647] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  435.430507][ T5623] Bluetooth: hci2: command tx timeout
[  435.439593][T11647] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  435.595538][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2952'.
[  435.659324][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  436.083632][T17857] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  436.114490][T17857] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  436.454387][T17623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  436.538436][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.940208][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.579037][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.142085][T11647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.218770][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.227282][   T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.239225][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  438.287801][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.584542][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.202754][T17896] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  440.226133][T17896] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  440.288702][T17623] veth0_vlan: entered promiscuous mode
[  440.326488][T17623] veth1_vlan: entered promiscuous mode
[  440.449964][T17623] veth0_macvtap: entered promiscuous mode
[  440.473141][T17623] veth1_macvtap: entered promiscuous mode
[  440.501253][T17911] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2969'.
[  440.533933][T17623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  440.581328][T17623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  440.659046][   T92] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.669343][   T92] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.722100][   T92] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.755051][   T92] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  440.979115][T12786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.001539][T12786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.034334][T12786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  441.043183][T12786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  441.944603][T17939] netlink: 'syz.1.2977': attribute type 1 has an invalid length.
[  441.965865][T17939] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  441.977606][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.119379][ T5632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  442.147122][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  442.162945][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  442.174282][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  442.185731][ T5632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  442.260964][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2979'.
[  442.270535][T17945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2979'.
[  442.365553][T17948] lo speed is unknown, defaulting to 1000
[  442.400081][T17948] lo speed is unknown, defaulting to 1000
[  442.618525][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.698610][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.914856][T17978] tipc: Started in network mode
[  442.931276][T17978] tipc: Node identity aefabed218c7, cluster identity 4711
[  442.961575][T17978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  443.016710][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.070477][T17986] syzkaller0: entered promiscuous mode
[  443.076100][T17986] syzkaller0: entered allmulticast mode
[  443.084922][T17986] tipc: Resetting bearer <eth:syzkaller0>
[  443.101909][T17978] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2986'.
[  443.123078][T17977] tipc: Resetting bearer <eth:syzkaller0>
[  443.261745][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.270368][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.280687][   T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.293231][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2988'.
[  443.978914][   T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.988160][   T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.222720][ T5623] Bluetooth: hci4: command tx timeout
[  446.309550][ T5623] Bluetooth: hci4: command tx timeout
[  447.103910][T17977] tipc: Disabling bearer <eth:syzkaller0>
[  447.128533][T17990] ip6erspan0: entered allmulticast mode
[  447.147964][ T7503] tipc: Node number set to 3057499858
[  447.310278][T17942] lo speed is unknown, defaulting to 1000
[  447.340942][T17942] lo speed is unknown, defaulting to 1000
[  448.376663][ T5623] Bluetooth: hci4: command tx timeout
[  448.377525][T18051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  448.385678][   T36] net_ratelimit: 4 callbacks suppressed
[  448.385695][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.422337][T18051] syzkaller0: entered promiscuous mode
[  448.429012][T18051] syzkaller0: entered allmulticast mode
[  448.445850][T18051] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  448.470066][T18056] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3005'.
[  448.604810][T18051] tipc: Resetting bearer <eth:syzkaller0>
[  448.644030][T18051] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3004'.
[  448.697426][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.780808][T18050] tipc: Resetting bearer <eth:syzkaller0>
[  448.844728][T18050] tipc: Disabling bearer <eth:syzkaller0>
[  448.894297][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3009'.
[  449.029625][T18065] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3009'.
[  449.091513][T18066] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3009'.
[  449.113852][T17942] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.122530][T17942] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.130393][T17942] bridge_slave_0: entered allmulticast mode
[  449.146069][T17942] bridge_slave_0: entered promiscuous mode
[  449.253174][T17942] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.287920][T17942] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.298004][T17942] bridge_slave_1: entered allmulticast mode
[  449.306111][T17942] bridge_slave_1: entered promiscuous mode
[  449.404342][T17942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  449.416898][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.466435][T17942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.555723][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3015'.
[  449.566853][T17942] team0: Port device team_slave_0 added
[  449.584634][T17942] team0: Port device team_slave_1 added
[  449.591058][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3015'.
[  449.602065][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3015'.
[  449.603942][T18099] netlink: 'syz.1.3014': attribute type 1 has an invalid length.
[  449.613032][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3015'.
[  449.631188][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3015'.
[  449.747328][T12785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.755943][T12786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.764863][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.773899][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.919968][T17942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.949047][T17942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.008964][T17942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.070312][T17942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.096922][T17942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.186070][T17942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.415483][T18132] bond2: option arp_interval: invalid value (18446744073709551615)
[  450.425050][T18132] bond2: option arp_interval: allowed values 0 - 2147483647
[  450.437064][T18132] bond2 (unregistering): Released all slaves
[  450.456747][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.465273][ T5623] Bluetooth: hci4: command tx timeout
[  450.721463][T17942] hsr_slave_0: entered promiscuous mode
[  450.758099][T17942] hsr_slave_1: entered promiscuous mode
[  450.794577][T17942] debugfs: 'hsr0' already exists in 'hsr'
[  450.808202][T17942] Cannot create hsr debugfs directory
[  450.942257][T18152] syzkaller0: entered promiscuous mode
[  450.949201][T18152] syzkaller0: entered allmulticast mode
[  450.987365][T18153] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.008756][T18153] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.026887][T18156] xt_time: invalid argument - start or stop time greater than 23:59:59
[  451.499427][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.747847][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.855215][T18174] syzkaller1: entered promiscuous mode
[  451.897864][T18174] syzkaller1: entered allmulticast mode
[  452.073640][T18184] syzkaller0: entered promiscuous mode
[  452.081168][T18184] syzkaller0: entered allmulticast mode
[  452.104198][T18184] netlink: 'syz.2.3031': attribute type 11 has an invalid length.
[  452.215617][T18191] netlink: 'syz.6.3032': attribute type 1 has an invalid length.
[  452.247273][T18190] netlink: 'syz.5.3033': attribute type 29 has an invalid length.
[  452.309468][T18191] 8021q: adding VLAN 0 to HW filter on device bond2
[  452.410740][T18192] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  452.642603][T17942] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  452.685649][T17942] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  452.703520][T17942] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  452.770001][T17942] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  452.798847][T17942] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  452.838224][T17942] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  452.882024][T17942] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  452.927997][T17942] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  453.234381][T17942] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.322271][T17942] 8021q: adding VLAN 0 to HW filter on device team0
[  453.379485][   T92] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.386725][   T92] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.467592][T11645] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.474815][T11645] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.577511][    C1] net_ratelimit: 4 callbacks suppressed
[  453.577528][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.578756][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  453.708756][T18241] __nla_validate_parse: 6 callbacks suppressed
[  453.708776][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3047'.
[  454.002025][T18238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3046'.
[  454.281454][T18258] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3049'.
[  454.309857][T18258] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3049'.
[  454.353316][T18263] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  454.445531][T18263] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3051'.
[  454.537452][T18263] team0 (unregistering): Port device team_slave_0 removed
[  454.617124][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.639958][T18263] team0 (unregistering): Port device team_slave_1 removed
[  454.781057][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.858367][T17942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.867004][ T1121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.875936][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.886033][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.894953][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.069383][T18298] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  455.209740][T18312] can: request_module (can-proto-5) failed.
[  455.405304][T18320] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3062'.
[  455.447640][T18320] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3062'.
[  455.463058][T18324] netlink: 'syz.2.3063': attribute type 23 has an invalid length.
[  455.656746][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.777445][T17942] veth0_vlan: entered promiscuous mode
[  455.824835][T17942] veth1_vlan: entered promiscuous mode
[  455.853652][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3065'.
[  455.979183][T17942] veth0_macvtap: entered promiscuous mode
[  456.025315][T17942] veth1_macvtap: entered promiscuous mode
[  456.105318][T17942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.158434][T17942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.245843][T12785] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.274353][T12785] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.322138][T12785] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.388122][T12785] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.562253][T11645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.597569][T11645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.656263][T12785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.674545][T12785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.773290][T18356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3073'.
[  456.778747][T18360] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  456.869741][T18360] syzkaller0: entered promiscuous mode
[  456.886739][T18360] syzkaller0: entered allmulticast mode
[  456.935877][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2976'.
[  457.412081][T18381] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.416903][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  457.419837][T18381] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.533329][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.553215][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.723687][T18381] geneve3: left promiscuous mode
[  457.729018][T18381] geneve3: left allmulticast mode
[  457.740915][T18381] ip6erspan0: left allmulticast mode
[  457.927677][T11647] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.948803][T11647] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 60000 - 0
[  457.959572][T11647] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.971660][T11647] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 60000 - 0
[  458.094322][   T48] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.121942][   T48] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 60000 - 0
[  458.134555][   T48] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  458.144881][   T48] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 60000 - 0
[  458.158751][T18417] netlink: 'syz.6.3088': attribute type 1 has an invalid length.
[  458.191033][T18418] xt_socket: unknown flags 0x4c
[  458.412141][T18428] syzkaller0: entered promiscuous mode
[  458.430828][T18428] syzkaller0: entered allmulticast mode
[  458.624582][T18445] net_ratelimit: 6 callbacks suppressed
[  458.624600][T18445] openvswitch: netlink: IP tunnel dst address not specified
[  458.822394][T18453] __nla_validate_parse: 6 callbacks suppressed
[  458.822414][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3098'.
[  458.871488][T18453] netlink: 'syz.7.3098': attribute type 5 has an invalid length.
[  458.902147][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3098'.
[  458.925742][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3098'.
[  458.935655][T18456] netlink: 'syz.7.3098': attribute type 5 has an invalid length.
[  458.944340][T18456] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3098'.
[  458.950203][T18457] bridge0: port 3(vlan2) entered blocking state
[  458.960771][T18457] bridge0: port 3(vlan2) entered disabled state
[  458.970524][T18457] vlan2: entered allmulticast mode
[  458.975888][T18457] geneve0: entered allmulticast mode
[  458.985827][T18457] vlan2: entered promiscuous mode
[  459.000124][T18457] geneve0: entered promiscuous mode
[  459.035821][T12785] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  459.055076][T12785] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  459.088717][T12785] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  459.107594][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.112522][T12785] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  459.156302][T18468] IPVS: length: 105 != 24
[  459.261839][T18473] netlink: 'syz.7.3104': attribute type 8 has an invalid length.
[  459.438489][T18482] syzkaller0: entered promiscuous mode
[  459.445134][T18482] syzkaller0: entered allmulticast mode
[  459.446183][T18484] netlink: 'syz.7.3107': attribute type 1 has an invalid length.
[  459.572688][T18484] 8021q: VLANs not supported on sit0
[  459.654688][T18487] netlink: 'syz.2.3108': attribute type 3 has an invalid length.
[  459.665173][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'.
[  459.734094][T18490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3109'.
[  459.801306][T18490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3109'.
[  459.832314][T18495] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3111'.
[  459.857116][T18495] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3111'.
[  459.883811][T18495] netlink: 'syz.7.3111': attribute type 1 has an invalid length.
[  459.919731][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3111'.
[  459.980897][T12785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.990806][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.000139][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.015175][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.805414][T18535] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  460.858206][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.016790][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.024957][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.261746][ T1682] block nbd4: Possible stuck request ffff888027557000: control (read@0,1024B). Runtime 150 seconds
[  461.273603][ T1682] block nbd4: Possible stuck request ffff8880275571c0: control (read@1024,1024B). Runtime 150 seconds
[  461.285969][ T1682] block nbd4: Possible stuck request ffff888027557380: control (read@2048,1024B). Runtime 150 seconds
[  461.298313][ T1682] block nbd4: Possible stuck request ffff888027557540: control (read@3072,1024B). Runtime 150 seconds
[  461.468552][T18573] dummy0: entered promiscuous mode
[  461.572819][T18575] netlink: 'syz.5.3131': attribute type 1 has an invalid length.
[  461.650883][T18573] bond2: (slave dummy0): Removing an active aggregator
[  461.688638][T18573] bond2: (slave dummy0): Releasing backup interface
[  461.705712][T18573] dummy0 (unregistering): left promiscuous mode
[  461.854429][T18582] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  462.000274][T18589] netlink: 'syz.5.3136': attribute type 10 has an invalid length.
[  462.054102][T18589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  462.093491][T18589] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  462.123247][T18592] netlink: 'syz.7.3140': attribute type 2 has an invalid length.
[  462.157968][T18592] netlink: 'syz.7.3140': attribute type 2 has an invalid length.
[  462.192491][T18597] netlink: 'syz.7.3140': attribute type 4 has an invalid length.
[  462.213252][T18597] netlink: 'syz.7.3140': attribute type 8 has an invalid length.
[  463.075619][T18632] lo speed is unknown, defaulting to 1000
[  463.085077][T18632] lo speed is unknown, defaulting to 1000
[  463.900987][   T10] net_ratelimit: 7 callbacks suppressed
[  463.901008][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.136734][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.144889][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.176818][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.185359][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.216975][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.225130][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.938770][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.256802][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.265069][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.338924][ T5833] net_ratelimit: 2 callbacks suppressed
[  469.338946][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.988007][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.377210][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.857185][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  470.868446][T11647] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.416921][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  471.896776][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.457210][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  472.937008][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.017387][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.496990][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.537133][ T5833] net_ratelimit: 1 callbacks suppressed
[  474.537153][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.017017][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.577113][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.056994][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.067277][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.618858][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.097275][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.658554][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.137036][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.697265][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.736933][T14953] net_ratelimit: 2 callbacks suppressed
[  479.736952][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.777169][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.740899][T12785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.817172][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.137516][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.776759][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.857007][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.816781][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.897234][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.857222][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.938731][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.187195][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.896320][T18667] __nla_validate_parse: 11 callbacks suppressed
[  485.896341][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3156'.
[  485.896759][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.905294][T18667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3156'.
[  485.976933][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  486.004934][T18674] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3160'.
[  486.024514][T18674] netlink: 'syz.7.3160': attribute type 3 has an invalid length.
[  486.051071][T18673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3158'.
[  486.128328][T18678] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3162'.
[  486.304080][T18686] syzkaller0: entered promiscuous mode
[  486.310820][T18686] syzkaller0: entered allmulticast mode
[  486.628531][T18690] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3166'.
[  486.814536][T18692] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3167'.
[  486.936801][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.017153][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.566860][T18703] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3171'.
[  487.587739][T18702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  487.587885][T18703] netlink: 'syz.5.3171': attribute type 1 has an invalid length.
[  487.605598][T18702] syzkaller0: entered promiscuous mode
[  487.605624][T18702] syzkaller0: entered allmulticast mode
[  487.621597][T18702] tipc: Resetting bearer <eth:syzkaller0>
[  487.711528][T18701] tipc: Resetting bearer <eth:syzkaller0>
[  487.777049][T18701] tipc: Disabling bearer <eth:syzkaller0>
[  487.915570][T18709] netlink: 'syz.7.3173': attribute type 1 has an invalid length.
[  487.977877][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.056902][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.115284][T18713] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3175'.
[  488.220049][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.273523][T18717] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3178'.
[  488.428493][T18729] netlink: 'syz.7.3180': attribute type 1 has an invalid length.
[  488.600882][T18738] netlink: 'syz.6.3181': attribute type 1 has an invalid length.
[  488.614102][T18738] netlink: 'syz.6.3181': attribute type 4 has an invalid length.
[  489.170178][T18752] syzkaller0: entered promiscuous mode
[  489.207005][T18752] syzkaller0: entered allmulticast mode
[  489.436177][T18757] netlink: 'syz.5.3188': attribute type 1 has an invalid length.
[  489.662012][T18757] 8021q: adding VLAN 0 to HW filter on device bond4
[  489.723339][T18762] vlan2: entered allmulticast mode
[  489.728936][T18762] bond4: entered allmulticast mode
[  490.057439][    C1] net_ratelimit: 2 callbacks suppressed
[  490.057459][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.078800][T18777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.138131][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.219793][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.699929][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  490.732667][T18801] batadv_slave_0: entered promiscuous mode
[  490.771122][T18790] batadv_slave_0: left promiscuous mode
[  491.074816][T18817] openvswitch: netlink: Missing valid actions attribute.
[  491.082383][T18817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.096999][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.176854][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.203922][T18819] __nla_validate_parse: 5 callbacks suppressed
[  491.203941][T18819] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3206'.
[  491.258170][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  491.290906][T18817] block nbd2: server does not support multiple connections per device.
[  491.323388][T18817] block nbd2: shutting down sockets
[  491.337336][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  491.354299][ T1682] block nbd4: Possible stuck request ffff888027557000: control (read@0,1024B). Runtime 180 seconds
[  491.366417][ T1682] block nbd4: Possible stuck request ffff8880275571c0: control (read@1024,1024B). Runtime 180 seconds
[  491.378145][ T1682] block nbd4: Possible stuck request ffff888027557380: control (read@2048,1024B). Runtime 180 seconds
[  491.394079][ T1682] block nbd4: Possible stuck request ffff888027557540: control (read@3072,1024B). Runtime 180 seconds
[  491.625864][T18838] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3214'.
[  491.804596][T18853] batadv_slave_1: entered promiscuous mode
[  491.812012][T18851] batadv_slave_1: left promiscuous mode
[  492.571125][T18876] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3221'.
[  492.585162][T18876] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3221'.
[  492.665903][T18877] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3221'.
[  492.676325][T18877] netlink: 'syz.7.3221': attribute type 1 has an invalid length.
[  492.757236][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3221'.
[  493.019446][T18884] netlink: 'syz.5.3224': attribute type 4 has an invalid length.
[  493.613870][T18889] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3225'.
[  493.625674][T18889] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3225'.
[  494.631509][T18844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  494.669227][T18890] netlink: 'syz.7.3225': attribute type 23 has an invalid length.
[  495.256732][    C1] net_ratelimit: 319 callbacks suppressed
[  495.256753][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.300382][T18916] pim6reg0: tun_chr_ioctl cmd 1074812118
[  495.339021][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.353675][T18920] netlink: 'syz.2.3233': attribute type 14 has an invalid length.
[  495.383489][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3234'.
[  495.427865][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.631069][T18928] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3235'.
[  495.638917][T18931] pimreg: entered allmulticast mode
[  495.678839][T18931] pimreg: left allmulticast mode
[  495.731561][T18936] netlink: 'syz.1.3237': attribute type 1 has an invalid length.
[  496.197912][T18966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  496.296767][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.311467][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.377528][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.471249][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  496.499943][T18975] netlink: 'syz.7.3248': attribute type 13 has an invalid length.
[  496.509481][T18975] __nla_validate_parse: 2 callbacks suppressed
[  496.509500][T18975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3248'.
[  496.789325][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3250'.
[  496.893042][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3250'.
[  497.012879][T18990] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3252'.
[  497.012951][T18993] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3252'.
[  497.153895][T19002] ip6t_srh: unknown srh invflags 4000
[  497.231176][T19001] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001
[  497.249044][T19006] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3257'.
[  497.285514][T19011] netlink: 616 bytes leftover after parsing attributes in process `syz.5.3256'.
[  497.320643][T19013] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3257'.
[  497.337353][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.373399][T19015] netlink: 'syz.2.3258': attribute type 4 has an invalid length.
[  497.423443][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.448698][T19018] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3257'.
[  497.662748][T19028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  497.727886][T19028] batman_adv: batadv0: Removing interface: batadv_slave_0
[  497.844185][T19037] xt_time: unknown flags 0xf4
[  497.919543][T19028] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3262'.
[  497.955829][T19028] erspan0: entered promiscuous mode
[  498.066249][T19048] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  498.098402][T19048] netlink: 'syz.1.3266': attribute type 7 has an invalid length.
[  498.771099][T19085] netlink: 'syz.2.3274': attribute type 4 has an invalid length.
[  499.039110][T19102] batadv_slave_0: entered promiscuous mode
[  499.241265][T19109] netlink: 'syz.6.3282': attribute type 1 has an invalid length.
[  499.264589][T19109] netlink: 'syz.6.3282': attribute type 2 has an invalid length.
[  500.007124][T19148] bridge_slave_1: left allmulticast mode
[  500.024554][T19148] bridge_slave_1: left promiscuous mode
[  500.070163][T19148] bridge0: port 2(bridge_slave_1) entered disabled state
[  500.122208][T19148] bridge_slave_0: left allmulticast mode
[  500.152882][T19148] bridge_slave_0: left promiscuous mode
[  500.182882][T19148] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.262789][   T30] audit: type=1800 audit(1784086357.320:10): pid=19153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3293" name="r" dev="tmpfs" ino=428 res=0 errno=0
[  500.313749][ T5833] net_ratelimit: 10 callbacks suppressed
[  500.313769][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.377237][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.387015][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.412438][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.537197][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.596736][T19161] lo speed is unknown, defaulting to 1000
[  500.624673][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.642695][T19161] lo speed is unknown, defaulting to 1000
[  500.856952][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.581173][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.660965][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.712493][T19212] netlink: 'syz.2.3304': attribute type 142 has an invalid length.
[  501.772098][T19212] netlink: 'syz.2.3304': attribute type 1 has an invalid length.
[  501.906800][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.094644][T19212] bond1: option mode: invalid value (12)
[  502.158057][T19212] bond1 (unregistering): Released all slaves
[  503.050863][T19252] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  503.154013][T19269] __nla_validate_parse: 18 callbacks suppressed
[  503.154033][T19269] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3314'.
[  503.760370][T19311] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3325'.
[  503.913004][T19316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3327'.
[  503.941364][T19319] netlink: 'syz.1.3329': attribute type 4 has an invalid length.
[  503.954238][T19319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3329'.
[  504.043843][T19326] tipc: Started in network mode
[  504.054386][T19326] tipc: Node identity ea58ad2a9c79, cluster identity 4711
[  504.062322][T19326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  504.071547][T19326] syzkaller0: entered promiscuous mode
[  504.078548][T19326] syzkaller0: entered allmulticast mode
[  504.089069][T19326] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  504.120928][T19326] tipc: Resetting bearer <eth:syzkaller0>
[  504.132766][T19325] tipc: Resetting bearer <eth:syzkaller0>
[  504.164598][T19325] tipc: Disabling bearer <eth:syzkaller0>
[  504.196053][T19330] bond5: (slave bond_slave_1): Device is not our slave
[  504.203075][T19330] bond5: option active_slave: invalid value (bond_slave_1)
[  504.214515][T19330] bond5 (unregistering): Released all slaves
[  504.246195][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3333'.
[  504.279293][T14953] IPVS: starting estimator thread 0...
[  504.283813][T19334] netlink: 'syz.1.3334': attribute type 1 has an invalid length.
[  504.366751][T19335] IPVS: using max 53 ests per chain, 127200 per kthread
[  504.409140][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3335'.
[  504.709870][T19338] 8021q: adding VLAN 0 to HW filter on device bond1
[  504.730135][T19338] 8021q: adding VLAN 0 to HW filter on device bond2
[  504.750487][T12786] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.757800][T12786] bridge0: port 2(bridge_slave_1) entered forwarding state
[  505.378694][T19378] net_ratelimit: 16 callbacks suppressed
[  505.378712][T19378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.510488][T19378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.518908][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.530487][T19378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.629535][T19375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.713577][T19375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.742272][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.817167][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.840527][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3347'.
[  506.057062][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.080967][T19404] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  506.110754][   T10] IPVS: starting estimator thread 0...
[  506.182688][T19419] netlink: 'syz.6.3355': attribute type 12 has an invalid length.
[  506.217624][T19417] IPVS: using max 34 ests per chain, 81600 per kthread
[  506.274784][T19424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3352'.
[  506.381057][T19430] netlink: 'syz.1.3352': attribute type 2 has an invalid length.
[  506.426886][T19430] netlink: 'syz.1.3352': attribute type 1 has an invalid length.
[  506.465880][T19430] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3352'.
[  506.837931][T19453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3362'.
[  507.615450][T19465] bond5: entered promiscuous mode
[  507.647267][T19465] bond5: entered allmulticast mode
[  507.971815][T19483] bond4: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  508.021282][T19483] bond4: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  508.085844][T19483] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  508.143267][T19483] bond4 (unregistering): Released all slaves
[  508.443136][T19503] __nla_validate_parse: 2 callbacks suppressed
[  508.443156][T19503] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3373'.
[  508.762721][T19528] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3379'.
[  508.876265][T19538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3381'.
[  508.888623][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3380'.
[  509.022946][T19545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3383'.
[  509.044518][T19545] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3383'.
[  509.158562][T19557] xt_CT: You must specify a L4 protocol and not use inversions on it
[  509.357441][T19568] tc_dump_action: action bad kind
[  509.531623][T19579] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3394'.
[  509.948951][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3400'.
[  510.060251][T19598] xt_l2tp: invalid flags combination: 8
[  510.079309][T19598] netlink: 'syz.6.3400': attribute type 1 has an invalid length.
[  510.178440][T19591] netlink: 'syz.7.3399': attribute type 1 has an invalid length.
[  510.202143][T19590] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3399'.
[  510.701561][T19626] netlink: 'syz.2.3409': attribute type 1 has an invalid length.
[  510.814201][T19626] bond1: entered promiscuous mode
[  510.836026][T19626] 8021q: adding VLAN 0 to HW filter on device bond1
[  510.920713][T19631] bond1: (slave bridge0): making interface the new active one
[  510.938327][T14953] net_ratelimit: 3347 callbacks suppressed
[  510.938347][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.959177][T19631] bridge0: entered promiscuous mode
[  510.988059][T19631] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  511.018418][T19632] team_slave_0: entered allmulticast mode
[  511.024316][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.049481][T19635] team_slave_0: entered promiscuous mode
[  511.110471][T19634] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  511.141597][T19634] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  511.172621][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3413'.
[  511.266778][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.410453][T19648] syzkaller0: entered promiscuous mode
[  511.420750][T19648] syzkaller0: entered allmulticast mode
[  511.450957][T19656] Bluetooth: MGMT ver 1.23
[  511.540383][T19652] tipc: Started in network mode
[  511.545930][T19652] tipc: Node identity 0a93cd917c2c, cluster identity 4711
[  511.560581][T19652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  511.580839][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.603791][T19661] syzkaller0: entered promiscuous mode
[  511.642512][T19661] syzkaller0: entered allmulticast mode
[  511.809925][T19651] tipc: Resetting bearer <eth:syzkaller0>
[  511.892885][T19651] tipc: Disabling bearer <eth:syzkaller0>
[  511.953273][T19678] tipc: Started in network mode
[  511.977524][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.997036][T19678] tipc: Node identity aec6ee6f83ea, cluster identity 4711
[  512.005587][T19678] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  512.013995][T19679] syzkaller0: entered promiscuous mode
[  512.021958][T19679] syzkaller0: entered allmulticast mode
[  512.057030][T19681] vlan2: entered promiscuous mode
[  512.062219][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.126526][T19678] tipc: Resetting bearer <eth:syzkaller0>
[  512.153060][T19675] tipc: Resetting bearer <eth:syzkaller0>
[  512.226330][T19675] tipc: Disabling bearer <eth:syzkaller0>
[  512.296896][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.540281][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.541607][T19700] macvlan0: mtu less than device minimum
[  513.018750][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.883566][T19733] __nla_validate_parse: 4 callbacks suppressed
[  513.883578][T19733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3435'.
[  515.069394][T19683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  515.242546][T19736] x_tables: duplicate underflow at hook 2
[  515.481171][T19750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3441'.
[  515.648759][T19767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3448'.
[  515.813016][T19768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3446'.
[  515.932064][T19768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3446'.
[  515.974516][T19783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3450'.
[  516.016368][T19783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3450'.
[  516.045527][T19785] syzkaller0: entered promiscuous mode
[  516.066446][T19785] syzkaller0: entered allmulticast mode
[  516.137359][T14953] net_ratelimit: 9 callbacks suppressed
[  516.137378][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.166381][T19787] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3451'.
[  516.169389][T19785] lo speed is unknown, defaulting to 1000
[  516.191520][T19785] lo speed is unknown, defaulting to 1000
[  516.229182][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.456873][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.922361][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3456'.
[  517.178431][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.275541][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.471947][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3463'.
[  517.507031][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.659050][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.830088][T19825] tipc: Started in network mode
[  517.842943][T19825] tipc: Node identity d275a0d0c0f7, cluster identity 4711
[  517.863334][T19825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  517.933570][T19824] tipc: Resetting bearer <eth:syzkaller0>
[  518.000526][T19840] netlink: 'syz.1.3468': attribute type 3 has an invalid length.
[  518.023356][T19823] tipc: Disabling bearer <eth:syzkaller0>
[  518.219007][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.307297][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.536775][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.675051][T19879] No such timeout policy "syz1"
[  518.901405][T19897] __nla_validate_parse: 3 callbacks suppressed
[  518.901426][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'.
[  518.929042][T19897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'.
[  518.953203][T19897] ip6tnl2: entered allmulticast mode
[  518.962851][T12784] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  518.992135][T19904] pim6reg1: entered promiscuous mode
[  519.001072][T19904] pim6reg1: entered allmulticast mode
[  519.033818][T19903] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3486'.
[  519.201474][T19917] netlink: 'syz.5.3489': attribute type 13 has an invalid length.
[  519.513365][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3494'.
[  519.688419][T19932] bond6: entered allmulticast mode
[  519.774271][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3498'.
[  519.785000][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3498'.
[  520.022648][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3500'.
[  520.042001][T19961] syzkaller1: entered promiscuous mode
[  520.046900][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3500'.
[  520.060433][T19961] syzkaller1: entered allmulticast mode
[  520.088942][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3500'.
[  520.234086][T19974] netlink: 'syz.7.3506': attribute type 4 has an invalid length.
[  520.251910][T19974] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3506'.
[  520.664046][T19990] erspan0: entered promiscuous mode
[  520.675457][T19990] macvtap1: entered promiscuous mode
[  520.683347][T19990] macvtap1: entered allmulticast mode
[  520.690388][T19990] erspan0: entered allmulticast mode
[  520.697649][ T5632] Bluetooth: hci4: command 0x0405 tx timeout
[  520.742265][T19992] erspan0: left allmulticast mode
[  520.757785][T19992] erspan0: left promiscuous mode
[  520.776431][T19992] macvtap1: left promiscuous mode
[  520.817218][T19992] macvtap1: left allmulticast mode
[  520.894998][T19996] ip6gre1: entered promiscuous mode
[  520.903052][T19996] ip6gre1: entered allmulticast mode
[  520.910931][T12784] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  520.922256][T12784] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  520.943704][T14953] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  520.995748][T20000] vlan0: entered promiscuous mode
[  521.120970][T20003] ipvlan2: entered promiscuous mode
[  521.138567][T20003] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  521.208158][T20003] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  521.233564][T20003] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  521.339906][T14953] net_ratelimit: 8 callbacks suppressed
[  521.339925][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.426911][T14953] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  521.427788][ T1682] block nbd4: Possible stuck request ffff888027557000: control (read@0,1024B). Runtime 210 seconds
[  521.445468][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.460539][ T1682] block nbd4: Possible stuck request ffff8880275571c0: control (read@1024,1024B). Runtime 210 seconds
[  521.473788][ T1682] block nbd4: Possible stuck request ffff888027557380: control (read@2048,1024B). Runtime 210 seconds
[  521.484960][ T1682] block nbd4: Possible stuck request ffff888027557540: control (read@3072,1024B). Runtime 210 seconds
[  521.657040][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.666975][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.737918][ T5833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  521.972569][T20055] netlink: 'syz.2.3526': attribute type 29 has an invalid length.
[  522.009097][T20056] netlink: 'syz.2.3526': attribute type 29 has an invalid length.
[  522.377083][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.414603][T20069] tipc: Enabled bearer <ib:wg2>, priority 10
[  522.459138][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.697115][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.722328][T20081] lo speed is unknown, defaulting to 1000
[  522.767581][T20081] lo speed is unknown, defaulting to 1000
[  522.838056][T20084] syzkaller0: entered promiscuous mode
[  522.843817][T20084] syzkaller0: entered allmulticast mode
[  523.017302][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  523.417288][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.448562][T20116] xt_hashlimit: size too large, truncated to 1048576
[  523.498279][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.526947][T14953] tipc: Node number set to 310550736
[  523.655734][T20126] netlink: 'syz.5.3540': attribute type 1 has an invalid length.
[  523.737133][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.810064][T20132] veth3: entered allmulticast mode
[  523.820437][T20132] bond7: (slave veth3): Enslaving as an active interface with a down link
[  523.851392][T20126] bond2: (slave veth0_to_bond): Releasing backup interface
[  523.871076][T20126] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  523.946287][T20126] macvlan4: entered promiscuous mode
[  523.952799][T20126] macvlan4: entered allmulticast mode
[  523.960163][T20126] bond7: entered promiscuous mode
[  523.969320][T20126] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  523.979311][T20126] bond7: left promiscuous mode
[  524.014592][T20137] __nla_validate_parse: 13 callbacks suppressed
[  524.014607][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'.
[  524.036158][T20137] netlink: 'syz.1.3542': attribute type 1 has an invalid length.
[  524.141363][ T5632] Bluetooth: hci5: command 0x0406 tx timeout
[  524.462874][T20151] netlink: 'syz.5.3547': attribute type 1 has an invalid length.
[  524.549995][T20151] bond8: (slave bridge2): making interface the new active one
[  524.559572][T20151] bond8: (slave bridge2): Enslaving as an active interface with an up link
[  524.832904][T20162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3550'.
[  525.007947][T20174] sctp: [Deprecated]: syz.6.3555 (pid 20174) Use of int in max_burst socket option deprecated.
[  525.007947][T20174] Use struct sctp_assoc_value instead
[  525.158500][T20188] syzkaller0: entered promiscuous mode
[  525.171135][T20188] syzkaller0: entered allmulticast mode
[  525.256999][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  525.740344][T20214] vlan2: entered allmulticast mode
[  525.745668][T20214] bond0: entered allmulticast mode
[  525.753299][T20214] bond_slave_0: entered allmulticast mode
[  525.762297][T20214] bond_slave_1: entered allmulticast mode
[  526.247772][T20224] batadv1: entered promiscuous mode
[  526.260826][T20224] batadv1: entered allmulticast mode
[  526.284332][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3570'.
[  526.328494][T20236] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.361970][T20236] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.386042][T20236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.394722][T20236] batman_adv: batadv0: Removing interface: batadv_slave_1
[  526.449787][T20240] syzkaller0: entered promiscuous mode
[  526.482476][T20240] syzkaller0: entered allmulticast mode
[  526.503843][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3574'.
[  526.531268][T20241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3574'.
[  526.532920][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3574'.
[  526.550910][T14953] net_ratelimit: 10 callbacks suppressed
[  526.550928][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.619065][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.634892][T20240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3574'.
[  526.644690][T20241] geneve3: entered promiscuous mode
[  526.655204][T20241] geneve3: entered allmulticast mode
[  526.665470][T20253] netlink: 'syz.6.3577': attribute type 1 has an invalid length.
[  526.719670][T20255] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3577'.
[  526.777666][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.818649][T20253] 8021q: adding VLAN 0 to HW filter on device bond4
[  526.865833][T20258] bond4: (slave ip6gretap1): making interface the new active one
[  526.867074][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.883942][T20258] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  526.949577][T20263] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3579'.
[  527.255742][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3585'.
[  527.292493][T20275] syz_tun: entered allmulticast mode
[  527.321175][T20275] netlink: 'syz.1.3583': attribute type 30 has an invalid length.
[  527.404528][T20282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  527.423026][T20274] syz_tun: left allmulticast mode
[  527.577494][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.613374][T20294] netlink: 'syz.1.3589': attribute type 1 has an invalid length.
[  527.652302][T20294] 8021q: adding VLAN 0 to HW filter on device bond4
[  527.669474][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.721236][T20302] netlink: 'syz.1.3589': attribute type 10 has an invalid length.
[  527.738454][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.861877][T20294] bond4: (slave veth3): Enslaving as an active interface with a down link
[  527.889687][T20302] dummy0: entered promiscuous mode
[  527.897067][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.414361][T20338] netlink: 'syz.6.3601': attribute type 1 has an invalid length.
[  528.464978][T20338] 8021q: adding VLAN 0 to HW filter on device bond5
[  528.506539][T20345] 8021q: adding VLAN 0 to HW filter on device bond9
[  528.619382][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  528.861308][T20375] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  529.026540][T20387] syzkaller0: entered promiscuous mode
[  529.028291][T20391] __nla_validate_parse: 10 callbacks suppressed
[  529.028307][T20391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3614'.
[  529.045340][T20387] syzkaller0: entered allmulticast mode
[  529.368000][T20409] netlink: 'syz.5.3620': attribute type 1 has an invalid length.
[  529.527272][T20409] 8021q: adding VLAN 0 to HW filter on device bond10
[  529.538785][T20411] sctp: [Deprecated]: syz.7.3619 (pid 20411) Use of struct sctp_assoc_value in delayed_ack socket option.
[  529.538785][T20411] Use struct sctp_sack_info instead
[  529.597529][T20417] bond10: (slave geneve4): making interface the new active one
[  529.606538][T20417] bond10: (slave geneve4): Enslaving as an active interface with an up link
[  529.622166][T11645] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.631965][T11645] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.642102][T11645] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.652537][T11645] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.700048][T20426] block nbd5: not configured, cannot reconfigure
[  529.714591][T20430] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  529.898395][T14953] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  529.937322][T14953] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  530.180764][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'.
[  530.214848][T20444] netlink: 'syz.1.3628': attribute type 1 has an invalid length.
[  530.230470][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'.
[  530.417695][T20446] lo speed is unknown, defaulting to 1000
[  530.424200][T20455] raw_sendmsg: syz.7.3631 forgot to set AF_INET. Fix it!
[  530.427721][T20446] lo speed is unknown, defaulting to 1000
[  530.455060][T20455] syz_tun: entered allmulticast mode
[  530.626964][T20459] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3633'.
[  530.644147][T20461] netlink: 'syz.2.3634': attribute type 1 has an invalid length.
[  530.705614][T20461] syzkaller0: entered promiscuous mode
[  530.732603][T20461] syzkaller0: entered allmulticast mode
[  530.764028][T20461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  530.870716][T20463] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3635'.
[  530.887734][T20470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3634'.
[  530.959149][T20460] tipc: Resetting bearer <eth:syzkaller0>
[  531.044187][T20460] tipc: Disabling bearer <eth:syzkaller0>
[  531.054168][T20480] netlink: 'syz.7.3640': attribute type 1 has an invalid length.
[  531.207553][T20480] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[  531.275859][T20484] macvlan2: entered promiscuous mode
[  531.305772][T20484] macvlan2: entered allmulticast mode
[  531.329033][T20484] bond2: entered promiscuous mode
[  531.345186][T20484] bridge2: entered promiscuous mode
[  531.363954][T20484] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  531.372756][T20484] bond2: left promiscuous mode
[  531.379325][T20484] bridge2: left promiscuous mode
[  531.503606][T20497] lo speed is unknown, defaulting to 1000
[  531.552312][T20497] lo speed is unknown, defaulting to 1000
[  531.656922][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  531.738345][ T7487] net_ratelimit: 10 callbacks suppressed
[  531.738362][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.814176][T20508] syzkaller0: entered promiscuous mode
[  531.824269][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.842050][T20508] syzkaller0: entered allmulticast mode
[  532.298266][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  532.313380][T20513] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  532.777224][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.859808][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.868015][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.118933][T20538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3658'.
[  533.344436][T11645] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  533.443873][T11645] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  533.465787][T11645] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  533.522240][T11645] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  533.534306][T20554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  533.639598][T20561] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3662'.
[  533.816965][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.828756][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  533.898442][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.034423][T20579] netlink: 'syz.1.3670': attribute type 2 has an invalid length.
[  534.099779][T20586] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  534.216751][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  534.380787][T19878] Bluetooth: hci6: command 0x0406 tx timeout
[  534.391849][T19878] Bluetooth: hci1: command 0x0406 tx timeout
[  534.653744][T20600] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.661211][T20600] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.764518][T20609] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3675'.
[  534.765199][T20600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  534.791034][T20600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  534.860220][T12784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.894781][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3676'.
[  534.962791][T20607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3675'.
[  535.024882][T12784] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.034766][T12784] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[  535.044143][T12784] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.053110][T12784] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0
[  535.068871][T12784] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.081614][T12784] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0
[  535.095630][T20611] lo speed is unknown, defaulting to 1000
[  535.100672][T12784] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  535.111800][T12784] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0
[  535.125892][T20611] lo speed is unknown, defaulting to 1000
[  535.273775][T20619] syzkaller1: entered promiscuous mode
[  535.287381][T20619] syzkaller1: entered allmulticast mode
[  535.511402][T20627] netlink: 'syz.2.3679': attribute type 1 has an invalid length.
[  536.867781][ T7503] net_ratelimit: 6 callbacks suppressed
[  536.867800][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.937275][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  536.946868][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.017693][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.027634][T20581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  537.309282][T20651] netlink: 'syz.6.3688': attribute type 1 has an invalid length.
[  537.470077][T20662] gretap1: entered allmulticast mode
[  537.503793][T20662] bond6: (slave gretap1): making interface the new active one
[  537.523083][T20662] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  537.610743][T20669] bridge3: the hash_elasticity option has been deprecated and is always 16
[  537.681649][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'.
[  537.774194][T20676] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3694'.
[  537.869919][T20681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'.
[  537.977818][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  537.986920][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.032769][T20684] netlink: 'syz.6.3695': attribute type 1 has an invalid length.
[  538.067534][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.109915][T20684] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3695'.
[  538.129252][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3695'.
[  538.243885][T20697] syzkaller0: entered promiscuous mode
[  538.270131][T20697] syzkaller0: entered allmulticast mode
[  538.511207][T20706] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  538.556740][T20706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  538.578203][T20706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  538.937531][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  538.975821][T20714] vlan0: left promiscuous mode
[  539.016673][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.024855][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  539.042470][T20726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3708'.
[  539.454042][T20714] netdevsim netdevsim6 netdevsim0: left promiscuous mode
[  539.484273][T20714] 8021q: adding VLAN 0 to HW filter on device bond1
[  539.509032][T20714] 8021q: adding VLAN 0 to HW filter on device bond3
[  539.521117][T20714] erspan0: entered promiscuous mode
[  539.536478][T20714] 8021q: adding VLAN 0 to HW filter on device bond5
[  539.546262][T20714] 8021q: adding VLAN 0 to HW filter on device bond6
[  539.641584][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3709'.
[  539.978720][T20746] __nla_validate_parse: 4 callbacks suppressed
[  539.978739][T20746] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3714'.
[  540.016933][T20746] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3714'.
[  540.601469][T20796] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3726'.
[  540.771122][T20800] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3728'.
[  540.827349][T20803] syzkaller1: entered promiscuous mode
[  540.852796][T20811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3728'.
[  540.853147][T20803] syzkaller1: entered allmulticast mode
[  541.037285][T20816] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3731'.
[  541.053243][T20815] netlink: 'syz.6.3731': attribute type 1 has an invalid length.
[  541.338824][T20832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3735'.
[  541.555980][T20839] syzkaller0: entered promiscuous mode
[  541.571295][T20839] syzkaller0: entered allmulticast mode
[  541.720599][T20852] syzkaller0: entered promiscuous mode
[  541.730306][T20860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'.
[  541.731719][T20852] syzkaller0: entered allmulticast mode
[  541.751357][T20859] xt_hashlimit: size too large, truncated to 1048576
[  541.763468][T20860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3744'.
[  541.773803][T20858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3740'.
[  541.927656][T20866] netlink: 'syz.6.3745': attribute type 11 has an invalid length.
[  541.978274][ T7487] net_ratelimit: 9 callbacks suppressed
[  541.978294][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.013669][T20870] netlink: 'syz.1.3747': attribute type 1 has an invalid length.
[  542.136668][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.144986][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.185420][T20870] 8021q: adding VLAN 0 to HW filter on device bond5
[  542.195534][T20878] tipc: Enabled bearer <udp:syz2>, priority 10
[  542.203422][T20879] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  542.218235][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  542.583731][T20903] netlink: 'syz.2.3755': attribute type 4 has an invalid length.
[  542.672291][T20903] .`: renamed from bond0 (while UP)
[  542.738663][T20909] syzkaller0: entered promiscuous mode
[  542.765571][T20909] syzkaller0: entered allmulticast mode
[  542.947599][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.159180][T20883] 8021q: adding VLAN 0 to HW filter on device bond11
[  543.176857][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.185084][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.208020][T20883] bridge0: port 3(bond11) entered blocking state
[  543.224229][T20883] bridge0: port 3(bond11) entered disabled state
[  543.244680][T20883] bond11: entered allmulticast mode
[  543.271130][ T7503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.304167][T20883] bond11: entered promiscuous mode
[  543.352809][T20928] hsr_slave_0: left promiscuous mode
[  543.373274][T20928] hsr_slave_1: left promiscuous mode
[  543.737384][T20946] bridge_slave_0: left allmulticast mode
[  543.759512][T20946] bridge_slave_0: left promiscuous mode
[  543.772598][T20946] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.806121][T20946] bridge_slave_1: left allmulticast mode
[  543.835687][T20946] bridge_slave_1: left promiscuous mode
[  543.868544][T20946] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.931098][T20946] bond7: (slave veth0_to_bond): Releasing active interface
[  544.014794][T20946] bond0: (slave bond_slave_0): Releasing backup interface
[  544.047657][T20946] bond0: (slave bond_slave_1): Releasing backup interface
[  544.090206][T20946] team0: Port device team_slave_0 removed
[  544.104446][T20946] team0: Port device team_slave_1 removed
[  544.122362][T20946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  544.142740][T20946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  544.164167][T20946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  544.218674][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.218809][T20971] bridge4: entered promiscuous mode
[  544.234081][T20971] bridge4: entered allmulticast mode
[  544.243344][T20949] netlink: 'syz.2.3759': attribute type 3 has an invalid length.
[  544.538167][T20976] sctp: [Deprecated]: syz.6.3773 (pid 20976) Use of int in max_burst socket option deprecated.
[  544.538167][T20976] Use struct sctp_assoc_value instead
[  544.620145][T20976] bond0: entered promiscuous mode
[  544.636499][T20976] bond_slave_0: entered promiscuous mode
[  544.652141][T20976] bond_slave_1: entered promiscuous mode
[  544.675756][T20976] gretap0: entered promiscuous mode
[  544.701764][T20976] hsr1: entered promiscuous mode
[  545.122946][T21005] lo speed is unknown, defaulting to 1000
[  545.179883][T21005] lo speed is unknown, defaulting to 1000
[  545.180649][T21007] syzkaller0: entered promiscuous mode
[  545.229288][T21007] syzkaller0: entered allmulticast mode
[  545.283062][T21010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  545.324880][T21016] __nla_validate_parse: 7 callbacks suppressed
[  545.324898][T21016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3786'.
[  545.354513][T21007] tipc: Resetting bearer <eth:syzkaller0>
[  545.685065][T21037] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3789'.
[  545.705717][T21041] netlink: 'syz.6.3789': attribute type 3 has an invalid length.
[  545.853924][T21004] tipc: Resetting bearer <eth:syzkaller0>
[  545.946943][T21004] tipc: Disabling bearer <eth:syzkaller0>
[  546.218273][T21054] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  546.530584][T21064] netlink: 'syz.7.3800': attribute type 12 has an invalid length.
[  547.044554][T21092] netlink: 'syz.6.3803': attribute type 39 has an invalid length.
[  547.248043][T21101] netlink: 'syz.5.3809': attribute type 8 has an invalid length.
[  547.330756][T21106] sit0: entered promiscuous mode
[  547.353046][ T7487] net_ratelimit: 18 callbacks suppressed
[  547.353063][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.372428][T21106] netlink: 'syz.7.3811': attribute type 1 has an invalid length.
[  547.419246][T21106] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3811'.
[  547.474492][T21118] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3814'.
[  547.490102][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.500232][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.576929][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.604054][T21122] bridge0: port 1(vlan4) entered blocking state
[  547.614557][T21122] bridge0: port 1(vlan4) entered disabled state
[  547.628009][T21122] vlan4: entered allmulticast mode
[  547.637752][T21122] geneve0: entered allmulticast mode
[  547.655016][T21122] vlan4: entered promiscuous mode
[  547.660431][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  547.664739][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  547.697705][T21122] geneve0: entered promiscuous mode
[  547.700508][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3816'.
[  547.743573][T21124] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  547.751892][T21132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3816'.
[  547.761502][T21132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3816'.
[  547.770303][T21124] syzkaller0: entered promiscuous mode
[  547.788559][T21124] syzkaller0: entered allmulticast mode
[  547.794717][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3816'.
[  547.828040][T21124] tipc: Resetting bearer <eth:syzkaller0>
[  547.849078][T21123] tipc: Resetting bearer <eth:syzkaller0>
[  547.887958][T21138] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received
[  547.899383][T21123] tipc: Disabling bearer <eth:syzkaller0>
[  547.916417][T21135] netlink: 'syz.6.3819': attribute type 1 has an invalid length.
[  548.138106][T21151] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3824'.
[  548.221631][T21156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3826'.
[  548.377266][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.522891][T21160] team0 (unregistering): Port device team_slave_0 removed
[  548.551865][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.561212][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.584573][T21160] team0 (unregistering): Port device team_slave_1 removed
[  548.616799][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.830051][T21191] netlink: 'syz.7.3836': attribute type 11 has an invalid length.
[  548.838495][T21189] syzkaller0: entered promiscuous mode
[  548.838518][T21189] syzkaller0: entered allmulticast mode
[  549.191325][T21203] syzkaller0: entered promiscuous mode
[  549.221003][T21203] syzkaller0: entered allmulticast mode
[  549.869480][ T5623] Bluetooth: hci2: command 0x0406 tx timeout
[  549.898862][T21236] 8021q: adding VLAN 0 to HW filter on device bond12
[  550.050374][T21238] syzkaller1: entered promiscuous mode
[  550.076811][T21238] syzkaller1: entered allmulticast mode
[  550.571121][T21287] __nla_validate_parse: 8 callbacks suppressed
[  550.571140][T21287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3855'.
[  550.658536][T21291] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3861'.
[  550.842025][T21308] netlink: 'syz.5.3864': attribute type 32 has an invalid length.
[  550.856825][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  550.955566][T21301] tipc: Resetting bearer <ib:wg2>
[  551.225962][T11647] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  551.253964][T11647] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  551.274881][T11647] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  551.293458][T11647] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  551.327842][T21318] syzkaller0: entered promiscuous mode
[  551.333780][T21318] syzkaller0: entered allmulticast mode
[  551.498029][ T1682] block nbd4: Possible stuck request ffff888027557000: control (read@0,1024B). Runtime 240 seconds
[  551.508928][ T1682] block nbd4: Possible stuck request ffff8880275571c0: control (read@1024,1024B). Runtime 240 seconds
[  551.520096][ T1682] block nbd4: Possible stuck request ffff888027557380: control (read@2048,1024B). Runtime 240 seconds
[  551.531861][ T1682] block nbd4: Possible stuck request ffff888027557540: control (read@3072,1024B). Runtime 240 seconds
[  552.536867][ T5833] net_ratelimit: 15 callbacks suppressed
[  552.536888][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.698726][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.708729][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.781937][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.576974][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.600510][T21289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  553.742213][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.750401][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.759582][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.826881][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  553.863698][T21355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3878'.
[  553.879906][T21355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3878'.
[  554.020268][T21359] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  554.057869][T21374] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3883'.
[  554.069957][T21374] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3883'.
[  554.150843][T21375] can: request_module (can-proto-0) failed.
[  554.233843][T21359] bond8 (unregistering): Released all slaves
[  554.437164][T21388] netlink: 'syz.7.3887': attribute type 1 has an invalid length.
[  554.484239][T21388] 8021q: adding VLAN 0 to HW filter on device bond3
[  554.492274][T21388] netlink: 'syz.7.3887': attribute type 1 has an invalid length.
[  554.501656][T21388] netlink: 'syz.7.3887': attribute type 1 has an invalid length.
[  554.512411][T21388] netlink: 'syz.7.3887': attribute type 1 has an invalid length.
[  554.524330][T21388] netlink: 'syz.7.3887': attribute type 1 has an invalid length.
[  554.565216][T21388] netlink: 'syz.7.3887': attribute type 1 has an invalid length.
[  554.617202][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.771261][T21401] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3889'.
[  554.822209][T21401] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3889'.
[  554.850636][T21401] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3889'.
[  554.887010][T21401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3889'.
[  554.920711][T21409] netlink: 'syz.6.3889': attribute type 1 has an invalid length.
[  555.157733][T21409] bond8: (slave gretap2): making interface the new active one
[  555.166813][T21409] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  555.279472][T21429] bond1: left promiscuous mode
[  555.286470][T21429] vlan2: left promiscuous mode
[  555.311456][T21429] bridge0: left promiscuous mode
[  555.327772][T21429] ip6tnl2: left allmulticast mode
[  555.674926][T21464] __nla_validate_parse: 3 callbacks suppressed
[  555.674943][T21464] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3907'.
[  555.754883][T21471] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3909'.
[  555.785045][T21473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3910'.
[  556.112348][T21477] 8021q: adding VLAN 0 to HW filter on device bond0
[  556.125882][T21477] 8021q: adding VLAN 0 to HW filter on device team0
[  556.143073][T21477] 8021q: adding VLAN 0 to HW filter on device batadv0
[  556.194330][T21477] batman_adv: batadv0: Interface activated: batadv_slave_0
[  556.206071][T21477] batman_adv: batadv0: Interface activated: batadv_slave_1
[  556.228895][T21477] veth1_vlan: left promiscuous mode
[  556.236065][T21477] veth0_vlan: left promiscuous mode
[  556.243808][T21477] veth0_vlan: entered promiscuous mode
[  556.256428][T21477] veth1_vlan: entered promiscuous mode
[  556.268385][T21477] veth1_macvtap: left promiscuous mode
[  556.276896][T21477] veth0_macvtap: left promiscuous mode
[  556.283923][T21477] veth0_macvtap: entered promiscuous mode
[  556.300969][T21477] veth1_macvtap: entered promiscuous mode
[  556.314099][T21477] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  556.323489][T21477] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  556.336202][T21477] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  556.346459][T21477] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  556.381238][T21477] 8021q: adding VLAN 0 to HW filter on device bond1
[  556.397428][T21477] 8021q: adding VLAN 0 to HW filter on device bond2
[  556.453937][T21477] 8021q: adding VLAN 0 to HW filter on device bond3
[  556.466363][T21477] 8021q: adding VLAN 0 to HW filter on device bond4
[  556.504002][T12785] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.511188][T12785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  556.531258][T12785] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.538480][T12785] bridge0: port 2(bridge_slave_1) entered forwarding state
[  556.644444][T12786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  556.664059][T12786] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  556.697017][T12786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  556.717746][T12786] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  556.817022][T12785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  556.836226][T12785] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  556.850153][T21514] netlink: 'syz.7.3919': attribute type 2 has an invalid length.
[  556.861400][T12785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  556.867056][T21514] netlink: 'syz.7.3919': attribute type 8 has an invalid length.
[  556.882329][T12785] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  556.897320][T21514] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3919'.
[  556.902773][T21521] netlink: 'syz.5.3922': attribute type 29 has an invalid length.
[  556.930527][T21521] netlink: 'syz.5.3922': attribute type 11 has an invalid length.
[  556.940458][T21525] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3919'.
[  556.950179][ T7487] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  557.060636][T12785] bond4: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  557.097442][T12785] bond4: (slave veth3): making interface the new active one
[  557.163023][T12785] bond4: active interface up!
[  557.251084][T21530] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3924'.
[  557.289459][T21535] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3925'.
[  557.334141][T12786] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  557.349173][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3925'.
[  557.398081][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3925'.
[  557.448658][T21535] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3925'.
[  557.567960][ T5833] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  557.738448][ T5833] net_ratelimit: 13 callbacks suppressed
[  557.738466][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.918831][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.930253][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.939042][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.976932][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.998727][T12786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.012916][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.024260][ T7510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.141455][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.696111][T21587] syzkaller0: entered promiscuous mode
[  558.714267][T21587] syzkaller0: entered allmulticast mode
[  558.779819][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.813802][T12786] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  558.834985][T12786] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  559.348867][T21617] bond9: entered promiscuous mode
[  559.357692][T21617] bond9: entered allmulticast mode
[  559.363401][T21617] 8021q: adding VLAN 0 to HW filter on device bond9
[  559.405381][T21616] lo speed is unknown, defaulting to 1000
[  559.574117][T21616] lo speed is unknown, defaulting to 1000
[  559.897580][T14953] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  560.011197][T21641] sctp: [Deprecated]: syz.1.3950 (pid 21641) Use of int in max_burst socket option.
[  560.011197][T21641] Use struct sctp_assoc_value instead
[  560.011649][T21635] pim6reg: entered allmulticast mode
[  560.085900][T21638] pim6reg: left allmulticast mode
[  560.442294][T21659] bridge0: entered allmulticast mode
[  560.517737][   T36] bridge_slave_1: left allmulticast mode
[  560.530964][   T36] bridge_slave_1: left promiscuous mode
[  560.561253][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.575704][   T36] bridge_slave_0: left allmulticast mode
[  560.586124][   T36] bridge_slave_0: left promiscuous mode
[  560.598469][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.918225][   T36] bond6 (unregistering): (slave ip6gretap1): Releasing active interface
[  561.005791][T21683] validate_nla: 7 callbacks suppressed
[  561.005810][T21683] netlink: 'syz.7.3957': attribute type 1 has an invalid length.
[  561.037232][T21683] __nla_validate_parse: 11 callbacks suppressed
[  561.037252][T21683] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3957'.
[  561.366342][T21691] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3958'.
[  561.595240][   T36] bond2 (unregistering): (slave gre3): Releasing backup interface
[  561.952316][   T36] bond1 (unregistering): Released all slaves
[  562.011235][   T36] bond2 (unregistering): Released all slaves
[  562.051372][   T36] bond3 (unregistering): Released all slaves
[  562.073510][   T36] bond4 (unregistering): Released all slaves
[  562.093650][   T36] bond5 (unregistering): Released all slaves
[  562.131774][   T36] bond6 (unregistering): Released all slaves
[  562.152478][   T36] bond7 (unregistering): (slave bond8): Releasing backup interface
[  562.171435][   T36] bond7 (unregistering): Released all slaves
[  562.193529][   T36] bond8 (unregistering): Released all slaves
[  562.213404][   T36] bond9 (unregistering): Released all slaves
[  562.253194][   T36] bond10 (unregistering): (slave veth11): Releasing active interface
[  562.263114][   T36] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface
[  562.274820][   T36] bond10 (unregistering): Released all slaves
[  562.295226][   T36] bond11 (unregistering): Released all slaves
[  562.317288][   T36] bond12 (unregistering): Released all slaves
[  562.345759][   T36] bond13 (unregistering): Released all slaves
[  562.366993][   T36] bond14 (unregistering): Released all slaves
[  562.394173][   T36] bond0 (unregistering): Released all slaves
[  562.422371][T21660] pim6reg: entered allmulticast mode
[  562.445272][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1
[  562.720958][   T36] tipc: Disabling bearer <udp:syz2>
[  562.763778][   T36] tipc: Left network mode
[  562.771300][T21703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3961'.
[  562.815552][T21703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3961'.
[  562.845754][T21706] netlink: 'syz.6.3962': attribute type 28 has an invalid length.
[  562.883715][T21706] netlink: 'syz.6.3962': attribute type 3 has an invalid length.
[  562.911743][T21706] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3962'.
[  562.941697][ T7486] net_ratelimit: 17 callbacks suppressed
[  562.941716][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.097240][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  563.097418][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.115340][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.176957][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.673165][   T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.685706][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.757901][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.884131][T21741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3967'.
[  563.978665][T14953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.140281][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.150051][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.197108][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  564.444596][T21757] bridge_slave_0: left allmulticast mode
[  564.465273][T21757] bridge_slave_0: left promiscuous mode
[  564.475587][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  564.495568][T21757] bridge0: port 1(bridge_slave_0) entered disabled state
[  564.520296][T21757] bridge_slave_1: left promiscuous mode
[  564.536414][T21757] bridge0: port 2(bridge_slave_1) entered disabled state
[  564.553824][T21766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3971'.
[  564.590002][T21757] bond0: (slave bond_slave_0): Releasing backup interface
[  564.605394][T21757] bond_slave_0: left allmulticast mode
[  564.615318][T21757] bond0: (slave bond_slave_1): Releasing backup interface
[  564.639513][T21757] bond_slave_1: left allmulticast mode
[  564.652997][T21757] team0: Port device team_slave_0 removed
[  564.669699][T21757] team0: Port device team_slave_1 removed
[  564.678245][T21757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.685760][T21757] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.695155][T21757] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.701054][T21756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3968'.
[  564.716398][T21757] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.742007][T21757] bond4: (slave veth3): Releasing active interface
[  564.800164][ T7510] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  564.833669][T21756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.842883][T21756] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.851670][T21756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.859599][T21756] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.976531][T21782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3975'.
[  565.043533][T21787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3976'.
[  565.349555][T21794] bond0: entered promiscuous mode
[  565.379163][T21794] bond0: entered allmulticast mode
[  565.727777][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  565.875671][T21814] tipc: Resetting bearer <ib:wg2>
[  565.943823][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  566.009087][T21818] netlink: 'syz.5.3983': attribute type 10 has an invalid length.
[  566.099876][T21818] geneve5: entered promiscuous mode
[  566.106795][T21818] geneve5: entered allmulticast mode
[  566.146111][T21835] netlink: 'syz.6.3987': attribute type 1 has an invalid length.
[  566.159659][T21836] netlink: 'syz.1.3985': attribute type 5 has an invalid length.
[  566.199056][T21820] lo speed is unknown, defaulting to 1000
[  566.318549][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  566.333736][T21820] lo speed is unknown, defaulting to 1000
[  566.426258][T21849] __nla_validate_parse: 3 callbacks suppressed
[  566.426278][T21849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3989'.
[  567.041912][T21872] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  567.271911][T21885] netlink: 'syz.5.3998': attribute type 1 has an invalid length.
[  567.489272][T21885] 8021q: adding VLAN 0 to HW filter on device bond13
[  567.541617][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  567.567835][T21901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4001'.
[  567.585494][ T7486] IPVS: starting estimator thread 0...
[  567.677670][T21902] IPVS: using max 53 ests per chain, 127200 per kthread
[  567.705815][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4001'.
[  568.138699][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  568.138859][ T7486] net_ratelimit: 16 callbacks suppressed
[  568.138873][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.177861][ T1121] smc: removing ib device syz1
[  568.206417][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4
[  568.275686][T21901] 8021q: adding VLAN 0 to HW filter on device bond14
[  568.310300][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.319260][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.376758][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.422428][ T1121] smbdirect: ib_dev[syz1] removed
[  568.428477][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4004'.
[  569.176843][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.287474][T21959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4015'.
[  569.340043][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.349547][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.427550][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.499011][T21965] netlink: 'syz.6.4017': attribute type 13 has an invalid length.
[  569.503786][T21966] netlink: 'syz.2.4016': attribute type 4 has an invalid length.
[  569.614009][T21978] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  569.623153][ T7510] IPVS: starting estimator thread 0...
[  569.630960][T21978] IPVS: rr: FWM 3 0x00000003 - no destination available
[  569.726824][T21979] IPVS: using max 39 ests per chain, 93600 per kthread
[  569.817993][ T7486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.843293][T21992] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4019'.
[  569.974276][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4019'.
[  570.022097][T21987] 8021q: VLANs not supported on ip6gre0
[  570.084086][T21997] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4022'.
[  570.134573][T21997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4022'.
[  570.173886][T21997] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4022'.
[  570.270638][T22003] netlink: 'syz.5.4024': attribute type 12 has an invalid length.
[  570.353913][T22005] netlink: 'syz.6.4025': attribute type 3 has an invalid length.
[  570.422298][T22007] nbd: must specify a size in bytes for the device
[  570.512152][T22005] geneve2: entered promiscuous mode
[  570.529243][T22005] geneve2: entered allmulticast mode
[  570.780380][T22014] macsec0: entered promiscuous mode
[  570.808491][T22023] netlink: 'syz.1.4027': attribute type 1 has an invalid length.
[  570.828902][T22017] macsec0 (unregistering): left promiscuous mode
[  571.598187][T22049] __nla_validate_parse: 6 callbacks suppressed
[  571.598208][T22049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4034'.
[  571.716853][T22049] bond0: left promiscuous mode
[  571.739497][T22049] bond0: left allmulticast mode
[  571.980274][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  572.372671][ T7486] IPVS: starting estimator thread 0...
[  572.408692][T22079] nbd: couldn't find a device at index 0
[  572.487035][T22078] IPVS: using max 35 ests per chain, 84000 per kthread
[  572.550628][T22082] Cannot find del_set index 1 as target
[  572.614151][T22082] xt_hashlimit: size too large, truncated to 1048576
[  572.655201][T22089] netlink: 'syz.2.4043': attribute type 1 has an invalid length.
[  572.673876][T22089] netlink: 'syz.2.4043': attribute type 4 has an invalid length.
[  572.686284][T22089] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4043'.
[  572.712175][T22093] netlink: 'syz.2.4043': attribute type 1 has an invalid length.
[  572.731247][T22092] xt_hashlimit: size too large, truncated to 1048576
[  572.740650][T22093] netlink: 'syz.2.4043': attribute type 4 has an invalid length.
[  572.762145][T22092] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  572.786761][T22093] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4043'.
[  573.285283][T22107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4045'.
[  573.336957][   T10] net_ratelimit: 15 callbacks suppressed
[  573.336975][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.350795][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.378935][T22109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  573.431808][T22108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  573.500565][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.510324][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.575328][T22120] syzkaller0: entered promiscuous mode
[  573.586735][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.600956][T22120] syzkaller0: entered allmulticast mode
[  574.378570][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.548880][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.559180][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.626680][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.956103][T22170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4058'.
[  574.993764][T22169] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4058'.
[  575.015569][T22176] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode
[  575.083051][T22182] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4060'.
[  575.123237][T22182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4060'.
[  575.251304][   T36] IPVS: stop unused estimator thread 0...
[  575.417301][ T7487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.752388][T22206] syzkaller0: entered promiscuous mode
[  575.786328][T22206] syzkaller0: entered allmulticast mode
[  576.743760][T22234] netlink: 276 bytes leftover after parsing attributes in process `syz.6.4071'.
[  577.390900][T22263] .`: (slave bond_slave_0): Releasing backup interface
[  577.464855][T22263] .`: (slave bond_slave_1): Releasing backup interface
[  578.149748][T22295] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4081'.
[  578.363159][T22308] netlink: 276 bytes leftover after parsing attributes in process `syz.7.4084'.
[  578.441452][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4085'.
[  578.510978][T22315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4086'.
[  578.568855][T22255] net_ratelimit: 14 callbacks suppressed
[  578.568901][T22255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.709750][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.720279][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.743570][T22310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4085'.
[  578.828949][T22323] netlink: 'syz.5.4087': attribute type 1 has an invalid length.
[  578.862676][T22325] syz_tun: entered allmulticast mode
[  578.952784][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.003696][T22337] netlink: 'syz.2.4092': attribute type 2 has an invalid length.
[  579.021116][T22323] bond15: entered promiscuous mode
[  579.022384][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.030878][T22323] 8021q: adding VLAN 0 to HW filter on device bond15
[  579.070846][T22333] dvmrp8: left allmulticast mode
[  579.199538][T22324] syz_tun: left allmulticast mode
[  579.209987][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4093'.
[  579.358038][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4094'.
[  579.427763][T22348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4094'.
[  579.446315][ T7504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.494566][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4094'.
[  579.563287][T22356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.579777][T22255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.600501][T22356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.669243][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.825248][T22363] syzkaller0: entered promiscuous mode
[  579.848476][T22363] syzkaller0: entered allmulticast mode
[  580.577228][T22409] netlink: 'syz.5.4110': attribute type 7 has an invalid length.
[  580.600011][T22409] netlink: 'syz.5.4110': attribute type 3 has an invalid length.
[  581.033706][T22430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  581.042715][T22430] IPv6: NLM_F_CREATE should be set when creating new route
[  581.051801][T22430] IPv6: NLM_F_CREATE should be set when creating new route
[  581.154478][   T30] audit: type=1800 audit(1784086438.210:11): pid=22434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4119" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1098 res=0 errno=0
[  581.178109][T22255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  581.215635][T22434] netlink: 'syz.7.4119': attribute type 58 has an invalid length.
[  581.226957][T22255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  581.315182][T22434] can: request_module (can-proto-0) failed.
[  581.497610][T22448] ipvlan1: entered promiscuous mode
[  581.511510][T22448] ipvlan1: left promiscuous mode
[  581.578778][ T1682] block nbd4: Possible stuck request ffff888027557000: control (read@0,1024B). Runtime 270 seconds
[  581.590871][ T1682] block nbd4: Possible stuck request ffff8880275571c0: control (read@1024,1024B). Runtime 270 seconds
[  581.603278][ T1682] block nbd4: Possible stuck request ffff888027557380: control (read@2048,1024B). Runtime 270 seconds
[  581.620554][ T1682] block nbd4: Possible stuck request ffff888027557540: control (read@3072,1024B). Runtime 270 seconds
[  581.698109][T22456] netlink: 'syz.7.4126': attribute type 2 has an invalid length.
[  581.707304][T22255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  581.870253][T22466] __nla_validate_parse: 8 callbacks suppressed
[  581.870274][T22466] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4130'.
[  582.081558][T22473] syzkaller0: entered promiscuous mode
[  582.091604][T22473] syzkaller0: entered allmulticast mode
[  582.210443][T22483] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4136'.
[  582.561165][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4138'.
[  582.573511][T22504] netlink: 'syz.2.4141': attribute type 2 has an invalid length.
[  582.612241][T22504] : entered promiscuous mode
[  582.629268][T22504] netlink: 'syz.2.4141': attribute type 2 has an invalid length.
[  582.658585][T22504] netlink: 'syz.2.4141': attribute type 2 has an invalid length.
[  582.692905][T22508] netlink: 'syz.7.4142': attribute type 10 has an invalid length.
[  582.857032][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  582.869459][   T31] INFO: task syz.4.2906:17609 blocked for more than 143 seconds.
[  582.881860][   T31]       Not tainted syzkaller #0
[  582.905020][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  582.916332][   T31] task:syz.4.2906      state:D stack:22080 pid:17609 tgid:17607 ppid:5628   task_flags:0x400140 flags:0x00080002
[  582.931044][   T31] Call Trace:
[  582.936374][   T31]  <TASK>
[  582.940818][   T31]  __schedule+0x17d9/0x56c0
[  582.947265][   T31]  ? __lock_acquire+0x683/0x2cf0
[  582.955133][   T31]  ? __lock_acquire+0x683/0x2cf0
[  582.961366][   T31]  ? __pfx___schedule+0x10/0x10
[  582.968398][   T31]  ? schedule+0x90/0x2b0
[  582.974273][   T31]  schedule+0x164/0x2b0
[  582.981729][   T31]  schedule_preempt_disabled+0x13/0x30
[  582.994071][   T31]  __mutex_lock+0x7bf/0x1550
[  583.011628][   T31]  ? __mutex_lock+0x5d4/0x1550
[  583.033085][   T31]  ? nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40
[  583.049164][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  583.059281][   T31]  ? net_generic+0x1e/0x240
[  583.067262][   T31]  ? net_generic+0x1e/0x240
[  583.076376][   T31]  nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40
[  583.098880][   T31]  ? rcu_is_watching+0x15/0xb0
[  583.113718][   T31]  ? trace_kmalloc+0x2a/0xf0
[  583.124644][   T31]  ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10
[  583.138012][   T31]  ? __kmalloc_node_track_caller_noprof+0x4e1/0x730
[  583.146483][   T31]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[  583.155391][   T31]  ? __kmalloc_node_track_caller_noprof+0x2fd/0x730
[  583.168098][   T31]  ? netlink_dump+0x1e7/0xee0
[  583.176011][   T31]  ? netlink_dump+0x1e7/0xee0
[  583.183714][   T31]  genl_dumpit+0x10b/0x1b0
[  583.192200][   T31]  netlink_dump+0x711/0xee0
[  583.198164][   T31]  ? __pfx_netlink_dump+0x10/0x10
[  583.204095][   T31]  ? genl_start+0x497/0x6d0
[  583.215433][   T31]  __netlink_dump_start+0x589/0x7b0
[  583.224103][   T31]  genl_family_rcv_msg_dumpit+0x213/0x310
[  583.235533][   T31]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  583.245839][   T31]  ? __pfx_genl_start+0x10/0x10
[  583.252658][   T31]  ? __pfx_genl_dumpit+0x10/0x10
[  583.263112][   T31]  ? __pfx_genl_done+0x10/0x10
[  583.269917][   T31]  ? bpf_lsm_capable+0x9/0x20
[  583.276327][   T31]  ? security_capable+0x7e/0x2c0
[  583.284914][   T31]  genl_rcv_msg+0x5e1/0x7a0
[  583.290302][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  583.297687][   T31]  ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10
[  583.305637][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  583.317834][   T31]  netlink_rcv_skb+0x226/0x4a0
[  583.323958][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  583.335128][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  583.347616][   T31]  ? down_read+0x2be/0x330
[  583.353081][   T31]  genl_rcv+0x28/0x40
[  583.358325][   T31]  netlink_unicast+0x7bb/0x940
[  583.364552][   T31]  netlink_sendmsg+0x813/0xb40
[  583.369626][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  583.374983][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  583.380448][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  583.385797][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  583.391153][   T31]  ____sys_sendmsg+0x54e/0x850
[  583.396039][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  583.401442][   T31]  ? import_iovec+0x73/0xa0
[  583.406089][   T31]  ___sys_sendmsg+0x2a5/0x360
[  583.411823][   T31]  ? __lock_acquire+0x683/0x2cf0
[  583.418110][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  583.423381][   T31]  ? futex_wake+0x51b/0x5f0
[  583.430392][   T31]  ? __fget_files+0x2a/0x420
[  583.435980][   T31]  ? __fget_files+0x3a2/0x420
[  583.441342][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  583.450158][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  583.458328][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.465652][   T31]  do_syscall_64+0x174/0x580
[  583.471835][   T31]  ? clear_bhb_loop+0x40/0x90
[  583.477266][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.483725][   T31] RIP: 0033:0x7f9512b9de59
[  583.489209][   T31] RSP: 002b:00007f9513aba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  583.502327][   T31] RAX: ffffffffffffffda RBX: 00007f9512e25fa0 RCX: 00007f9512b9de59
[  583.511063][   T31] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 000000000000000b
[  583.519728][   T31] RBP: 00007f9512c33e6f R08: 0000000000000000 R09: 0000000000000000
[  583.530183][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  583.539298][   T31] R13: 00007f9512e26038 R14: 00007f9512e25fa0 R15: 00007ffec27b6f78
[  583.550082][   T31]  </TASK>
[  583.553779][   T31] 
[  583.553779][   T31] Showing all locks held in the system:
[  583.594238][   T31] 1 lock held by khungtaskd/31:
[  583.601462][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  583.613326][   T31] 2 locks held by syslogd/4969:
[  583.618644][   T31]  #0: ffff8880b873b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  583.630328][   T31]  #1: ffff8880b8724440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  583.643318][   T31] 2 locks held by getty/5379:
[  583.656644][   T31]  #0: ffff888035c900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  583.678471][   T31]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  583.689191][   T31] 1 lock held by udevd/8153:
[  583.693918][   T31]  #0: ffff888027266350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  583.703417][   T31] 2 locks held by syz.3.2614/16345:
[  583.708885][   T31]  #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  583.717464][   T31]  #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750
[  583.727846][   T31] 3 locks held by syz.4.2906/17609:
[  583.733080][   T31]  #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  583.741591][   T31]  #1: ffff8880351706e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[  583.752561][   T31]  #2: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfd/0xd40
[  583.763171][   T31] 
[  583.765608][   T31] =============================================
[  583.765608][   T31] 
[  583.774607][   T31] NMI backtrace for cpu 0
[  583.774628][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  583.774640][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  583.774647][   T31] Call Trace:
[  583.774651][   T31]  <TASK>
[  583.774656][   T31]  dump_stack_lvl+0xe8/0x150
[  583.774695][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  583.774775][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  583.774797][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  583.774812][   T31]  sys_info+0x135/0x170
[  583.774823][   T31]  watchdog+0xfd7/0x1030
[  583.774843][   T31]  ? watchdog+0x1c7/0x1030
[  583.774858][   T31]  kthread+0x388/0x470
[  583.774873][   T31]  ? __pfx_watchdog+0x10/0x10
[  583.774884][   T31]  ? __pfx_kthread+0x10/0x10
[  583.774898][   T31]  ret_from_fork+0x514/0xb70
[  583.774924][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  583.774939][   T31]  ? __switch_to+0xc89/0x1420
[  583.774952][   T31]  ? __pfx_kthread+0x10/0x10
[  583.774967][   T31]  ret_from_fork_asm+0x1a/0x30
[  583.774984][   T31]  </TASK>
[  583.774988][   T31] Sending NMI from CPU 0 to CPUs 1:
[  583.905928][    C1] NMI backtrace for cpu 1
[  583.905948][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  583.905967][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  583.905978][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  583.906015][    C1] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  583.906031][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242
[  583.906047][    C1] RAX: 000000000019e6e3 RBX: ffffffff819ab450 RCX: 0000000080000001
[  583.906059][    C1] RDX: 0000000000000001 RSI: ffffffff8e22ba3a RDI: ffffffff8c4bd380
[  583.906071][    C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
[  583.906083][    C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
[  583.906092][    C1] R13: 1ffff11003bdf000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  583.906102][    C1] FS:  0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000
[  583.906116][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  583.906132][    C1] CR2: 00007f7aacfed2f8 CR3: 0000000074a6a000 CR4: 00000000003526f0
[  583.906147][    C1] Call Trace:
[  583.906155][    C1]  <TASK>
[  583.906161][    C1]  default_idle+0x9/0x20
[  583.906179][    C1]  default_idle_call+0x72/0xb0
[  583.906198][    C1]  do_idle+0x2e0/0x540
[  583.906222][    C1]  ? __pfx_do_idle+0x10/0x10
[  583.906254][    C1]  cpu_startup_entry+0x43/0x60
[  583.906275][    C1]  start_secondary+0x101/0x110
[  583.906298][    C1]  common_startup_64+0x13e/0x157
[  583.906327][    C1]  </TASK>
[  583.907366][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  583.907381][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  583.907403][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  583.907415][   T31] Call Trace:
[  583.907423][   T31]  <TASK>
[  583.907431][   T31]  vpanic+0x56c/0xa60
[  583.907462][   T31]  ? __pfx___schedule+0x10/0x10
[  583.907488][   T31]  ? __pfx_vpanic+0x10/0x10
[  583.907525][   T31]  panic+0xc5/0xd0
[  583.907551][   T31]  ? __pfx_panic+0x10/0x10
[  583.907575][   T31]  ? preempt_schedule_common+0x82/0xd0
[  583.907595][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  583.907615][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  583.907640][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  583.907667][   T31]  watchdog+0x1030/0x1030
[  583.907697][   T31]  ? watchdog+0x1c7/0x1030
[  583.907725][   T31]  kthread+0x388/0x470
[  583.907751][   T31]  ? __pfx_watchdog+0x10/0x10
[  583.907772][   T31]  ? __pfx_kthread+0x10/0x10
[  583.907799][   T31]  ret_from_fork+0x514/0xb70
[  583.907828][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  583.907854][   T31]  ? __switch_to+0xc89/0x1420
[  583.907878][   T31]  ? __pfx_kthread+0x10/0x10
[  583.907905][   T31]  ret_from_fork_asm+0x1a/0x30
[  583.907937][   T31]  </TASK>
[  584.232727][   T31] Kernel Offset: disabled
[  584.237856][   T31] Rebooting in 86400 seconds..